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FOREWORD 


'It  wasn't  the  Roman  Legions  that  crossed  the  Rubicon,  it  was  Caesar.'  After  ail,  the  Roman 
Senate  had  at  rts  disposal  twice  the  number  of  legions  that  Caesar  commanded,  fhey  were  well 
rested,  weH  provisioned,  and  occupied  good  defensive  positions.  Why,  then,  was  there  no  battle? 

The  question  is.  of  course,  rhetorical.  There  was  no  battle  because  the  defenders  had  no  stomach 
for  standing  up  to  Caesar,  the  man  who  had  proven  himself  to  be  the  outstanding  commander  of 
his  day.  His  skill  at  planning  was  superb,  his  ability  to  react  to  developments  on  the  battlefield  was 
unmatched  and,  perhaps  most  significant,  he  never  lost  'control'  of  his  troops.  As  he  committed  his 
forces  to  battle,  he  always  retained  an  avenue  of  escape,  and  an  ability  to  disengage  his  forces  if 
the  battle  were  going  badly.  This  kept  tactical  setbacks  in  battle  from  becoming  catastrophes. 

The  above  is  just  one  example  of  a  fighiing  force  that  overcame  enemy  forces  (otherwise  every  bit 
as  capable)  due  to  better  command  and  control. 

Ten  years  ago.  a  group  of  analysts  gathered  under  the  sponsorship  ol  the  Office  of  Naval 
Research  and  the  Massachusetts  Institute  of  Technology  to  ask  the  question.  Are  there  elements 
that  can  be  identified  that  make  for  successful  command  and  control  on  the  battlefield?  Can  these 
be  identified,  quantified,  analyzed,  and  taught? 

This  initial  gathering  grew  into  a  senes  of  nine  annua!  workshops  on  Command  and  Control  that 
presented  pioneering  work  in  the  field  and  established  command  and  control  research  as  an  area 
of  basic  inquiry.  Perhaps  more  important,  their  influence  caused  the  defense  community  to  realize 
that  good  C3  depended  on  more  than  good  communications  and  automatic  data  processing 
equipment.  A  Defense  Science  Board  task  force  reached  the  same  conclusion  and  it  established  a 
Command  and  Control  Research  Program  at  National  Defense  University  'o  encourage  and 
co-ordinate  research  in  command  and  control  with  a  special  emphasis  on  joint  opt  chons.  Three 
years  ago,  it  was  recognized  that  the  field  had  matured  sufficiently  to  pass  the  sponsorship  to  the 
Basic  Research  Group  of  the  Joint  Directors  ot  Laboratories,  an  organization  that  has  full 
participation  from  all  three  military  departments. 

The  1988  Symposium  on  C2  Research  was  held  at  the  Naval  Postgraduate  School  and  the 
Monterey  Resort  Inn  in  Monterey,  California,  from  the  7th  to  the  9th  ol  June  This  was  the  second 
annual  Symposium  sponsored  by  the  Basic  Research  Group  o'  the  Technical  Panel  on  C3  ol  the 
Joint  Directors  of  Laboratories  The  Symposium  was  organized  into  four  working  groups,  each  one 
of  which  provided  a  track  throughout  the  three  days  The  program  included  five  plenary  sessions, 
four  of  them  featured  a  presentation  by  an  eminent  speaker,  while  the  filth  one  provided  an 
opportunity  tor  assessing  the  symposium  and  the  work  presented.  This  volume  contains  most  ot 
the  papers  presented  at  the  symposium. 

The  first  plenary  speaker.  Vice  Admiral  Jeny  O  Tuttle,  USN,  director  of  J-6  (Command.  Control 
and  Communications  Systems)  of  the  Joint  Chiefs  of  Stall,  discussed  C3  needs  Irom  the 
commander's  perspective  His  compelling,  and  entertaining  remarks  impressed  on  the  pa  ticipants 
the  fundamental  shift  that  has  taken  place  in  the  defense  community  The  community  recognizes 
that  effective  command  and  control  is  a  vital  ingredient  in  military  success,  every  bit  as  important  as 
good  communication  systems  and  indeed  good  weapon  systems  He  challenged  the  symposium  to 
explore  the  fundamentals  ot  command  and  control  and  help  the  defense  community  develop 
materials  that  could  be  used  in  instruction  and  training  of  senior  military  officers 


The  second  plenary  speaker.  Dr.  Harold  W.  Sorenson,  Chief  Scientist  of  the  Air  Force,  talked  about 
lessons  framed  and  changes  in  perspective  during. his  tenure  as  chief  scientist  regarding  the 
development  and  use  of  C3  systems.  Mr.  Edward  Brady;  vice  president  of  MITRE,  addressed  C3 
problems  from  the  CtNCs  perspective  using  "a  top  down  approach.  Finally,  Dr.  Harry  L  Van  Trees, 
presented  a  personal  but  comprehensive  view  and  assessment  of  progress  in  C3  research  during 
the  last, ten  years.  We  are  very  pleased  that  several  of  the  speakers  provided  a  written  version  of 
their  talk  for  inclusion  in  this  volume.  These  papers  are  to  be  found  in  the  first  section.  Invited 
Papers.  We  also  fake  this  opportunity  to, thank  the  four  speakers  for  their,  presentations  and  for 
their  participation  in  the  lively  discussions  during  the  symposium.  They  set  the  tone  for  the.technical 
program  of  the  meeting  and  provided  the  basis  for  many  of  the  discussions  during  and  between  the 
sessions. 

The  first  working  group,  Theory  and  Models  of  C3*  was  chaired  by  Dr.  Richard  P.  Wishner  from 
Advanced  Decision  Systems.  The  presentations  ranged  from  the  most  recent  update  of  the  C3 
Reference  Model  to  mathematical  models  of  the  C2  process,  arid  to  specific  technical  problems 
such  as  dynamic  resource  allocation  or  data  fusion. 

The  second  working  group,  C3  Systems  and  Components,  was  chaired  by  Prof.  John  H.  Lehoczky 
from  Carnegie-Mellon  University.  From  the  twenty  three  papers  originally  scheduled,  eight  were 
not  presented,  primarily  because  of  the  freeze  in  travel  that  was  in  effect  at:the  time  of  the 
symposium.  Some  of  the  authors  who  were  not  able  to  attend  did  submit  their  papers  and  since  the 
circumstances  were  beyond  their  control  we  broke  with  custom  and  included  the  papers  in  this 
volume.  The  papers  in  Section  3  emphasize  communications,  computer  science,  and  networks. 

The  third  working  group.  Decision  Support  Systems  and  Behavioral  Aspects  of  C3,  v/as  chaired  by 
Dr.  Stanley  M.  Halpin  of  the  Army  Research  Institute.  Sixteen  papers  are  included  in  Section  4. 
They  range  in  content  from  organization  theory  to  presentation  of  experimental  results  to 
knowledge  based  decision  aids.  The  human  element  and  its  impact  on  system  performance  and 
system  design  constituted  one  of  the  main  threads  in  the  sessions. 

The  fourth  working  group.  Testing  and  Evaluation  of  C3.  was  chaired  by  Dr.  Stuart  Starr  of  the 
MITRE  Corporation.  This  group  of  papers  was  characterized  by  the  strong  effort  by  the  chairman  to 
integrate  them  and  present  a  sweeping  view  of  the  problems,  issues,  and  approaches  to  testing 
and  evaluation.  Thirteen  of  the  twenty  three  papers  are  included  in  Section  5. 

On  the  last  day  of  the  Symposium,  a  questionnaire  was  distributed  to  the  attendees  with  the 
request  that  the  fill  it  out  anonymously.  The  purpose  of  the  questions  was  to  identify  the  strengths 
and  weaknesses  of  the  Symposium  design  and  solicit  ideas  for  its  improvement.  There  are  three 
issues  that  a  substantial  number  of  respondents  raised.  The  first  v/as  that  the  demarkation 
between  working  groups  was  not  clear,  with  the  result  that  attendees  had  diff, cully  selecting  the 
papers  that  interested  them  or  that  similar-material  was  presented  in  different  working  groups.  In 
the  current  s,mposium  design,  prospective  authors  indicate  the  working  group  they  prefer  and,  in 
general,  their  wish  is  respected.  The  working  group  chairmen  grouped  the  selected  papers  into 
sessions  in  the  best  way  possible.  The  process  was  done  in  a  decentralized  manner.  An  alternative 
design  is  for  a  program  committee  consisting  of  the  four  working  group  chairmen  and  the 
Symposium  chairmen  to  consider  aifthe  papers,  together,  organize  the  selected  papers  into 
cohesive  sessions  and  then  organize  the  sessions  into  tracks.  This  approach  requires  increased 
effort  by  the  program  committee  members,  but  the  result  is  expected  to  be  an  improvement  in  the 
organization  of  the  technical  program.  A  side  benefit  of  the  alternative  approach  is  higher  and  more 
uniform  standards  for  the  selection  of  papers. 


The  second  common  comment  was  that  there  were  too  many  papers  and  a  person  had  difficulty 
not  missing  presentations  that  he  wanted  to  hear.  There  were  a  number  of  suggestions  to  reduce 
from  four  So  three  or.even'two  the  number  of  parallel  sessions.  We  believe  that  part  of  the  difficulty 
’Could  be  resolved  by.  organizing  the  symposium  by  session  rather  than'by  working  group  so  that 
parallel  sessions  do  not  have  overlapping  scope.  We  do  not  believe  that  the  number  of  parallel 
sessions  should  be'reduced  further;  note  that  in  1 987  there  were  six  parallel  sessions  and  in  1 988 
there  were  only  four. 

The  Symposium  is  a  unique  forum  that  brings  together  persons  who  are  doing  basic  research  on 
C2,  whether  in  academia,  government  laboratories,  or  industry,  sponsors  arid  users  of  the  basic 
research,  and  some  -  riot  enough  yet  from  the  operational  qomrhunity.  C2  has  a  very  broad 
technological  and  behavioral  base  and  we  have  been  striving  to  (rapture  this  breadth  in  the 
Symposium.  The  individual  technologies  or  sciences  have  disciplinary  forums  such  as  the  technical 
meetings  qrganized-by-professionab'societies  in  communications,  computer  science,  control 
theory,  psychology,  etc.,  where  results'can  be  presented.  One  of  the  roles  of  the  Symposium  is  to 
Keep  reminding  tire  attendees  of’the  breadth  and  complexity  of  Ca  so  that,  as  the  saying  goes,  we 
do  not  miss  the  forest  for  the  trees.  "  - 

The  third  comment  concerned  the  proceedings  and  the  need  to  have  the  papers  distributed  early. 
At  the  time  of  this  writing  the  expectation  is  that  the  proceedings  will  be  distributed  in  September, 
two  months  earlier  than  in  1 987.  It  is  not  possible  to  have  them  ready  much  earlier  than  that,  unless 
authors  are  requested  to  submit  their  papers  before  the  meeting.  Many  authors  prefer  to  present 
the  paper  first,  receive  feedback  and  then  write  the  version. to  be  published.  In  this  way,  the  most 
recent  work  in  the  area  appears  in  the  written  record..  While  every  effort  will  be  made  to  publish  the 
proceedings  in  as  timely  a  manner  as  possible,  for  1989  we  will  continue  the  practice  of  distributing 
a  complete  set  of  abstracts,  better  organized  and  with  an  index,  at  the  Symposium,  to  be  followed 
by  the  Proceedings  soon  after.' 

Finally,  we  would  like  to  thank  the  four  working  group  chairmen.  Dick  Wishner,  John  Lehoczky, 
Stan  Halpin,  and  Stu  Starr  whose  technical  judgement,  hard  work,  and  commitment  produced  the 
1988  Symposium  which  was,  according  to  your. comments,  a  success.  We  would  like  to  express  on 
behalf  of  all  of  the  attendees  our  appreciation  to  Ms.  Inara  Gravitis  of  SAIC  who,  as  the 
administrator  for  the  Symposium,  made  it  happen. 

We  are  already  planning  the  1989  Symposium  that  is  to  be  held  at  the  National  Defense  University, 
Fort  Leslie  J.  McNair,  Washington  DC  on  June  27  -29.  We  expect  to  see  you  all  there. 


Alexander  H.  Levis  Stuart  £  Johnson 

Cochairmen 
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C3,  AN  OPERATIONAL  PERSPECTIVE 


Vice  Admiral  Jerry  O.  Tutfle 
Director,  Command,  Control  and  Communications 
Systems  Directorate 
•The  Joint  Chiefs:  of  Staff 


Good  Morning,  Dr.  Johnson,  Dr:  Jones, 
Ladies  and  Gentlemen,  leading  scientists  of  the 
world.  I  am  delighted  and  humbled  to  address 
such  an  august  group. 

All  of  you  are  the  reason  why  I  am  in  my 
current  position  as  the  director.  Command, 
Control,  and  Communications  Directorate,  in 
the  Joint  Chiefs  of  Staff  and  why  I  am  here 
today.  Because  of  your  assistance  during  my 
40  months  as  a  battle  group  commander,  some 
people  mistakenly  thought  that  I  know  a  great 
deal  about  C3  systems.  I  owe  you  and  your 
counterparts  an  enormous  debt  of  gratitude. 

Early  in  my  tour  as  a  carrier  battle  group 
commander,  I  recognized  the  tremendous 
resource  of  knowledge  and  technology  those  of 
you  in  our  DOD  laboratories  possessed.  Until 
then  my  command  and  control  universe  had 
been  limited  to  the  unnecessarily  restricted 
radius  of  200-300  nautical  miles  of  the 
customary  range  of  action  for  the  carrier  air 
wing. 

I  immediately  sensed  that  a  carrier  battle 
group  should  control  the  battlefield  under  an 
arbitrary  1,000-nm  envelope.  Nevertheless  I 
was  sagacious  enough  not  to  specify  any  dis¬ 
tances  lest  they  be  considered  limits  and  chis¬ 
eled  in  stone.  I  did  not  want  to  accept  any  lim¬ 
its.  From  a  commander's  viewpoint,  I  had 
created  a  major  C3  challenge.  With  the  then- 
existing  systems,  I  might  just  as  well  have  been 
in  a  55-gallon  drum. 

Fortunately  and  solely  by  chance,  I  turned 
to  you  in  the  laboratories  to  satisfy  my 
requirements  because  I  realized  that  the  system 
was  too  slow  to  meet  my  needs  during  my 
tour.  You  responded  magnificently.  Through 
frustration  and  necessity,  I  discovered  the 
tenets  so  ably  articulated  in  the  National 
Defense  university's  and  AFCEA's  Science  of 
Command  and  Control:  Coning  with 
Uncertainty  I  recommend  it  to  you  for 


reading.  I  read  only  the  foreword  and 
introduction,  and  purposely  did  not  read  any 
further.  It  was  clear  that  the  editors/authors 
had  masterfully  captured  the  essences  .of 
Command.  Control  and  Communications  (Dr. 
Stuart  Johnson  and  Dr.  Alexander  Levis, 
editors).  Reading  further  would  have 
conditioned  me  to  restate  unintentionally  what 
you  already  have  available.  Besides,  I  have 
some  other  insights  that  I  want  to  share  with 
you. 

Frankly,  the  challenges  and  responsibilities 
for  resolving  those  existing  C3  shortfalls  reside 
primarily  with  me  and  are  not  due  to  a  lack  of 
technology.  Clearly,  there  are  unconquered 
and  undiscovered  spheres  of  research  and 
technology  that  remain  and  existing  technology 
that  needs  to  be  applied  and/or  matured.  The 
most  fruitful  areas  reside  in  improving  the 
"System";  Management;  Changing  Cultures; 
and  yes,  Leadership. 

I  am  totally  convinced  that  experts  like  you 
can  engineer,  design,  and  package  C3  systems 
to  satisfy  our  every  recognized  C3  requirement 
if  the  users  can  properly  articulate  what  is 
needed.  That  is  the  gulf  we  must  bridge.  As 
your  director  for  C3  systems,  I  hope  to  con¬ 
tribute  to  and  exploit  the  vast  capabilities  that 
already  exist.  I  am  confident  about  our 
prospects.  This  symposium,  as  well  as  books 
like  Science  of  Command  and  Control:  Coping 
with  Uncertainty  (Dr.  Johnson-Frank  Synder, 
NWC-Tony  Ottinger,  Harvard-Carl  Jones), 
helps  to  inspire  this  optimism. 

My  staff  had  prepared  a  "Strawman"  for 
this  address.  Frankly,  it  missed  the  mark 
because  it  was  prepared  by  those  who  were 
products  of  the  existing  system. 

The  laws  of  physics  have  not  changed  since 
creation.  Our  creator  kindly  provided  us  with  a 
spectrum  between  D.C.  and  light,  and  you 
gentlemen  are  masters  of  exploiting  this 
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.Spectrum..  Eber  optics  are.an  exciting  e.  pie 
of  a  capability  ihapstill  begs  to  be  jully 
exploited 

Let  me  tell  y  ou  where  I  have  channeled  ruy 
energies  during  this  past  year  for  your  critical 
review  and  conclude  wth  an  ongoing  veritable 
C3  success  stoty  that  needs  to  be  told  and.  one 
in  which  you  should  feel  pride,  because  you 
,  have  made  it  possible. 

Permit  me  to  proceed  through  the  salient 
topics  in  mote  or  less  chronological  order. 

When  1  was  informed  of  my  current 
assignment,  I  thought  that  I  should  learn  about 
the  Worldwide  Military  Command  and  Control 
(WWMCCS)  ADP  System.  To  me,  they  were 
just  letters  in  the  alphabet.  While  at 
CINCLANTFLT,  I  arranged  to  be  given  a 
"Dick  and  Jane  show  and  tell." 

An  Army  Major  struggled  through  a  hands- 
on  demonstration  but  frequently  deferred  to  a 
lady  who  worked  on  the  staff  in  logistics.  She 
politely  provided  many  of  my  answers,  but  I 
came  away  with  the  perception  that  WWMCCS 
ADP  was  murderous  to  the  user,  a  "White 
Elephant,"  correctly  put  antiquated,  and  being 
used  by  the  wrong  people.  More  accurately, 
the  people  who  should  have  been  using  the 
system  were  not.  The  worldwide  military 
command  and  control  ADP  system  was  not 
being  used  to  command  and  control  anything. 

In  order  to  become  famiuar  with  the 
system,  I  had  a  WWMCCS  intercomputer 
network  (WIN)  terminal  installed  in  my  office 
prior  to  my  arrival.  My  discovery  was 
astounding,  shocking,  unbelievable,  and 
depressing.  The  fastest,  most  secure,  perva¬ 
sive  C3  system  was  not  being  utilized  by  oper¬ 
ators.  (They  did  not  know  how.)  No  terminals 
had  been  installed  in  our  numbered  fleet  flag¬ 
ships.  There  were  no  "yellow  pages"  (that  is,  a 
list  of  who  were  on  the  system)  and  no  catalog 
of  what  programs  or  files  were  available  in  the 
system.  Most  amazing  of  all,  the  chairman  of 
the  Joint  Chiefs  of  Staff  could  not  send  his 
CINC's  messages  due  to  a  lack  of  procedures. 
I  discovered  that  more  data  were  transferred 
through  the  ether  every  night  by  the  joint 
deployment  agency,  those  concerned  with 


logistics,  etc.,  than  went  over  the  autodin 
system.- 

Believing  in  the.  Christopher's  motto  apho¬ 
rism  that-it  is  better  to  light  one  candle  than  to 
cursr.the  darkness,  I  initiated  an  awareness 
program,  recommended  to  the  Operations 
Directorate  on  the  Joint  and  Unified/Specified 
Commands  use  of  the  existing  system,  and 
openly  marketed  its  capability. 

Today,  the  chairman  can  send  messages 
immediately  to  any  or  all  of  his  CINC's 
through'  a  teleconferencing  net;  OPLANS, 
GPORDS,  warning  orders,  alert  orders,  and 
execute  orders  are  routinely  sent  to  the  CINC's 
and  joint  task  force  commanders;  all  numbered 
fleet  flagships  now  have  WIN  terminals; 
OPSEC  has  improved  greatly;  and  the  CINC's 
are  now  unanimously  in  favor  of  the  follow-on 
WWMCCS  information  system  or  "WIS." 
Today,  CINCCENT,  CINCLANT,  MAC,  and 
CINCSOUTH  use  the  WIN  system  daily  for 
command  and  control  of  real  world 
contingencies.  This  is  quite  an  accomplishment 
when  one  considers  that  some  of  their  opera¬ 
tors  could  not  log  on  to  the  system  as  recently 
as  December  1987. 

WIS  had  experienced  a  turbulent  funding 
history  and  could  not  have  survived  without  the 
successes  demonstrated  on  the  WIN  network. 
Despite  the  rocky  road  of  WIS,  at  5  test  sights 
early  next  year  we  should  field  a  local  area 
network;  an  automatic  message-handling 
system;  and  the  first  increment  of  the  Joint 
Operational,  Planning,  Execution,  SSystem  (or 
JOPES)  or  a  link-up  of  the  Joint  Deployment 
System  and  the  Deliberate  Planning  System. 

That's  the  good  news!  The  bad  news  is 
that  is  should  not  have  taken  that  long  or  cost 
as  much  as  it  did  to  design  and  field  a  local  area 
net  and  an  automatic  message-handling  system 
The  blame  certainly  does  not  rest  with  you  in 
the  laboratories.  However,  it  does  lie  with 
those  who  failed  to  state  the  requirements 
adequately,  failed  to  include  the  users  from  the 
beginning,  imposed  incredibly  stringent  test 
and  evaluation  requirements,  established  an 
unwieldy  organization  whereby  no-one  could 
be  held  accountable,  and  then  tolerated  poor 
management  until  the  past  year. 
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Where  are  we  headed?  Hopefully,  the 
release  of  GECOS-8  will  make  the  WINfar 
-more  capable,  faster,  user-friendly,  and  greatly 
expand  the  sample  of  Users.  WIS  wilrcome  to 
fruition  and.with  the  assistance  of  a  system  that 
I  have  put  together  during  the  past  fr’ years 
define.the.execudon  phaseof  JOPES  better. 

Being  from  outside  the  receptive  C3 
community  when  I  reported  a  year  ago,  I 
wanted  to  remain  open  minded  in  order  to  team  ' 
where  the  problems  were  while  not  revealing 
my  ignorance  and  thereby  losing  credibility.  :I 
became^  actively  .involved-  with  the  C3 
professional  groups*,'  such  as^AFCEA,  IEEE, 
AIAA,  and  EIA..  They  provided-  me  with; 
valuable  feedback.  I  learned  that  we  were  not 
making  our  reqnirements.known  to  industry. 
We  were  hot  making  available  our  stated  joint 
required  operational  capabilities.  (ROCs)  or 
multiple  required i  operational  capabilities 
(MROC’s)  until  we  went  out  for  RFP’s.  This 
seemed  myopic  to  me,  particularly.in.view  of 
the  fact  that  as  joint  operations  become  far  more 
fashionable,  unquestionably  there. would  be 
more  joint  ROC’s/MROCs.  I  wanted  industry 
to  be  working  on  what  we  need,  hot  what  they 
thought  we  need. 

We  immediately  made  our  ROCs/MROC's 
available  to  industry  so  that  their  technological 
bases  could  be  applied  to  our  requirements 
sooner.  Industry,  I  hasten  to  add,  has  been 
alert  to  making  the  necessary  changes  in  how 
they  conduct  business  since  the  enactment  of 
the  1986  reorganization  act. 

By  reviewing  our  ROC's/MROC's  for 
release,  we  discovered  that  some  had  been 
overtaken  by  events;  that  is,  the  RDJTF  no 
longer  existed,  etc.  Most  were  poorly  written. 

It  was  taking  up  to  3  years  to  validate  require¬ 
ments.  No  review  was  being  conducted  to 
measure  the  effectiveness  of  the  setvices  to 
satisfy  the  CINC's  requirements,  etc.  I  found 
that  the  directive  that  governed  the  ROC 
validation  process  was  of  1982  vintage  and 
seriously  flawed.  We  have  rewritten  it  to  speed 
up  the  process  greatly,  provide  the  CINC's 
with  a  quarterly  situation  report,  and  participate 
actively  in  all  phases  of  satisfying  the  require¬ 
ment  from  validation  to  full  operational  capa¬ 
bility. 
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For,  openers,  /.  found  that  we  iriistook 
"feasibility.";  "practicality",  "affordaKlity'Vand 
"priorities"  for  "requfrements." \l.can  count  to 
four.  If  one  of  those  CINC's  says  he  has  a 
requirement^  digit  this  three-star  (and  certainly 
-  not  a^committee  bf  iron-majors)  is  riot  going  to- 
teil  him  that  he  does  riot  have  acquirement.  If 
general  Piotro wslci, -  ClNCSPACE,  says  that 
he  needs  to  talk  with'  Vovager  on'the  ether  side 
ofPluto  in.lessthan’4  hours,  then  he  has  a 
requirement!  !  theri'eome  to  you  to  bail  me  out 
arid  find  some  transmission  media  faster  than 
light  ^  ~ 

The  entire  G3  operational  requirements 
process  has  made  major  progress,  but  it  is  still 
unsatisfactory.'  Nevertheless,  we  will  prevail. 

.There  will  Be  an  ever-increasing  number  of 
joint  requirements  as  we  conduct 'far  more  joint 
exercises.  This  is  good  because  it -.will  nurture 
interoperability.  Since  Grenada,  we  have  come 
light  years  in  our  ability  to  interoperate.  How¬ 
ever,  it  is  not  enough  that  the  US  Air  Force, 
Marines,'  Army,  and  Navy  are  interoperable. 
We  m5st  be  able  to  operate  together  with  our 
allies  while  using  compatible  C3  systems.  This 
encompasses  language,  procedures,  techno¬ 
logically  compatible  C3  systems,  doctrine,  etc. 

We  are  actively  pursuing  all  of  these  areas, 
arid,  frankly,  I  am  pleased  with  progress.  I  do 
riot  believe  that  we  are  mistaking,  activity  for 
achievement.  B.  Gen.  George  Bombcl  is 
doing  a  brilliant  job  in  leading  the  joint  tactical 
C3  agency. 

Interoperability  must  start  from  standards. 
We  in  J-6  simply  were  not  taking  an  active 
enough  role  in  establishing  standards  and  in 
ensuring  that  C3  system  developers  were 
rigidly  adhering  to  these  standards.  I  do  not 
want  to  reveal  that  embarrassing  state  of 
affairs,  but  we  are  very  much  involved  in 
creating  standards  and  ensuring  compliance. 
Some  of  the  mote  salient  areas  that  we  are 
pursuing  are  fiber  optics,  HF  anti-jam  wave 
form,  over-the-air  crypto  rekeying  (more  on 
that  later),  etc. 

Perhaps  the  most  significant  accomplish¬ 
ment  regarding  standards  has  been  the  utiliza¬ 
tion  of  an  existing  standard  —  the  message  text 
format  (MTF)  standard.  When,  by  fiat, 
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JINTACGS  MTF  became  the  standard  message 
format.for:the  l32  selected  messages. on  30 
September  1986;  forwarious  reasons  .(primarily, 
ignbraricejit  was  considered  that  they  should 
be '  Utilized  for  exercises  or.  contingency 
operations  only.  Admittedly,  many  o£  the 
message!  formats  were  forsfiore  bombardment, 
naval  gunfire  support,  etc.  Nevertheless,  it  is 
foolish  to  introduce  ari  unfamiliar  procedure  or 
system  when  embarking,  on  contingency 
operations.  Clearly,  we  Had  to  find;a  way  to 
familiarize  everyone  with  MTFS  by  using  them 
routinely. 

To  provide  leadership, I.  directed  that.al! 
messages  drafted  by  my,  directorate  be  in  MTF. 
The  response  by  the  CINC's  has  been 
phenomenal.  As  recently  as  this  past 
December,  for  all  practical  purposes,  the 
Military  Airlift  Command  did  not  use  MTF. 
On  their,  recently  concluded  exercise,  98 
percent  of  all  messagesoriginated  by  MAC, 
and  82  percent  of  the  messages  received  from 
their  components  were  in  standard  MTF. 

What  we  have  discovered  by  daily  use  of 
MTF  is  that  our  automatic  message  distribution 
systems  require  reprogramming.  This  discov¬ 
ery  led  to  the  realization  that: we  had  three 
different  automatic  message  distribution  codes  - 
-  one  for  Air  Force,  another  fonNavy,  and  yet 
another  for  NATO  -  all  of  which  were  ineffi¬ 
cient  computer  programs.  As  I  speak,  we  are 
working  on  a  standard,  efficient  automatic 
message-routing  code  for  us  and  our  allies. 

As  an  operator,  one  of  my  objections  to 
JINTACCS  MTF  was  to  an  air  gap  and 
message  format  change  tit  the  joint  task  force 
level.  Because  the  joint  task  force  is  the  last 
place  that  you  want  a  discontinuity,  we  have 
now  corrected  this  discrepancy,  and  the  system 
ts  transparent  from  the  unit  level  to  the  national 
command  authorities.  The  message  I  want  to 
deliver  with  the  MTF  story  is  that  it  is  another 
example  of  a  capability  that  existed  but  was 
being  seriously  restricted  by  ignorance  and  lack 
of  procedures.  It  also  provides  a  convenient 
lead-in  to  my  next  topic. 

No  system  is  any  faster  than  its  control 
mechanism.  Regrettably,  our  C3  system  is  far 
too  dependent  on  recorded  messages.  This  is 
unacceptable,  certainly  for  air  defense  and  most 


other  dynamic,  scenarios.  .Even  those ‘who 
graduated  magna  cum  laude  from  Evelyn 
Wood's  speed  reading  course  cannot  envision 
.the.  picture  from  a  papebba'sed  system;  JBy. 
achieving  universal  use  of  the  machine-readable 
MTF,  at  least  we  will  be  able  to  correlate  MTF 
reports  witbother  faster  sensor-derived  data  in 
order  to  reduce. the  uncertainty  addressed  in  the 
National  Defense  University  book':  Science  of 
Command  and  Control:  Gooing  with  Uncer¬ 
tainty.  It'is.  this  uncertainty  that!  want  to 
ameliorate,  Having.been  in  command  of  some¬ 
thing  for  the  greater  part  of  my  Navy  career. 

I-  am,  confident  that,,  with  minimum 
resources,  I  can  cause  numerous  existing  data 
bases  fo.be  fused'in  order  to  form  a  common 
red  and'  blue  data  base  that  can  be  used  at  all 
echelons  of  command  —  front  the  national 
command  authorities  to  the  individual  missile 
shooter  on  scene.  The  data  base  at  each  tier  in 
the  echelon  can  be  tailored  locally  by  granular¬ 
ity  or  geography  to  suit  the  commanders' 
needs. 

This  tailored  composite  red/blue  picture 
must  be  projected  in  a  manner  so  that  it  can  be 
conveniently,  constantly,  and  critically 
analyzed  and  challenged. 

The  creation  and  management  of  these  data 
bases  can  be  made  far  more  automated,  and  a 
more  equitable  division  of  labor  in  intelligence 
production  at  all  echelons  can  be  achieved 
while  reducing  redundancies.  There  can  be 
economies  made  in  personnel  resources,  but, 
more  importantly,  alcon  (all  concerned)  will  be 
operating  from  a  common  data  base. 

1  have  initiated  this  effort  in  the  National 
Military  Command  Center,  which  currently  has 
115  individual  systems  (a  number  clearly 
unmanageable),  no  composite  picture,  and  no 
way  to  project  it  automatically  if  we  had  one. 
That  is  not  totally  correct,  inasmuch  as  we  did 
throw  together  a  system  literally  over  night  in 
the  Operations  Center  Decision  Room  (ODCR) 
for  the  recent  U.S./Iranian  encounter  in  the 
Persian  Gulf. 

As  a  result  of  our  being  able  to  project  on  a 
large-screen  display  near-real  time  locational 
data  for  units  in  the  north  Arabian  Sea  and 
Persian  Gulf,  Secretary  of  Defense  Carlucci 


and  Chairman,  JGS,,  Admiral  Crowe  could 
make  farjtfetter  andjfaster-decisionsi.  As  a- 
matter  of  factj  diey  could  sitback  and  observe 
General  Crist  m.Hp'nda  orchestrate  the  entire 
affafii  ;Of  course,  Wefhad  pro  vided  ^General 
Crisfalikecapabdity.,"  '  '  '  "  ' 

With  the  6n-sccne  commander,  RADM 
Tony  Less,  the  CINC  (Gen.  Crist  in -Tampa, 
Florida),  and  SECDEF/Chairman  all  having  the 
same  picture  andsam?  data  bases,  the'require- 
ment  to  communicate  dimihisheti  maHcedlyx'" 

By  having  the  red  and  blue  forces  depicted 
in  one  composite  picture,  the  relative  .'urgencies 
for  decisionmaking  could  be  readily  determined 
and  priorities  made  more  intelligently  . . 

How.  have  we  arrived  at  this  juncture? 
Certainly  not  for  the  lack  of  technology.  It  has 
been  accomplished  by  knocking  down  barriers 
and  changing  a  culture. 

It  started  from  a  Joint  Operational  Tactical 
System  (JOTS)  that  had  evolved  from  a  desk¬ 
top  computer,  tactical  decision  aid,  and  plan¬ 
ning  tool  to  a  management  information  system 
and  thence  to  a  C3  system  -  first  for  a  carrier 
battle  group  commander,  then  for  joint  task 
force  commander,  then  for  a  numbered  fleet 
commander,  and  finally  for  a  fleet  commander. 
Now  we  are  developing  it  for  the  world  duty 
officer. 

At  this  juncture,  I  want  to  point  out  an 
illness  in  our  systems  approach  that  must  be 
ameliorated.  It  is  natural  and  easy  to  sec  why  it 
happens,  and  it  is  the  reason  why  we  had  141 
separate  C3  systems  in  the  NMCC. 
Understandably,  any  system's  requirement  is 
articulated  from  the  perspective  of  the  echelon 
of  command  for  whom  the  requirement  exists. 
There  is  little  or  no  consideration  of  where  the 
system  that  satisfies  these  requirements  fits  into 
the  whole. 

The  situation  is  further  exacerbated  by  the 
executive  agent  and  program  manager  for  the 
system  because  they  want  and  need  to  have 
limits  on  their  project. 

There  is  a  project  rapidly  maturing  today 
that  feeds  from  multiple  external  sensors,  but  it 
is  a  closed  system  in  order  to  satisfy  a  single¬ 


attack, option  when  its  unique  sensor  .could  be 
used  to  .  great  advantage- by,'  many  other 
weapons  systems.  I  must  arrange, to  have  this 
-system  interoperate  digitallywith  many  other 
systems.-  ' 

The  worse  examples  of  this  can  be  found  in 
the"  intelligence  systems,  I  call  them 
'.'stovepipes."  This  is riot  an  indictment  of  the 
intelligence;  community  by  any  stretch  of  the 
imagination,  britrather  a  recognition  of  the  fact 
that  the  titularhead  for  all  of  their  systems  is  a 
J;2,  of  in  telligence  officer—  not  the  officer  in 
-charge  who’ has  the  ultimate  responsibility  in 
Iris  Area  Of  Responsibility  (AOR). 

Currently,  intelligence  consumes  approxi¬ 
mately  65  percent  of  our  communications 
capacity  and  is  expected,  to  increase  to  85 
percent  during  a  conflict.  Clearly,  we  need  to 
go  on  a  communications  diet  and  analyze  data 
as  opposed  to  handle  data.  I  am  working  with 
DIA  and  NSA  in  order  to  achieve  a  more 
comprehensive  and  composite  picture  for  all 
echelons  of  command  while  burning  up  less  of 
the  airways. 

Returning  to  the  Joint  Operations  Tactical 
System  -  JOTS,  I  was  demonstrating  its  capa¬ 
bility  to  a  JCS  operations  officer  one  afternoon 
after  having  just  reported  aboard.  He  said: 
"That’s  great!  Have  it  in  place  for  tomorrow’s 
first  reflagged  tanker  escort  mission" 
(Operation  "Ernest  Will"). 

We  worked  all  night  getting  the  connectiv¬ 
ity  for  the  JOTS  picture  back  to  the  Pentagon. 
We  took  the  officer  in  tactical  commands 
(OTCIXS)  JOTS  broadcast  off  the  Indian 
Ocean  satellite  and  had  my  friends  in  Naples 
rebroadcast  over  the  Atlantic  satei...e  to 
CINCLANTFLT  in  Norfolk  and  over  landline 
to  me  in  the  crisis  action  room.  Wanting  to  bet 
on  aces,  straights,  and  sure  things,  I  did  a  like 
"M"  hop  in  the  pacific  through  Guam  and 
NOSC,  San  Diego. 

Now  the  connectivity  is  not  impressive 
and,  in  fact,  is  routine,  but  what  occurred  that 
morning  at  0630  when  SECDEF  and  CJCS 
watched  (near- real-time,  at  the  time  of  TV)  the 
Ernest  Will  ships  steam  through  the  Straits  of 
Hormuz  and  out  of  the  silkworm  envelope 
changed  a  culture. 
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Afterwards,  SECDEF  picked  up  the  red- 
phone  and-  said:  "Chris,  super  job,"  he 
departed  saying  that  this  was  the  first  time  that, 
we  had.beat  CNN:  What  General  Crist  could 
not  figure  out  was  why  SECDEF  and  the 
chairman  had  been  so  quiet  and  had  not  asked 
any  questions. ' 

Well,  I  rapidly  became  the  most  popular 
three-star  in  DOD.  Every  four  star  whose  area 
of  responsibility  I  had  used  to  pipe  a  picture  of- 
General  Crist's  AOR  to  Washington,  called  me 
and  "reviewed  my  heritage". 

General  Crist  had  changed  it -all,  for  he 
intrepidly  said  that  he  did  not  care  if  his  superi¬ 
ors  had  any,- arid  all,  information  as  long  as  he 
had  the  same  information  at  the  same  time.  We 
provided  him  with  the  same  capability  that  we 
possessed,  and  we  have  grown  together  ever 
since. 

The  other  morning  around  0530  it  was 
gratifying  to  be  able  to  sit  there  and  have  the 
complete  picture.  However,  there  is  another 
major  issue  here.  All  depicted  data  were  being 
challenged  constantly  and  by  every  echelon  of 
command.  If  the  same  information  had  been  in 
message  format  or  in  a  data  base,  the  degree  of 
uncertainty  would  justifiably  have  been  greater. 

We  did  not  carry  the  red,  blue,  commercial, 
or  unknown  air  tracks  that  day  because  (RADM 
Tony  Less)  thought  that  if  every  5  minutes 
JOTS  reporting  was  good,  every  minute  would 
be  great.  So  he  strangled  the  system. 

I  am  so  committed  to  developing  this 
system  that  will  provide  worldwide  tactical  C3 
to  the  NMCC  and  all  the  CINC's  for 
contingencies  covering  the  spectrum  from  low- 
intensity  conflict  to  theater  nuclear  war  that  I 
have  established  an  entire  division  on  my  staff 
to  work  the  problem. 

I  want  this  tactical  C3  system  to  be  used 
continuously,  be  reliable,  be  fairly  robust,  and 
become  ever-increasingly  less  vulnerable.  It  is 
my  "Use.  Learn.  Develop"  philosophy. 

To  utilize  the  foregoing  and  existing  C3 
systems  better,  we  have  just  concluded  an 
over-the-air  rekeying  for  crypto  devices 
worldwide  exercise.  We  demonstrated  that  we 


can  send  a.;  crypto  key  list  over  existing 
communications  chanriels  covered  by  KG-84's 
and  yinson  crypto  devices  —  a  capability  that 
Has  existed  for  a  long  time  but  had  never  been 
utilized,  'I  can  not  even  imagine  the  amount  of 
money,  trees,  arid  careers  that  will  be  saved  by 
this  procedure) 

As  I  approach  the  end  of  this  presentation 
you  will  note  that  I  have  .not  asked  you  for  a 
thing.  The  reason  is  that  until  I  can  fully 
exploit  the  capabilities  that  you.have*  already- 
provided,  I  do  not  intend  to  ask  for  more.  Just 
continue  your  superior  work. 

By  the  way,  if  you  solve  the  multi-level 
security  problem,  I’d  be  very  interested.  We 
are  devoting  tremendous  resources  to  this  issue 
and  may  be  demanding  of  our  hardware  and 
software  engineers  unrealistically  lofty 
requirements  and  an  electronic  system  to 
compensate  for  a  lack  of  discipline  in  our 
security  system. 

We  need  to  work  together  on  two  things: 

1)  Embedded  crypto  in  our  C3  systems 

2)  GPS  weapons  systems  integration. 

Now  I  would  like  to  conclude  with  a 
success  story  that  is  largely  unrecognized  and 
one  for  which  you  are  largely  responsible. 

Let’s  mentally  take  a  trip  halfway  around 
the  world  to  the  mouth  of  the  cradle  of  civiliza¬ 
tion.  There  we  see  French,  British,  Belgian, 
Dutch,  Saudi,  and  Italian  ships  steaming  in 
hostile  waters  with  numerous  oil  tankers,  ships 
carrying  military  cargo,  Iranian  combatants, 
and  (yes!)  a  sizable  U.S.  naval  presence. 

All  of  these  link-capable  ships  are  in  the 
U.S.'s  and/or  Saudi  AWAC’s  link  and  the  E- 
2C's  link  when  present.  The  U.S.  ships  can 
communicate  on  secure  with  the  allied  ships  in 
the  theater,  witn  aircraft  for  deconfliction  with 
the  reflagged  tankers,  ashore  with  all  of  the 
gulf  coast  states'  Air  Forces  and  Navy  head¬ 
quarters,  and  with  our  embassies. 
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Now  consider  that  the  CINC  who  has  the 
ultimate  responsibility  for  this  theateriesides 
on  the  other  side  of  the  world, V7, 000  miles 
away.  His  Nayy  component cg'mmander.is  in 
Hawaii;  his  joint  task  force 'Commander 
embarked  inr  his  sixth  flagship  in-'the 'north 
Arabian  Sea;  and  his  surface  commander  is  in 
the  gulf.  It  is  testimony,  how.  a  G3  system’  can 
be  engineered  to  support  the  war  fighter.  This 
scenario  is  even  more  noteworthy  when  you 
realize  that  this  was  a  virgin  C3  area  a  year  ago 


and  that  some  who  are  how  communicating 
over  secure  circuits  would  hot  have  exchanged 
greetings  befprc  if  they  had  met  on  the  street. 

Thank  you  for  permitting  me  to  participate 
in  your  symposium.  I  hope,  that  it,  like  the 
county,  fair,  gets  bigger  and  better  every  year. 

I  leave,  you  with,  this  thought:  turbulent 
progression  is  preferable  to  tranquil  stagnation. 
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Stuart  H:  Starr 


The  MITRE  Corporation 


y 

a.  intfftfostlQh. 

Recently  the  Scientific  Adviser  to  the 
Supreme  Allied  Commander  Europe  (SACEUR)  wrote  to 
a  member  o£  the  Joint  Directors  of  Laboratories 
(JDL)  to  comment  on  the  most  recent  JDL  C3 
Research  and  Technology  Program  (reference  i). 
Based  on  discussions  with  SACEUR's  staff  he 
concluded:  "The  general  feeling  was  that  the 
program  plan  focused  on  the  theoretical  aspects 
and  was  too  detached  from  real  world  C3  combat 
effectiveness.  We  need  to  understand  and  develop 
C3  technology  to  support  operational  needs. 
Thus,  this  program  needs  to  be  a  balance  of 
theory  and  empirical  measurement." 

These  observations  pose  a  critical  question 
for  the  C2  research  community:  what  should  bo 
its  role  vis-a-vis  tho  roles  and  missions  oi  the 
Unified  and  Specified  (U&S)  Commanders- in-Chlef 
(CINCs)?  To  address  that  question,  this  paper 
describes  and  characterizes  the  evolving 
responsibilities  of  tho  U&S  CINCs.  Emphasis  is 
placed  on  tho  enhanced  rolo  of  the  U&S  CINCs 
arising  from  recent  institutional  Initiatives  and 
the  limitations  that  the  U&S  CINCs  face  in 
executing  these  expanded  responsibilities.  In 
light  of  these  needs,  the  position  of  tho  C2 
Research  Community  Is  characterized.  This 
Includes  a  description  of  the  community's  current 
support  to  tho  U&S  CINCs  and  a  projection  of  tho 
role  that  It  could  ultimately  play.  Based  upon 
these  assessments,  several  actions  are  proposed 
to  make  the  C2  Research  Community  more  responsive 
to  the  needs  of  the  U&S  CINCs. 

1.  CINC-Unique  Features 

Figure  l  broadly  depicts  the  geographical 
responsibilities/peace  time  locations  of 
headquarters  for  the  ten  U&S  commands.  The 
precise  composition  of  these  commands  has  changed 
over  the  last  few  years  with  the  creation  of  new 
commands  (e.g  ,  U.S.  Special  operations  Command 
(USSOCOM)),  the  evolution  of  existing  commands 
(e.g  .  creation  of  U.S.  Transportation  Command, 
assimilating  the  Military  Airlift  Command, 
Military  Sealift  Command,  and  Military  Traffic 
Management  Command),  and  the  disestablishment  of 
prior  commands  (e.g.,  U.S  Readiness  Command) 


Figure  1 


From  the  perspective  of  tho  C2  Research  Community 
there  are  several  characteristics  of  the  U&S 
CINCs  that  affect  the  support  they  require. 


First,  the  U&S  CINCs  can  be  characterized  by 
the  nature  of  their  mission,  warfighting  versus 
support.  For  example,  USTRANSCOM  exists  to 
support  the  other  CINCs  in  the  execution  of  their 
operational  responsibilities  and  this  support 
role  strongly  affects  their  C3  needs.  Second, 
the  U&S  CINCs  can  bt.  distinguished  by  the 
locations  of  their  headquarters  vis-a-vis  .heir 
theaters  of  responsibility.  For  example, 
USCENTCOM  has  its  headquarters  in  Tampa,  Florida, 
while  its  area  of  responsibility  is  Southwest 
Asia  This  has  serious  implications  on  its  C3 
infrastructure  needs.  Third,  the  level  of  C3 
system  support  from  the  Services  and  Defense 
Agencies  varies  significantly  across  the  U&S 
CINCs.  For  example,  close  ties  exist  between 
CINCSAC  and  the  Air  Force  and  CINCLANT  and  the 
Navy.  In  addition,  Defense  Agencies  have  set  up 
several  field  offices  to  assist  the  CINCs  on  C3- 
related  activities  (e.g.,  DCA  has  a  European 
office  collocated  with  USEUCOM  in  Stuttgart,  FRG, 
and  a  Pacific  office  collocated  with  USPACOii  in 
Hawaii)  However,  there  are  ca^es,  most  notably 
US  CINC  Southern  Command  (USC1NCSO) ,  where 
organic  and  external  support  for  C3  systems  are 
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extreaely  limited.  fourth,  it  should  b'c 
recognized  that  USSOCOM' is  the  only;U&S  CINC  with 
direct  research,  development,  and  procurement 
authority 

These  observations  suggest  that  each  U&S 
CINC  oust  be-  analyzed  individually  to  identify 
the  specific  assistance  that  it  requires,  froa  the 
C2  Research  Community.  However,  as  shall  be 
explained  below,  there  are  several  roles- that  the 
U&S-  CINCs  play  that  imply  many.  comaon  areas  of 
need  in  C3  support. 

2,  Enhanced  Roles  of  CINCs 

In  recent  years,  institutional  initiatives 
have  enhanced  the  roles  of  the  U&S  CINCs  in  four 
areas:  planning,  programming  and ^budgeting; 

requirements  generation,  development  and 
acquisition,  and  training.  This  section  reviews 
those  initiatives,  emphasizing  their  impact  on  C3 
activities  and  the  increased  demands  that  they 
place  on  the  U&S  CINCs. 

a.  Planning,  Programming,  and  Budgeting 

The  DoD  deals  with  the  process  of  resource 
allocation  among  the  Sorvlces  and  'Defense 
Agencies  through  an  integrated  Planning, 
Programming,  and  Budgeting  System  (PPBS),  The 
enhanced  role  of  the  U&S  CINCs  in  each  phase  of 
the  PPBS  Is  discussed  below. 

<l)  Planning 

In  1982,  the  JCS  issued  "Policy  and 
Procedures  for  the  Management  of  Joint  Command 
and  Control  Systems*  (reference  2).  That 
memorandum  tasked  the  CINCs  to  prepare  annual  C2 
System  Master  Plans  as  their  primary  vehicle  for 
identifying  deficiencies  to  the  JCS,  Although 
that  memorandum  is  currently  under  revision,  it 
is  still  the  intent  to  havo  the  CINCs  develop 
plans  that  identify  the  missions  supported  by  C3 
systems,  tho  C3  needs  and  priorities  associated 
with  those  missions,  and  the  mid-  and  long-term 
objectives  to  satisfy  those  needs.  In  addition, 
the  draft  memorandum  requires  the  CINCs  to 
contribute  to  a  JCS - sponsored  Global  C3 
Assessment  (reference  3),  that  assesses  CINC  C3 
capabilities  and  shortfalls  from  a  mission 
perspective 

As  a  complementary  action,  the  Deputy 
Secretary  of  Defense  (DepSecDef)  sought  to 
enhance  the  role  of  the  CINCs  in  the  planning 
process  by  requesting  that  they  submit  annual 
integrated  priority  lists  (IPLs)  (reference  4). 
The  CINCs  were  directed  to  define  requirements  in 
broad  mission  and  functional  areas  and  to  suggest 
solutions  in  terms  of  required  platforms, 
systems,  and  Items.  Although  this  activity 
transcends  the  domain  of  C3,  it  is  notable  that 
C3  issues  were  generally  high  on  each  CINC's 


(2)  Programming 

To  enhance  the  CINCs’  voice  in  the 


allocation  of  resources,  the  DepSecDef 
established  an  institutional  role  for  them  in  the 
review  of  the  Service  and  Defen.  Agency  Program 
Objective.  Memorandums  (POMs)  (reference  5).  The 
DepSecDef  specified  that  the  U&S  CINCs, would  meet 
with  the  Secretary,  of  Defense  and  the  Defense 
Resources  Board  (DRB)  to  present  their  views  on 
Strategy  and  to  discuss  the"'  adequacy  of  the  POMs 
to  meet  that  strategy.  To  facilitate  that 
dialogue  the  Services  have  been  directed  to 
develop  POM  annexes  that  estimate  the  costs  to 
satisfy  CINC  requirements  and  to  identify 
shortfalls  in  satisfying  those  requirements.  In 
addition,  CINC  representatives  are  enpovered  to 
serve  on  POM  issue  teams, 

(3)  Budgeting 

In  the  Goldwater-Nichols  DoD  Reorganization 
Act  of  1986  (reference  6),  it  directed  that 
effective  with  the  submission  of  the  FY1989 
budget,  a  separate  budget  proposal  be  submitted 
to  Congress  for  activities  of  each  U&S  Command  as 
determined  by  the  Secretary  of  Defense  with  the 
advice  of  the  chairman,  JCS  (CJCS).  The  separate 
funding  requests  may  be  for  joint  exercises, 
force  training,  contingencies,  and  selected 
operations. 

b.  Requirements  Generation 

Historically,  the  CINCs  have  submitted  their 
requirements  in  the  form  of  Required  Operational 
Capabilities  (ROCs),  as  dictated  by  reference  2 
There  has  been  widespread  dissatisfaction  with 
this  process.  First,  there  is  concern  that  the 
generation  and  validation  of  these  ROCs  is  too 
tlmo  consuming.  Second,  there  is  a  perception 
that  thero  are  too  many  ROCs,  many  of  which  are 
overlapping.  Third,  thero  has  been  a  tendency 
for  the  CINCs  to  submit  ROCs  that  reflect 
preconceived  solutions  rather  than  statements  of 
operation  need.  In  response  to  these  perceived 
problems,  reference  2  is  being  reviscu  to 
streamline  and  rationalize  the  requirements 
process 

A  more  revolutionary  change  in  the 
requirements  generation  process  may  be 
forthcoming  if  the  recommendations  of  the  Packard 
Commission  (reference  7)  are  more  fully 
implemented  Historically,  the  CINCs  have 
developed  ROCs  from  a  "bottoms -up"  perspective, 
drawing  extensively  upon  their  experiences  in 
crises  and  exercises  The  Packard  Commission 
recommended  that  a  complementary  "top-down" 
perspective  be  taken  in  which  the  U&S  CINCs  would 
support  the  CJCS  in  appraising  the  threat, 
developing  military  objectives,  developing 
national  military  strategy,  identifying  five  year 
force/capabilities  within  fiscal  constraints, 
developing  military  options,  and  preparing  net 
assessments 

c  Development  and  Acquisition 

In  1980  the  CINC  Command  and  Control 
Initiatives  Program  (C2IP)  was  initiated  to  give 
the  CINCs  very  limited  discretionary  resources  to 
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x^sire  critically  or* ded  C2  ijjtntj,  sdj«ct  cc 
JCS  approval.  This  isitiatln  bas  elm  tbe 
CISC*  a  *3all.  bet  highly  lrrftijrd  role  la 
systems  devel opment  asi  K^eUltba.  A*  noted  67 
Cea  Eojcra.  former  SACZT2,  “since  tie  ftejm 
began  la  1550.  at;  lfiit  200  mil  bet  critical 
projects  bare  been  fcsdti*  {reference  5).  Cbder 
it*  aegis,  several  CISC*  bare,  selectively  elected 
to  develop  emlque.  ose-of-a-kind  systems  to 
support  “pressing  needs  u>I=g  off-the-shelf 
technology.  la  addition,  selected  CISC*  bare 
instituted  system  testbed*  to  provide  early 
fieldjcg  of  critical  capabilities  and  to  enhance 
tbe  dialogue  between  the  development  and 
operational*  conmeai ties.  One  such  testbed!*  tbe 
Lisited  Operational  Capability  Europe  (IOCS), 
which  provide*  an  initial  capability  for  sanaging 
sensor  system  aad  fusing  their  outputs. 

d.  Training 

Tbe  Goldvater-Sicbols  DoD  Eeorgaaizatloa  Act 
(reference  6)  reiterated  that  tbe  coabatant 
commanders  would  hare  full  operational  ccaaxand 
over  all  assigned  forces.  However,  tbey 
redefined  tbe  tern  “full  operational  comer  and*  to 
include  all  aspects  of  ailitacy  operations  and 
joint  training. 

3.  Perceived  CISC  Shortfalls 

The  initiatives  cited  above  have 
dramatically  expanded  tbe  responsibilities  of  tbe 
U6S  CISC*.  There  Is  a  perception,  however,  that 
the  ccssand  staffs  will  experience  significant 
shortfalls  in  responding  to  these  challenges. 

Although  the  prisary  focus  of  this 
discussion  is  the  J-6  (C3)  element  of  tbe  CISC 
staff,  the  full  resources  available  to  the  CISC 
oust  be  considered  --  nest  notably,  the  J-2 
(intelligence),  J-3  (operations) ,  and  J-5 
(plans).  As  a  group,  this  staff  has  ispressive 
strengths,  and  significant  shortfalls,  in 
responding  to  its  enhanced  responsibilities. 

In  general,  the  CISC  staffs  focus  on 
present-day  issues  vice  those  of  the  future. 
Their  prisary  attention  Is  generally  directed 
towards  pressing  probless  in  training  and 
readiness.  Their  oost  notable  shortfalls  have 
been  in  three  interrelated  areas:  they  generally 
lack  In-depth  knowledge  of  key  factors  that  will 
influence  the  future  (e.g. ,  the  evolving  threat, 
capabilities  and  lisitatlons  of  energlng 
technologies);  they  generally  lack  the  skills 
needed  to  develop  credible  long  range  plans  and 
architectures;  and  they  frequently  are  United  In 
their  ability  to  communicate  with  the  technical 
cocaunlty.  Although  these  shortfalls  could  be 
aaelloraced  by  selectively  increasing  staff  size. 
Just  the  reverse  trend  is  occurring.  There  is 
considerable  pressure  froa  OSD  and  Congress  to 
reduce  CISC  staffs  appreciably. 

Another  aajo r  obstacle  that  the  CIKCs  face 
in  discharging  their  enhanced  responsibilities  is 
their  lack  of  access  to  key  data.  This  is 
particularly  apparent  in  the  programing  and 


bedgrting  review  processes  s&rre  tbe  data  base  £* 
highly  wUUle.  I;  Is  exceedingly  difficult  fe£ 
the  COX*  staff  to  fcrasLuc  or  assess  issue* 
*fcea  tbey  lack  timely,  detailed  programmatic 
isfentstica. 


Cede rly lag  xasy  of  tbe  CISC s'  sew 
rcspecsibiltic*  is  a  seed  for  a  broad  rasge  of 
Cools.  There  are  focr  areas  where  this  ceed  I* 
particularly  pressing:  evaluating  C3. 
formulating  requirements,  performing  programmatic 
assessment s.  aad  supporting  realistic  joint 
training.  Tbe  issues  of  requirements  formulation 
tends  to  illustrate  this  need  for  tools.  In 
order  to  do  this  task  credibly,  one  asst  be  able 
to  consider  and  balance  tbe  operational  needs; 
available  resources;  future  threat,  doctrine,  and 
force  structure;  and  evolving  technology, 
without  adequate  cools  it  is  exceedingly 
difficult  to  ensure  that  all  of  these  factors  are 
considered  consistently. 

Finally,  the  CISC*  face  varying  levels  of 
shortfalls  in  dealing  with  C2  system  development 
and  acquisition.  As  noted  in  section  B.l, 
selected  CISC*  (notably  CSCISCSO)  lack  adequate 
linkages  to  tbe  Service  Systea  Commands.  In 
addition,  nearly  all  of  the  CIKCs  face 
substantial  shortfalls  in  their  ability  to 
integrate  new  coaponent  systens  into  their 
evolving  C3X  sys tea  and  in  tbeir  capability  to 
support  unique.  CISC-developed  systea*  (e.g., 
training,  eaintenance).  Tbe  CISC  role  in  C3 
systea  development  and  acquisition  is  further 
clouded  by  uncertainty  over  their  domain  of 
responsibility.  Vhile  they  clearly  have 
respon«ibilicy  for  their  own  organic  C3 
resources,  there  is  still  ambiguity  as  to  their 
role  in  the  C3  sys  teas  associated  with  the 
national -theater  Interface,  the  theater- tactical 
interface,  and  tactical  forces  (see  Figure  2). 


Figure  2 

Issues:  CINCs  Area  of  Responsibility 


4.  New  Skills  Needed  By  CINCs 

In  order  to  redress  these  short] alls,  the 
CINCs  require  new  skills.  This  section  will  be 
United  to  a  discussion  of  those  skills  that 
could  conceivably  be  supported  by  the  C2  Research 
Coasunity  The  skill  needs  have  been  aggregated 
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Sato  the  5otr  areas  where  :be  CISC*' 
r«jttaI!>SlIti«  iare  t«a  iscreased:  plreieg, 
jrotrantlaj,  acd  beitetiaj;  requirements 
(eaaracioa;  C2  sjstca  (Sevelopscat  acd 
oc^lsltlca:  asd  traldsj, 

a.  WaaifBg.  fwjMsIsj,  «si  Zodgeticg 

If  tie  CISC*  are  to  participate  effectively 
i=  tie  F7K  process  oa  CS  l ssces  they  will 
reqslre  the  ability  to  evaluate  tie  coctribcstlea 
of  C3  to  mission  effectiveness.  Ibis  seed  has 
been  recognized  ia  a  recent  request  from  the 
Scientific  Adviser  to  SAC £TR  to  the  head  of  the 
Defease  Science  Soard  {reference  9).  As  a 
cacplememt,  they  vill-also  retire  the  capability 
to  perform  cost  analyses  of  Cl  system  so  that 
they  can  perform  cost-effective: >ess  tradeoffs. 

In  the  related  area  of  03  long  range 
planning  and  architectural  developments,  the 
CISC*  require  an  isfesiontof  new  shills.  They 
require  organic  resources  to  assist  then  in 
developing  ClSC-wI(pe  products  and  in  aoni  coring 
compliance  vith  these  plans  and  architectures 

b.  Retirement*  Generation 

Tee  CISC*  seed  complementary  hot  tons -up  and 
top-down  tools  to  assist  then  in  the  generation 
of  C3  requirements.  Currently .  cany  of  their 
requirements  arise  fron  anecdotal  experiences 
that  occur  during  exercise*  and  crises.  They 
need  systematic  scan*  of  generating  credible 
“lessons  learned*  fron  those  experiences  that  can 
be  used  to  Justify  operational  needs.  In 
addition,  they  require  atssion-orlented 
assessment  tools  to  enable  then  to  comply  with 
the  spirit  of  *-he  Packard  Coaclssion 
recommendations  for  a  top-down  requlreaents 
process. 

c.  C2  Development  and  Acquisition 

Nearly  every  recent  “blue  ribbon-  panel 
study  of  C2  eanagement  (e.g. .  reference  10)  has 
identified  the  communications  gap  between  the 
operational  and  systems  communities  as  the  najor 
obstacle  to  effective  C2  developaent  and 
acquisition  In  order  to  bridge  that  gap.  the 
CISC*  need  the  ability  to  conduct  an  effective 
dialogue  with  the  systcas  comaunity.  Testbed 
environsents  have  been  Identified  as  a  proais.ng 
mechanism  to  support  that  dialogue.  Although 
this  is  perceived  to  be  an  attractive  solution, 
it  aust  be  recognized  that  it  requires  the  CIKCs 
to  gain  access  to  a  oajor  new  set  of  skills  to 
lapleeent  It  (e.g..  experts  In  coaputer  hardware 
and  software,  aodelers,  expcriacr.tal  desigrers, 
human  factors  specialists) 

In  addition,  the  CISC  faces  the  problem  of 
asslallating  new  C3  coaponent  capabilities  into 
his  evolving  systea  This  raises  the  need  for 
personnel  skilled  in  all  levels  oi 
interoperability  issues,  ranging  froa  knowledge 
of  protocols  and  standards  through  changes  in 
procedures  and  concepts  of  operation. 


d.  Training 

The  CISC*'  mew  responsibilities  la  Joint 
training  pose  caique  problems  in  the  area  of  C3. 

It  Is  particularly  difficult  to  emulate 
realistically  the  stresses  that  Joisr/cAnMoed 
staffs  smst  confront  at  Increasing  levels  of 
conflict.  Testbed*  have  been  proposed  as  a  oeass 
of  cop  I  eg  with  this  issue,  bet  it  poses  the  need 
for  che  broad  set  of  technical  skills  cited 
above. 

C.  C2  Research  Coocasaity 

This  section  deals  with  the  second  facet  of 
the  issue:  the  roles  that  the  C2  Research 
Cwaalty  could  play  to  respond  to  the  CINCs' 
needs.  As  a  foundation  for  this  discussion,  a 
caxonoay  is  introduced  to  characterize  the  C2 
Research  Community  ax.1  to  describe  the  work  that 
the  community  is  currently  performing  to  support 
Che  CINCs.  That  is  followed  by  a  set  of 
challenges  chat  che  C2  Research  Community  should 
confront. 

1.  Nature  of  the  C2  Research  Community 

The  C2  Research  Community  is  comprised  of  , 
highly  non -homogeneous,  eclectic  participants  who 
have  defied  prior  attempts  to  classify  then. 
However,  the  structure  of  the  JDL  C2  Research 
Symposium  provides  a  useful  taxonouv  for 
discussing  the  community's  interests  and 
describing  its  activities. 

The  Symposium  has  subdivided  the  community 
Into  four  overlapping  du&ains  {see  Figure  3). 

Figure  3 
Decomoosilion 

of  the  C2  Research  Community 


Working  Group  I  is  involved  in  the  theory  and 
aodcls  of  C3.  It  is  striving  to  establish  a 
theoretical  foundation  for  C3  and  Is  performing 
applied  work  in  areas  such  a».  sensor  fusion  and 
resource  allocation  Working  Group  II  is 
focusing  on  state -of - the-art  enhancements  to 
selected  C2  systems  and  components  Major  sub- 
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areas  of  interest  Include  network  control, 
distributed  systems,  and  multi-level  security. 
Verkin*  Croc?  Ill  is  analyzing  behavioral  aspects 
of  C3  and  developing  decision  support- system*. 
Their  doaain  of  interest  subsumes  the 
organizational  aspects  of  . C3  and  expert  systeas. 
Finally,  Working  Croup  IV  is  exploring  means  of 
testing  and  evaluating  C3»  This  includes  the 
development  of  C3  plans  atd  architecture,  and  the 
developaent  and  application  of  the  full  spectrum 
of  evaluation  techniques  (e.g. ,  analyses, 
testbeds,  exercises). 

2.  Ongoing  C2  Research  Support  to  CIKCs 

These  four  segments  of  the  C2  Research 
Coaaunity  are  currently  involved,  in  varying 
degree,  in  supporting  the  U6S  CIKCs. 

The  first  group,  theory  and  models  of  C3,  is 
probably  least  involved  in  the  direct  support  of 
the  CIKCs.  This  Is  not  surprising  in  light  of 
the  consents  of  the  Scientific  Adviser  to  SACEUK 
cited  in  Che  Introduction  (reference  1). 
Hovever,  some  of  the  group's  applied  efforts  are 
respcndlrg  to  pressing  CIKC  needs.  For  example, 
the  coaaunlty's  efforts  to  develop  sensor  fusion 
algorithas  have  found  application  in  «ny  CIKC 
programs  (e.g..  LOCE). 

The  second  group,  C2  Systeas  and  Coaponents, 
has  been  quite  active  in  working  with  *Che 
component  commands  and,  Co  a  lesser  degree,  with 
CISC  coaaunl ties.  As  an  exaaple,  DARPA  has 
sponsored  a  nuaber  of  research  prograas  to 
explore  distributed  C3  concepts.  In  concert  with 
the  Ar=y,  they  enbarked  upon  the  Arny  DARPA 
Distributed  Communications  and  Processing 
Experiment  (ADDCOMPE)  to  develop  and  apply  packet 
switching  techniques  and  distributed  data  bases 
to  the  needs  of  the  tactical  coaaunity.  Although 
the  effort  was  focused  on  the  XVIII  Airborne 
Corps,  initiatives  are  underway  to  transfer  the 
resulting  technology  to  JSCENTCOM.  '  DARPA  is 
currently  In  the  initial  stages  of  an  analogous 
program  in  the  strategic  arena,  the  Survlvable 
Adaptive  Planning  Experiment  (SAPE).  This 
prograa  will  assist  CIKCSAC  and  the  Joint 
Strategic  Targeting  and  Planning  Staff  by 
exploring  oorc  flexible  adaptable  communications 
and  selected  decision  aids.  The  Defense 
Communications  Agency  (DCA)  Is  also  supporting 
the  CIKC  coaaunity  through  Its  recently  expanded 
Command  Center  Iaproveaent  Prograa  (CCIP).  The 
CCIP  subsuaes  both  fixed  and  aoblle  coaaand 
centers,  associated  information  systens,  the 
standardization  and  institutionalization  of  the 
nodular  building  concept,  and  a  coaaand  center 
laboratory  for  rapid  prototyping  and  evaluation 
The  CIKCs  have  benefited  substantially  froo  this 
prograa,  nost  notably  through  the  MAC  aodel 
coaaand  center  and  the  Proof -of - 
Concept/Experlaental  Testbed  (POC/ET)  for  SAC,  a 
derivative  of  the  nodular  building  concept. 

The  third  group,  decision  support  systeas 
and  behavioral  aspects,  has  had  aixed  success  in 
supporting  the  CIKCs.  In  the  area  of  decision 
support  systeas  there  has  been  a  great  deal  of 


activity,  frequently  in  concert  with  the  C2 
systeas  concepts  and  coaponents  group,  cited 
above.  However,  such  of  this  work  tends  to  be 
focused  on  component  needs.  For  example,  one  of 
the  major  successes  In  AD  DCOM  PE  was  the  Automated 
Loading  Planning  Systea  (ALPS),  which  enaoled 
planners  to  configure  complex  loadings  on 
transport  aircraft  sore  rapidly  with  reduced 
naspover.  As  a  second  exaaple,  DARPA  is  working 
with  the  Arny  to  develop  prototype  corps-  and 
division-level  planning  aids  through  the  Airland 
battle  Management  (AIM)  prograa.  The  subset  of 
this  group  involved  with  organizational  research 
appears  to  be  less  effectively  coupled  with  the 
CIKC  community.  There  are,  however,  several 
notable,  promising  initiatives  in  this  atfta:  the 
'National  Defense  University  is  ^supporting 
USCINCSO,  by  exploring  alternative  organizational 
concepts  for  the  command  2nd  KeC  Assessment,  OSD, 
is  employing  Carnegie  Mellon  to  apply 
organizational  theory  to  assess  elements  of 
US EU COM's  command  structure. 

The  fourth  group,  testing  and  evaluating  C3, 
has  „  had  selected  ^successes  in  supporting  the 
CIKCs.  As  noted  in  section  B,  the  CIKCs  are 
responsible  for  generating  C2  Systea  Master  Plans 
and  contributing  to  the  Global  C3  Assessment.  In 
support  of  those  activities,  DCA  has  developed 
and  refined  a  mission-oriented  approach  to  C3 
planning  (reference  11).  That  approach  is  being 
used  extensively  by  the  CIKCs  and  is  being 
•adapted*' to  neet  the  planning  needs  of  NATO's 
Major  NATO  Commanders  (references  12,  13). 

In  the  area  of  exercise  evaluation,  two 
major  successes  have  emerged  under  the. leadership 
of  DCA.  In  the  strategic  arena,  they  manage  the 
POLO  HAT  exercises  under  the  sponsorship  of  JCS 
(reference  16).  The  purpose  of  these  exercises 
is  to  measure  the  effectiveness  of  C3  systems 
that  provide  two-way  connectivity  between  the 
National  Hllltary  Command  System  and  the 
strategic  nuclear  forces.  Over  the  years,  these 
efforts  have  significantly  enhanced  our 
udnerstandlng  of  the  strategic  problem  and 
stimulated  major  improvements  to  the  systea.  In 
the  thcater/tactlcal  arena,  significant  progress 
is  being  made  by  DCA  in  Its  development  and 
application  of  the  Headquarters  Effectiveness 
Assessment  Tool  (HEAT)  (reference  15).  It  has 
been  employed  in  scvoral  exercises  to  quantify 
the  performance  of  the  headquarters  staffs 

Finally,  significant  resources  have  been 
allocated  for  developing  testbeds  to  assist  the 
CIKCs  in  training  their  staffs  and  evaluating  C3 
performance.  Three  of  the  more  notable 
initiatives  have  been  the  Warrior  Preparation 
Center,  Raastcin,  FRG,  the  Joint  Warfare  Center, 
Hurlbcrt  Field,  FL,  and  the  Naval  War  Caalng 
Systea,  Naval  War  College,  Newport,  RI 
Significant  research  is  underway  to  establish  the 
technology  to  link  selected  testbeds  to  permit 
training  and  evaluating  of  distributed  C3 
concepts  (reference  16) 
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3.  Challenges  for  the  C2  Research; Community 

In  cany  ways,  the  current  level-  of  support 
that  the  .<2  Research  Community  provides  to  the 
CINCs  Is  quite  impressive,  even  If  it  is  not 
widely  recognized.  However,  in  view  of  the 
greatly  expanded  responsibilities  .of  the  CIKCs, 
there  are  cany',  areas  vhejre  the  C2  Research 
Community  can,  and  should,  focus  its  energy.  The 
following  challenges  constitute  our  perception  of 
the.  acre  fruitful  avenues  for  the  C2  Research 
Community  to  channel  that  energy. 

9 

Thf  sub-community  involved  in  the  theory  of 
C3  should  strive  to  develop  a  foundation^  upon 
which  the  CIKCs  coul’d  base*  the  generation  of 
doctrine,  tactics,  and  plan.  Our  current  state 
of  knowledge  in  this  area  C3n  be  Illustrated  by 
relating  It- to  the,,  field  of  bridge- construction. 
For  thousands  of  years,  mankind  built  bridges 
before  the  theoretical  underpinnings  were 
available  Co  guide  thefr  .design  and 
implementation.  However,  once^  that  theoretical 
foundation  was  developed,  it  enabled  us  to 
fabricate  consistently  more  cost-effective  and 
reliable  structures.  By  analogy,  we  can 
anticipate  far  more  useful  doctrine,  tactics,  and 
plans  once  the  theoretical  underpinings  of  C3 
have  been  developed  and  applied. 

The  sub-coasunity  involved  in  new  C2  systems 
and  components  should  pursue  a  set  of  initiatives 
to  address  several  CINC-uniquc  and  -common  needs. 
Three  areas  in  particular  stand  out.  First, 
every  CIKC  is  confronted  with  the  problea  of 
better  perceiving  the  state  and  intentions  of  his 
adversaries.  This  requires  the  devclopaent  of  a 
set  of  tools  to  assist  hla  In  the  collection 
process  (c.g. ,  tasking  available  sensors)  and  the 
assessaent  of  the  collected  inforaation.  An 
ancillary  requlrenent  in  this  process  is  the 
effective  nanagenent  of  the  electromagnetic 
spectrua,  since  the  CINC  faces  conflicting 
demands  on  the  use  of  friendly  C3  systeas  (e.g, , 
sensors,  communications),  intelligence  resources 
(e.s.,  SIGINT),  and  C3CH  assets  (e.g.,  Jamalng  of 
eneay  systeas).  Second,  there  is  a  pervasive 
need  for  a  CINC  C3  systea  that  can  survive  at 
appropriate  lovels  of  conflict  There  aro  a 
spectrua  of  techniques  available  to  achieve  those 
levels  of  survivability  including  hardening, 
mobility,  and  distributed  communications  and  data 
basos,  with  suitable  adaptive  management  systeas. 
It  is  necessary  to  develop  and  draw  upon  these 
techniques  to  create  a  customized,  survivable 
capability  that  is  well  Batched  to  the  unique 
needs  of  each  CINC  Finally,  there  is  heightened 
awareness  of  the  need  to  develop  trusted  conputer 
systeas  for  the  CIKCs  Although  this  is  a 
foraidable  undertaking  In  its  own  right,  it  is 
coapoundcd  by  the  unique  environaents  that 
confront  the  individual  CINCs  For  example,  in 
Korea,  the  systems  oust  not  only  deal  with 
security  issues  but  oust  cope  with  both  English 
and  Hongul  Conversely,  in  Europe  we  face  other 
theater-unique  probleas  Currently,  if  the  FRG 
provides  inputs  to  selected  US  systeas,  the 
inforaation  receives  a  US  classification  which 
nay  preclude  its  re -transmission  back  to  the  FRG 


As  an  initial  step  in  this  arena,  DCA  is 
developing. a  security  testbed  through  its  CGI?. 
-However,  a  significant  infusion  tif  research 
activity  will  be  required  on  security  issues  if 
the  Individual  CINC  needs  are  to  be  understood 
and  addressed  effectively. 

The  sub-community  Involved  In  decision 
support  systeas  and  behavioral  aspects  must 
ensure  that  the  role  of  the  human  in  the  C3 
systea  is  not  overlooked  by  C3  technologists.  As 
noted  above,  the  focus  of  cany  of  the  decision 
support  systea  applications  has  been  at  the 
coaponent  level.  In  order  to  nake  that  work 
useful  to  the  CIKCs,  this  sub-coasunity  nust  seek 
to  understand  better  the  C3  process  at  the  CIKC 
level.  Although  a  significant  sub-set  of  chat 
process 'aay  be  cocoon  for  aost  CIKCs,  it  nust  be 
recognized  that  each  CIKC  operates  in  very 
different  pol  i  t leal /alii tary/econonic 
environaents.  These  differences  nust  be 
appreciated  if  future  CINC  decision  support 
systeas  are  to  win  acceptance.  In  the  area  of 
organizational  theory,  oany  CIKCs  could  profit 
froa  an  extension  of  the  support  that  the  KDU  is 
providing  to  USCINCSO.  There  is  a  particular 
need  to  provide  a  sounder  organizational  theory 
that  would  enhance  our  understanding  of  preferred 
arrangements  for  using  US  forces  in  Joint  and 
combined  operations. 

The  sub-community  involved  in  testing  and 
evaluating  C3  has  several  overt  challenges  that 
have  recently  been  issued  by  the  CINCs  As  noted 
above  (reference  9/,  the  Scientific  Advisor  to 
SACEUR  requested  that  the  DSB  initiate  a  Task 
Force  ".  .  to  recommend  an  overall  research  and 
tost  program  to  develop  the  analysis, 
simulations,  experiments,  and  exercises  to  allow 
us  to  evaluato  the  impact  of  C3  on  combat 
(military  missions)."  In  addition,  SACEUR  has 
recently  enlisted  the  aid  of  DARPA  to  deal  with  a 
related  issue  and  dovelop  a  distributed  war- 
gaming  systea  to  support  realistic  training  of 
his  staff. 

This  sub-community  also  has  a  major 
challenge  in  assisting  the  CINC  staffs  in 
developing  long  range  C3  plans  and  architectures 
Although  the  mission-oriented  approach  provides  a 
useful  framework  for  addressing  these  products, 
there  is  still  a  significant  void  in  user- 
friendly  tools  to  implement  that  approach  There 
is  a  particular  need  for  tools  that  facilitate 
the  derivation  of  system  deficiencies  froa  an 
understanding  of  proposed  concepts  of  operation, 
assist  In  formulating  cost-constrained  packages 
of  C3  systems,  and  support  the  assessaent  of  the 
impact  of  C3  on  mission  effectiveness  The  CINC 
staffs  also  require  tools  that  v,ould  help  them 
derive  lessons  learned  from  exercises  and  crisos 

D.  Caveats 

There  are  several  important  obstacles  that 
must  be  recognized  and  overcome  if  the  C2 
Research  Community  is  to  provide  more  effective 
support  to  the  CINCs  These  can  be  cast  in  the 
form  of  actions  that  the  CINCs  must  take  and 
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potential,  courses  of  action  that  the  C2. Research' 
Community  aust  avoid. 

As-. a  foundation  for  these  proposed 
initiatives,  the  CINCs  oust  enter-  into  the 
dialogue  with  the  C2  Research  -Community  by 
' formulating. fotyard  thinking  doctrine.  Since  the 
C  Research  ^Community  tends  to  deal  with  the 
world  of^the  future"  it  requlres-an  understanding 
of  doctrine  that  -reflects  future-  concepts  of 
operation,  This, doctrine  should  take  account  of 
differing  objectives  on  the  use  of  military,  force 
and  reflect  the  political/econoaic/coaaand 
relationships  of  CINCs  and  their  forces  in 
different  parts  of  the  world. 

Conversely,  the  C2  Research  Coaaunlty  should 
be  extremely  sensitive  to  three  key  points. 
First,  it  must  resist  the  teaptation  to  "push* 
studies  and  technologies  that  aren't  well  matched 
to  the  CINCs'  needs  and  capabilities.  If  that 
temptation  is  not  resisted,  the  result  will  be 
user  dissatisfaction.  Second,  the  C2  Research 
Community  aust  not  forget  that  US  forces  are 
"general  purpose"  and  that  standardization  is 
Important.  It  should  resist  the  teaptation  to 
develop  wholly  unique  products  when 
generalization  aay  be  feasible  that  could  expand 
their  utility  considerably.  Finally,  the 
coaaunlty  must  not  "end-run"  the  Service  Systems 
Commands  in  developing  and  fielding  C-*  products. 
Without  the  participation  of  these  commands,  the 
penalty  can  be  unsuppor cable,  non- interoperable 
products. 

This  last  issue  poses  a  major  dileaoa  for 
the  C2  Research  Community:  how  can  it  enlist  the 
support  of  the  Service  System  Commands  without 
Incurring  severe  time  delays  and  bureaucratic 
burdens?  A  potential  institutional  mechanism  to 
resolve  that  dilemma  has  recently  been  proposed 
by  a  DSB  Task  Force  on  Technology  Base  Management 
(reference  17).  They  formulated  the  concept  of 
Advanced  Technology  Transition  Demonstrations 
(ATTDs).  The  objective  of  the  ATTD  would  be  a 
"proof  of  principle"  demonstration  in  an 
operational  vice  laboratory  environment.  They 
projected  major  roles  for  the  user  (operator)  as 
program  sponsor  and  the  developer  (Systems 
Command)  as  program  manager.  Programmatically, 
they  envisioned  a  typical  program  of  three  years 
at  a  total  cost  of  $10-100M  in  6.3A  funds.  To 
facilitate  the  transition  of  technology,  they 
foresaw  the  need  for  a  transition  plan  to  be  in 
place  at  the  outset  of  the  ATTD.  Ultimately, 
they  recommended  that  half  of  all  6.3A  programs 
(i.e,,  approximately  $1B)  employ  this  concept. 

It  might  be  propitious  for  the  C2  Research 
Community  to  be  in  the  vanguard  as  this  concept 
Is  developed  and  implemented. 

E  SUMMARY 

As  documented  in  this  paper,  the  role  of  the 
CINCs  has  expanded  significantly  in  the  areas  of 
the  PPBS,  the  requirements  generation  process,  C^ 
development  and  acquisition,  and  Joint  training. 
However,  it  is  becoming  apparent  that  selected 
CINCs  lack  adequate  resources  to  discharge  their 
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enhanced  responsibilities.  Although  the  c2 
Research  Community  currently  supports  several 
CINCs, /that  support-has  been, uneven.  It  has  aost 
often,  been  successful  vhen  the  C2  Research 
Comaunlty's  support  is  veil  aatched  to  Clh’C  needs 
and  perforaed  within  Institutional  channels 
AeiS->  perforaed  in  concert  with  a  Systeas 
J  Command)'. 

However,  there  are  several  ficets  of  the 
support  Uiat  have  been  disappointing.  First,  it 
fs  perceived  chat  the  community  has  not 
effectively  transferred  technology  to  the  CINCs. 
There  Is  a  strong  feeling,  often  Justified,  that 
sophisticated  coaaercial-off-the-shelf  products 
aro  easily  available  to  the  civilian  sector, 
while  the  CINCs  are  languishing  with  systeas  that 
aye  technologically  obsolete.  Second,  there  Is  a 
perception- that  many  of  the  most  exciting  fruits 
of  the  Services'  C2  research  efforts  are  overly 
focused  on  component  forco  issues,  to  the 
detriment  of 'the  CINCs'  needs.  Finally,  there  is 
a  sense  that  the  C2  Research  Coaaunlty  is  not 
adequately  attuned  to  the  unique  operational 
context  in  which  the  individual  CINCs  aust 
function.  In  order  to  serve  that  client  base 
effectively,  it  requires  an  in-depth 
understanding  of  the  diverse  command  issues, 
force  structures,  threat  environments,  and 
interoperability  problems  that  confront  the 
individual  CINCs. 

If  the  C2  Research  Community  can  be 
cognizant  of  these  factors  and  respond 
accordingly,  it  has  an  extraordinary  opportunity 
to  support  the  -  CINCs  The  most  pressing  areas 
where  support  is  required  involve  the  development 
of  quantitative  tools  to  evaluate  the  impact  of 
C  on  mission  effectiveness  and  the  development 
of  testbeds  to  support  the  training  of  CINC 
staffs  and  to  facilitate  the  dialogue  between  the 
operational  and  technical  communities. 

It  is  recommended  that  the  JDL  consider  the 
utility  of  C2  research  activities  to  CINCs  when 
It  is  formulating  and  prioritizing  the  C2 
research  program.  This  would  have  two  beneficial 
consequences  First,  it  would  enhance  the 
likelihood  that  the  C2  Research  Community's 
products  are  transferred  and  used  effectively 
Second,  it  would  serve  to  solicit  CINC  support 
and  advocacy  for  the  C2  research  program  In  our 
contemporary  stringent  budget  environment,  that 
support  may  be  critical  if  the  C2  research 
program  is  to  survive. 
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Abstract 

1  In  197S,  the  Defense  .Science  Board  criticized  DoD. 
for  the  lack  of  a  useful  conceptual  framework  for 
evaluating  and  specifying  C3  Systems  and  for  the  ab* 
sence  of  any  significant  research  in  the  command  and 
conti  ol  field.  They  recommended  that  DoD  develop 
a  broad  research  program  encompassing  technolog¬ 
ical,  economic,  organizational,  cognitive  and  other 
aspects  of  command  and  control  system  design  and 
performance*  Since  that  time,  a  number  of  research 
initiatives  have  Ken  started.  In  1987,  the  Defense 
Science  Board c /nducted another suTdyon command7 
and  control  systems  management.  They  concluded 
that,  “although  the  amount  of  research  has  grown 
since  the  197$  DSB  report,  we  find  that  the  research 
is  unfocussed  and  largely  technology  oriented”.  Once 
again,  they  strongly  recommended  strengthening  the 
intellectual  base  for  command  and  control  through  a 
coordinated  research  program  in  command  and  con- 
trol. 

In  this  paper,  we  will  survey  some  of  the  progress 
that  has  bees  made  in  the  last  decade  in  C3  systems 
research.  We  will  highlight  some  of  the  significant 
results  and  point  ouv  areas  where  more  emphasis  is 
appropriate 


Introduction 

Good  morning  I  appreciate  the  opportunity  to  speak  to 
you  on  a  topic  that  is  of  vital  importance  to  our  national 
security.  The  title  of  the  talk,  “  C3  Systems  Research:  A 
Decade  of  Progress”,  was  motivated  by  the  fact  that  many 
of  the  activities  at  this  conference  resulted  from  the  1978 
report  of  the  Defense  Science  Board  Task  Force  on  C3  (lj 
and  the  actions  that  DoD  took  in  response  to  the  report. 
The  objective  of  the  talk  is  to  look  at  the  progress  that  has 
been  made  in  the  broad  area  of  C3  systems  research  since 
that  1978  icport.  I  accepted  the  invitation  because  I  knew 
U  would  force  me  to  thoroughly  review  the  effort  of  research 
community  ovei  the  last  ten  years.  It  has  been  a  challenging 
cfTort. 

The  outline  of  the  talk  is  shown  in  Figure  1. 


OUTLINE 

INTRODUCTION 

STRUCTURE  OF  C2  PROBLEM 

PROGRESS  IN  MODELING 

PROGRESS  IN  SIMULATION  t  TESTBEDS 

ANY  FUNDAMENTAL  PRINCIPLES? 

THE  LAWS  OF  C* 

PROBLEMS  AND  SHORTFALLS 

SUMMARY 

Figure  1 

First,  a  brief  summary  of  the  DSB  recommendations  and 
the  history  of  the  problem  will  be  given  Then,  the  struc¬ 
ture  of  the  C 3  problem  will  be  discussed.  The  next  two 

sections  review  the  progress  that  has  been  made  in  various 
areas.  Based  on  this  review,  some  fundamental  principles 
are  suggested.  Next,  I  hypothesize  some  basic  laws  of  C3. 
An  assessment  of  major  pioblcms  and  shortfalls  is  presented 
and  then,  the  topic  is  summarized  .  I  hope  all  of  you  will 
listen  to  the  speech  in  the  context  of  my  being  a  member  of 
the  C3  research  community  rather  than  an  outsider. 

The  starting  point  for  the  discussion  is  the  report  of  the 
Defense  Science  Board  Task  Force  on  C3  The  committee 
which  was  headed  by  Dr  Solomon  Buchsbaum  and  included 
a  number  of  experienced  C3  experts  came  up  with  several 
recommendations  I  want  to  focus  on  the  one  shown  in  fig¬ 
ure  ? 
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“The  DoD  should  develop  a  coordinated 
program  of  research  and  testing  on  com¬ 
mand  and  control  concepts,  design,  and 
system  performance  to  provide  the  intel¬ 
lectual  base  to  guide  the  evolution  of  im¬ 
proved  command  and  control  systems.” 

_ Figure  2 _ _ _ 
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Some  of  the  hey  phrases  in  that  recommendation  arc  “coor¬ 
dinated  program”  ^research  and  testing”, “concepts,  design, 
and  performance, "and  “intellectual  base”.  The  guidance  was 
broad  and  the  report  didolt  provide  many  specific  sugges¬ 
tions  as  to  what  the  committee  had  in  mind.  Partially  in 
response  to  this  recommendation,  Andy  Marshall,  Director 
of  Net  Assessment  in  OSD  and  l  (then,  Principal  Deputy  As¬ 
sistant  Secretary  (C3/))  sponsored  a  Conference  on  “Quan¬ 
titative  -Assessment  of  the  Utility  of  Command  and  Con¬ 
trol  Systems”  at  the  National  Defense  University  in  January, 
1980  (2,3)  The  conference  was  valuable  in  bringing  together 
diverse  interest  groups  to  assess  thd  current  state-of-the-art 
in  C*  utility  (or  effectiveness)  theory.  In  1982,  Bob ’Her¬ 
mann  wrote  a  report  reemphasizing  the  importance  of  the 
problem  Two  results  that  could  be  partially  attributed  to 
the  Hermann  report  were  the  creation  of  the  Joint  Director 
of  Laboratories  C3  Research  Program  and  the  addition  of 
about  two  million  dollars  of  funding  in  the  C3  research  area. 
It  should  be  noted  that,  starting  m  1978.  ONR  had  spon¬ 
sored  a  significant  research  program  at  Massachusetts  Insti¬ 
tute  of  Technology  and  held  an  annual  Command  and  Con¬ 
trol  Workshop  {•1-12).  In  1987,  the  Basic  Research  Group  of 
the  Joint  Directors  of  laboratories  held  the  first  C1  Research 
Symposium  at  the  National  Defense  University  (13,14).  The 
Symposium  superceded  the  annual  MIT/ONR  Conference 
and  expanded  the  participation.  This  symposium  (15)  is  the 
second  m  the  scries. 

In  19S7,  the  Defense  Science  Board  sponsored  another 
study  on  C3  (16),  again  Dr.  Buchsbaum  was  the  Chairman. 
The  recommendation  that  I  want  to  focus  on  h  shown  in 
Figure  3. 
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nECOiSSfo^^  ^  WEtUCTUAl  BASE  FOR  COMMAND  A  NO  CONTROL  WE 

•  THAT  A  COMPREHENSIVE  PROGRAM  DEVOTED  TO  RESEARCH 
™  CONTROL  BE  OE/IHEO  AND 

THERESEARCH  PROGRAM  SHOULD  DELVE  INTO  AIL  ASPECTS 
«0^c*HD^D  CONTROL.  NOT  JUST  THE  TECHNOLOGICAL 
FOflU  Ct0SE  UNKAGES  TO  THE  SEVERAL 
AN0  GRADU*TE  EDUCATION  PROGRAMS  M  COMMAND 
AND  CONTROL  IN  SERVICF  ANO  DEFENSE  EDUCATIONAL  NSTTTU. 
ANO  SHOmO  EXPLOIT  ANO  FOSTER  RELATED  RESEARCH 

Esrr®  dar'>*  smo’*°  pi*y  *  ke? 


Figure  3 


1MPQRTANCE-QF  THE  PROBLEM 


.  C3  SYSTEMS  ARE  CRUCIAL  TO  FORCE  EFFECTIVENESS 

•  NUMEROUS  EXAMPLES  OF  C3  SYSTEM  FAILURES 
.  C3  SYSTEMS  ARE  EXPENSIVE 

Figure  4 

Over  the  years,  the  demands  made  on  command  and  con 
trol  systems  have  grown  exponentially.  The  increased  range, 
speed,  and  accuracy  of  weapons  systems  have  increased  the 
commander’s  volume  of  interest  significantly  and,  at  the 
same  time,  decreased  the  required  reaction  time  significantly 
Concurrently,  technological  developments  have  provided  com¬ 
manders  and  their  staffs  more  capabilities  to  cope  with  the 
C*  problem.  It  is  well-accepted  by  both  the  U.S.  and  its  po¬ 
tential  adversaries  that  C3  systems  arc  crucial  to  force  effec¬ 
tiveness.  There  have  been  numerous  examples  of  C3  prob¬ 
lems:  c.g.,  the  Pueblo,  the  Liberty, and  NORAD  computer 
failures.  Finally,  C3  systems  are  expensive.  For  example, 
the  cost  of  each  Milstar  satellite  on  orbit  will  be  one  billion 
dollars. 

Everyone  believes  that  C3  is  important.  It  is  less  widely 
accepted  that  C3  theory  is  important.  In  fact,  C3  theory  can 
have  a  widcsprcad.impact.  The  range  of  potential  relevance 
of  C3  theory  is  shown  in  Figure  5. 


Once  again,  there  is  an  emphasis  on  developing  an  intellec¬ 
tual  base  A  new  clement  is  “close  linkages  to  the  several 
research  and  graduate  education  programs  in  command  and 
control  m  service  and  defense  educational  institutions  and 
should  exploit  and  foster  related  research  programs  in  our 
(civilian)  universities".  1  strongly  believe  that  this  linkage  is 
key  to  a  successful  research  program 

Clearly,  the  command  and  control  problem  is  central  to 
our  national  security.  Some  of  the  reasons  for  this  impor¬ 
tance  are  shown  m  Figure  1 


The  process  begins  with  the  development  of  doctrine  and 
concepts  If  the  C3  implications  of  a  proposed  doctrine  or 
warfighting  concept  or  weapons  systems  is  considered  from 
the  beginning,  then  more  realistic  results  will  be  obtained  A 
good  example  is  the  Strategic  Defense  Initiative  After  the 
initial  announcement  of  the  concept,  it  became  clear  quickly 
that  battle  management  and  C3  would  play  <t  crucial  role 
Perhaps  if  the  C2  implications  had  been  considered  earlier, 
the  overall  concept  would  have  been  dilfcrent  During  the 
acquisition  process,  the  ability  to  trade-off  CJ  system  re- 
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qmrcmoits  mthe  context  of  force  effectiveness  would  be  i 
major  contribuitiYn.  A,  central  feature, of  'the:DoD  budget 
process  is  deciding  bow  to  allocate  resources  among  compet- 
nnfli'.  era,np%  should  one  spend  more  nimey 
on  JU,/b  (Jnnt-fWcal  Information  Distribution  System); 
?  y  *ys,er».wliich  makes  F-15s  more  effective  in  accomplish¬ 
ing  their  mission,  or  should  one  buy.more  F-15s?  Quanti- 
rative  trade-offs  on'contnb'utioiis  to  force  effectiveness  could 
make  an  irn^nant  .omtribnfion.  In  'the  test  and  eralua- 
tion  pnase,  C*  tUry  could  help  define  appropriate  tbsts 
Th-e-f’S  a'  Pplential-  for  ‘significant  savings 

in!<  rtmWS-  '■  We  cou,d  ^e,0fi  r“listic  C3  Simula- 
tions.  These  simulations  oould  augmdnt-field  exercises  aid 

Cl  X  s  and  make  them  mote  effective.  The  potential  saving 

budiTIT C3  systems  research 
,  ^  fn  the  peacetime  and  crisis  planning  area  a  better 

an  — T  “r  aid  <te  ptoccss’  Fina,iIV“  «>m- 

IU  hi,  ”  u“  teSU,‘S  muSt  ^  *M*«*te  i"  «sl  time. 

Ivieli,^  -,C0U  MSe,,Cta,<!  USefiil  fundMnenW  Ptmsipte  or 
guidelniB  ,1  could  augment  the  commander’s  experience  in 

meM4  DeaS,°n  support  sXstems  «n  »Iso  play  a 

whth  .7  Th'S  fpcc*rum  Ptovldes  a  rich  menu  of  areas  to 
which  the  research  community  can  contribute. 

Figure  5  demonstrates  the  relevance  of  C*  theory  to  a 
Hide  range  of  problems.  FVom  the  standpoint  of  a  researcher, 

allvc!?.:mPO  ,l‘°-',0-int  ‘hat  C’ thcorp  is  “  i»‘sMsctu- 
ll  h  ro!l  "I"  “* inf3ncp-  ™8  is contrast  to 

S  Whkh 

.1  tbh  “  bf 1 kSro™li- 1  set  out  to  review  the  progress 

remarked  hat  I  was  spending  an  inordinate  amount  of  time 
rr!nTT  i**”  responsible  for  C>1  in  OSD, 

is  illutatit  Figrum  0  “  Th°  proU™ 


Figure  6 


The  size  of  areas  could  represent  either  money  spent  or  the 
number  of  people  involved.  Most  of  decisions  made  by  the 
acquisition  community,  operational  commanders,  or  C 3  deci¬ 
sion  makers  is  done  independently  of  what  is  going  on  in  the 
C  systems  research  community.  The  basic  problem  is  that 


the  intersection  of  the  sets  is  almost  empty.  Very  few  people 
are  involved  in.both  worlds.  In  fact,  at  the  present  lime  it 
includes  Gen.  Herres,  Adm.  Thule  and  a  few  others  This  is 
a  fundamental  problem  we  face  m  the  research  community 
One  of  the  points  that  I  want  to  make  is  that,  if  we  are  going 
to  be  successful,  ire  must  gct  mote  of  ,he  lirger 
involved  m  the  results  of  our  research. 

Structure  of  the  C2  Problem 

A  structure  for  the  C2  problem  is  shown  in  Figure  7. 

STRUCTURE  OF  C*  PROBLEM 


theory  of  warfare 
CLASSICAL  DEFINITIONS 
DUAL  NATURE  OF  C*  SYSTEM 
QUANTITATIVE  EVALUATION 


Figure  7 


The  first  point  1  would  like  to  make  is  that  you  cannot  study 
<7  theory  in  a  vacuum.  It  is  possible  to  study  commumca- 
ions  theory  in  an  abstract  manuei  and  obtain  useful  results. 
You  can  do  useful  research  on  coding  theory  or  modulation 
theory  without  having  to  know  how  a  modem  or  a  decoder 
works.  I  don’t  think  that  is  true  in  the  C1  area.  1  main¬ 
tain  that  everyone  involved  in  C1  research  should  start  by 
learning  something  about  warfare.  There  is  not  an  adequate 
theory  of  warfare,  but  there  is  a  lot  of  good  icscarch  and 
excellent  discussions  Some  of  these  arc  shown  in  Figure  S. 


THEORY  OF  WARFflpp 


FI  ACtClFO 

SUH TSU,  "THE  ART  OF  WAR" 

•  CLAUSEWlTZ.  "OH  WAR- 

CONTEMPORARY 

•  VAN  CREVALD.  "COMMANO  IN  WAR' 

OFFICIAL 
«  FM 100-5 

•  MARITIME  STRATEGY,  NWP 
-  AFMM.TACMM 


Figure  8 


Sun  Tsu  is  an  car!)  and  worthwhile  reference  (13,14)  Writing 
in  the  5th  Centur)  BC,  he  is  often  refened  to  as  “the  father 
of  the  theory  of  strategy"  !f  you  adapt  Jus  language  a  little 
from  translated  Chinese,  you  find  that  many  of  his  ideas  are 
completely  relevant  to  current  strategics 

Strategy  as  wc  currently  hnow  it  came  into  being  around 
1800  with  Napoleon’s  campaign  hail  von  Ciausewitz’s  ma¬ 
jor  wod,  “On  War "(2!, 22]  which  was  published  in  1832  has 
had  a  major  impart  in  many  nations  Many  of  his  observa¬ 
tions  such  as 
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“Many -intelligence  reports  in  war  are  contradic¬ 
tory;  even  more  are  false,  and-  most  are  uncer* 
tarn,” 

“Everything  in  war  is  very,  simple,  but  the  sim* 
plest  thing  is  difficult.  The  difficulties  accumu¬ 
late  and  end. by  producing  a  hind  of  friction  that 
is  inconceivable  unless  one  has  experienced  war.” 

“A  critic  should  never  use  the  results  of- theory 
as  laws  and  standards,  but  only-as  the  soldier 
docs-as  aids  to  judgement.* 

arc  as  valid  today  as  they  were  in  1832.  Earlier,  in  1714, 

Chevalier  Folard  had  introduced  the  idea  of  “the  Fog  of  War* 

(23,2  ij  to  denote  the  uncertainly  inherent  in  warfare.  Fog 
and  friction  still  remain  major  challenges  to  our  C1  systems. 

An  excellent  contemporary  reference  is  Van  Crevald’s  “Com¬ 
mand  in  War*  (25).  In  the  last  category  in  Figure  8  arc  sev¬ 
eral  official  documents  dealing  with  doctrine  and  warfighting 
(26  29). 

As  indicated  by  Figure  9,  there  is  a  reasonably  logical  appreciation  for  the  history  and  principles  of  warfighting  to 

path  leading  from  Clauscwitz  to  FM  100-5  for  the  Army  set  the  context  for  his  C 2  research  efforts. 

CASC*  With  this  brief  discussion  of  warfighting  we  can  now  con¬ 

tinue  with  the  command  and  con*tol  problem.  Figure  11  re- 


Each  of  these  nine  principles  has  a  C2  implication,  in  par¬ 
ticular,  the  O2  system  will  play  an  essential  role  m  the  unity 
of  command  principle.  The  Army  uses  these  principles  as 
a  basis  for  its  doctrine,  strategy  and  tactics.  The  doctrine, 
strategy  and  tactics  form  the  basis  of  the  requirements  for 
C'2  systems. 

There  arc  analogous  histoncal  bases  for  the  current  prin¬ 
ciples  of  Air  Force  and  Navy  opeiations  In  the  Air  Force,  the 
heritage  leading  to  the  current  doc  tune  comes  from  Douhet 
(30),  Mitchell  (31),  and  Seversky  (32).  (Although  some  of 
their  theories  were  not  borne  out  m  World  War  II.)  In  the 
Navy,  it  comes  from  Mahan  (33-35)  (Cf  (36)  for  a  summary) 

The  point  is  that  a  O2  researcher  must  haw  a  reasonable 


shown  in  Figure  12 

The  first  aspect  is  that  oi  an  intcgiatcd  system  and  icpie 
sents  a  physical  view  of  the  Ci  system  Ihe  second  aspect 
focuses  on  the  functional  view  What  does  the  system  do 
and  how  does  the  process  woik?  It  is  mipoitant  that  we 
study  the  systems  from  both  aspects 

One  of  essentia*  elements  in  undei  standing  t’2  systems 
is  the  evaluation  of  their  capability  1'iguie  H  shows  the 
spectrum  of  techniques  that  aie  available  foi  evaluation 


The  techniques  in  order  of  increasing  complexity  arc: 


•  expert  judgement 

•  analysis 

•  computer  simulation 

•  mamimtho-loop  simulations 

•  tot  oeds 

•  wargamcs/battlo  simulations 

•  exercises 

•  combat 

I  he  figure  gives  a  qualitative  assessment  of  how  the  various 
techniques  compare  in  cost,  lead  time,  replicability,  breadth 
of  application,  and  realism  The  arrow  on  the  left  conveys 
two  .important  points- 

“A  common  set  of  measures  that  arc  applicable 
and  measurcable  across  the  spectrum  of  tech¬ 
niques  is  essential9. 


“These  measures  must' give  consistent; results  so 
there  is  a  thread  of  ' consistency  across  the  tech¬ 
niques”. 

One  must  have  a  common  set  of  measures  that, are  ap¬ 
plicable  and  nr  -asurable  across  the  spectrum  of  techniques. 
Coupled  with  the  common  measures  is  the  thread  of  consis¬ 
tency  across  the  techniques.  A  simple  example  of  this  idea 
is  the  performance  of  a  digital  communication  system.  An 
analysis  will  derive  the  probability  of  error, as  a  function  of 
the  transmission  rate  and  signal- to- noise  ratio.  This  proba¬ 
bility  of  error  is  measurcable  in  field  tests  and  combat  and,  if 
the  analysis  was  done  correctly  and  the  equipment  meets  its 
specification,  the  results  will  be  consistent.  In  more  comphr 
systems,  particularly  those  with' humans  in  the  loops,  it  U 
generally  harder  to  find  consistent  measures.  As  we  discuss 
progress  in  modeling,  I  will  return  to  this  point  repeatedly. 
U  is  the  responsibility  of  the  research  community  to  demon¬ 
strate  that  the  models  arc  consistent  with  reality. 

With  these  observations  about  C3  systems  as  background, 
we  can  begin  our  discussion  of  progicss  in  the  modeling  area. 

Progress  in  Modeling 

The  outline  of  this  section  is  shown  in  Figure  M. 


PJftQfiBESS.INMOPEI.IMa 

•  issues 

•  FRAMEWORKS 

•  PROCESS  MOOELS 

•  COMMAND  A  HEADQUARTERS  MOOELS 

•  COMBAT  A  CONFLICT  MOOELS 

•  SURVEILLANCE  A  FUSION  MOOELS 

•  COMMUNICATIONS  MOOELS 

•  EW  A  COUNTEfl-C*  MOOELS 

_ _  .. _  .Figure  H  _ 

The  first  issue  concerns  the  model  hierarchy  approach  shown 
in  Figure  15. 

A  MODEL  HIERARCHY  APPROACH  I 


•  NO  SINGLE  MODEL  CAPTUR  ES  A  COMPLETE  C2  ISSUE 
■  A  HIERARCHY  OF  MOOELS  MUST  BE  EMPLOYED 

•  IWSSION  AREAS 

GEOGRAPHIC  SCOPE/IEVEL  OF  FORCE  AGGREGATION 
-  LEVEL  OF  SYSTEM  OETAIL 

•  MUST  ENSURE  A  THREAD  OF  CONSISTENCY  THROUGHOUT  THE 
SET  OF  MOOELS  EMPLOYEO 

_ _  Figure  15 _ _ _ 

No  single  model  is  going  to  captme  ail  of  the  C2  issues  A 


collection,  of  models  must  be  employed  Thee  appropriate 
model  will  depend  on- the  mission  area  of  interest,  as  well  as 
other  factors  The  purpose  of  Figure'16  is  to  emphasize  the 
disparity  between  missions. 


CaMMQN-CHARACltBISTICS 
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1 

ll 

1 

Figure  16 

While  there  is  a  role  for  generic  C3  models,  many  of  the 
important  feature#  will  be  mission  specific.  The  appropriate 
model  also  depends  on  the  geographic  scope  of  the  model  and 
the  level  of  force  aggregation.  The  choioc  of  a  microscopic  or 
macroscopic  model  will  depend  on  the  level  of  interest.  As 
m  any  modeling  problem,  one  must  match  the  data  avail¬ 
able  to  the  degrees  of  freedom  in  the  model.  Once  again,  it 
is  important  to  ensure  a  thread  of  consistency  through  the 
models  dealing  with  a  given  mission. 

Figure  17  is  a  representative  of  collection  of  useful  func- 


'1  he  models  in  the  first  category,  process  models,  focus  on  the 
dynamics  of  the  overall  C2  system.  Often  a  process  model 
will  have  one  of  the  other  functional  models  embedded  m  it 


The  functional  models  correspond  to  various  functions  that 
are  carried  out  m-the  C2  system.  The  taxonomy  in  Figure- 
17  is  not  unique  but  appears  to  be  a  useful  approach  Some 
of  the  functional  models  will  be  described  subsequently 
To  understand  a  C2  system  we  must  be  able  to  measure 
its  capability.  Figure  18  shovvs.thc  three  types  of  measures 
that  are  generally- employed. 


MEASURES 


•  MEASURES  OF  PERFORMANCE  (MOP)  -  MEASURE  OF  C2  SYSTEM'S 
CAPABILITY  TO  PERFORM  ITS  OWN  INTERNAL"  ACTIVITIES 

.  MEASURE  OF  EFFECTIVENESS  (MOE)  ■  MEASURE  OF  C2  SYSTEM'S 
CAPABILITY  TO  ENHANCE  THE  COMBAT  OPERATION  rT  IS 
SUPPORTING 

•  MEASURES  OF  FORCE  EFFECTIVENESS  (MOFE)  .  MEASURE  OF 
HOW  WELL  THE  FORCE  AND  ITS  C2  SYSTEM  PERFORM 
THEIR  MISSION 

Figure  18 

Measures  of  Performance  (MOPs)  assess  how  well  a  system 
or  subsystem  in  the  overall  C2  system  can  perfoim  its  own 
internal  functions.  For  example,  in  the  communication  sys¬ 
tem,  suitable  MOPs  include  bit  cuoi  rate,  message  cnoi 
rate,  end-to-end  message  delay,  antijam  maigm,  and  nclwuih 
survivability  under  various  attach  scenarios.  In  a  radat  sys¬ 
tem,  MOPs  include  the  probability  of  detection  as  a  function 
of  range,  target  size,  and  required  piobabihty  of  false  ahum, 
target  resolution  capability,  and  covciagc  volume.  The  sec¬ 
ond  level  of  measures,  measures  of  effectiveness  (MOE)  as¬ 
sess  the  capability  of  the  C 2  system  to  enhance  the  combat 
mission  it  is  supporting.  An  example  of  an  MOE  is.  a  pai 
ticular  communication  system  (JTIDS:  Joint  Tactical  Infor¬ 
mation  Distribution  System)  supports  the  F-15  in  its  air-air 
mission,  A  relevant  MOE  is  the  change  in  hill  probability 
due  to  the  addition  of  the  JT1DS  system  The  final  mea¬ 
sures  are  Measures  of  Force  Effectiveness  (MOFE)  These 
measure  how  well  the  force  and  the  C 2  system  perform  their 
mission.  A  typical  example  from  the  strategic  area  would  be 
the  damage  inflicted  on  the  target  set  by  the  ICBM  force 
The  C2  system  would  enter  into  tins  result  through  the  sen¬ 
sors,  the  data  p recessing  and  display  the  communication  foi 
conferencing,  the  support  to  ucuision-iuahing,  and  the  dis 
tnbution  of  the  emergency  action  messages 

As  one  would  expect,  MOPs  are  the  easiest  to  define  and 
calculate.  In  almost  all  C2  systems  and  subsystems  MOPs 
can  be  obtained,  MOEs  are  somewhat  more  difficult  Some¬ 
times  there  is  an  ambiguity  about  whethei  a  particular  mea¬ 
sure  is  an  MOP  or  MOE  1  he  resolution  is  not  vital  as  long 
as  the  quantity  l>cmg  measured  is  ck,u  One  of  the  element-? 
of  a  comprehensive  theory  will  lx*  an  Effectiveness  the¬ 
ory*  MOFEs  have  Ixen  a  topic  ol  research  for  man}  >  ears 
(cg,(3S-10))  The  impact  of  the  Cl  system  adds  another 
degree  of  complcxitv  to  the  problem 


tional  models  for  the  C2  problem 
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Figure  17 
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With' these  issues  and  definition's  as  background,  several- 
frameworks  for  analysis  can  how.be  defined  as  shows  in  Fig- 
ureT9. 


There  haw  been  several  papers  at  tins  ccnfcrcnce  dis¬ 
cussing  various  aspects  of  MOA  as  well  as  articles  (c.g.,{ll* 
llj)  so  the  discussion  will  bo  brief,  The  analysis  begins 
by  defining  the  capability  objectives  desired  for  each  level 
of  conflict.  The  lewis  of  conflict  are  normally  defined  as 
peacetime,  u isis,  conventional  war,  theater  nuclear  war,  and 
strategic  nuclear  war.  At  each  conflict  level,  various  levels 
of  “strategic”  capability  are  defined.  The  missions  and  the 
corresponding  mission  capability  levels  necessary  to  accom¬ 
plish  a  particular  strategic  capability  lewl  aro  then  defined. 
Finally,  the  C 2  components  and  the  corresponding  system 
capability  objectives  to  accomplish  the  missions  arc  defined. 
The  C2  system  (cither  existing,  programmed,  proposed  or 
hypothesized]  is  then  evaluated  and  the  results  are  flowed 
upwards  to  the  original  level.  Two  points  concerning  MOA 
are  useful: 

a  The  quantitative  evaluation  at  the  subsystem  level  is 
classical  analysis  of  MOP  type  measures.  The  diffi¬ 
culty  arises  as  one  aggregates  results  to  move  up  the 
chain 

•  The  dimensionality  increases  rapidly  so  the  analyst 
must  be  skilled  in  recognizing  the  important  cases 


The  Defense  Communications  Agency  and  the  JCS  are 
currently  using  the  technique  and  have  achieved  some  useful 
results. 

The  Modular  C2  Evaluation  Structure  (MCES)  shown  in 
Figure  21  is  a  second  framework. 


MCES  is  described  m  (45)  and  is  discussed  and  applied  in 
(16-19]  MCES  can  be  really  considered  a  check  list  to  guide 
the  ana’yst  in  setting  up  and  solving  the  problem.  As  in  the 
MOA  approach  ease,  the  key  to  success  is  in  the  skill  of  the 
analyst  and  the  relation  of  the  detailed  incdcl  to  the  actual 
system. 

The  final  technique  that  should  be  mentioned  is  the  Sys¬ 
tem  Effectiveness  Analysis  (SEA)  technique  developed  by 
Bov*honnier  and  Levis  [50-51].  They  construct  a  multi¬ 
dimensional  space  whose  axes  conespond  to  various  effec¬ 
tiveness  measures.  MOPs  of  the  C2  systems  arc  then  mapped 
into  loci  in  the  “effectiveness  space.”  This  procedure  is  really 
closer  to  an  analysis  technique  than  a  framework  and  could 
be  used  with  either  of  the  previous  frameworks. 

The  first  class  of  models  aie  piocess  models  I  will  briefly 
review  some  of  the  classical  C2  paradigms  and  then  look 
at  some  representative  piocess  models  The  first  model  of 
interest  is  Lawson’s  classical  C 2  model  m  Figure  22  that 
was  first  published  in  1978  [52]  and  has  been  d.scussed  in 
subsequent  papers  (53,51) 
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Another  classic  model,  Wohl’s  SHOIt  paradigm  is  shown 
in  Fig.irc  23  (55,56], 


The  original  work  here  dealt  with  Air  Force  tactical  opera* 
Hons  Both  of  these  models  can  be  mapped  into  the  model 
shown  in  Figure  21  (57]. 


The  first  box  is  the  “sense’’  function,  Jn  this  function, 
data  is  collected  by  various  means  to  describe  the  current 
and  projected  situation  Specifically  we  arc  interested  in  the 
statuo  of  <*uemy  forces  and  their  jiossible  actions,  status  of 
friendly  forces,  and  the  status  of  environment  (c  g.,  weather, 
geographical  considerations,  possible  nuclear  effects,  politi¬ 
cal  constraints,  and  neutrals)  In  carrying  out  tins  function, 
we  employ  a  myriad  of  different  sensors,  communication  sys¬ 
tems,  and  data  fusion  systems  In  the  second  (unction  u As¬ 
sess",  the  data  from  the  “Sense”  function  is  used  to  hypoth¬ 
esize  the  capabilities  and  possible  intention  of  the  enemy, 
to  review  the  status  and  capabilities  of  friendly  forces,  and 
compare  the  situation  to  the  "desired  state”  The  term  “de- 


}  Figure  24  1 

sired  state”  comes  from  control  theory  rather  than  the  usual 
military  lexicon.  It  can  range  from  a  tactical  objective  such 
as  taking  a  hill  or  bridge  to  a  major  strategic  state.  The  next 
step  is  to  generate  options  or  alternative  courses  of  action  to 
get  the  desired  state.  The  next  block  includes  evaluation  of 
the  options  and  choosing  a  course  of  action.  In  the  planning 
step,  the  necessary  implementation  details  arc  developed  in 
order  to  carry  out  the  selected  couiscs  of  action.  Finally,  the 
“direction”  block  indicates  the  dissemination  of  orders  to  the 
appropriate  forces.  This  command  model  interacts  with  the 
environment  and  the  friendly  forces  in  a  closed  loop  manner 
Over  tho  years  a  number  of  alternative  paradigms  haw  been 
developed  (c  g.,  Mayk  and  Rubin(5$,59)  or  Nichols(60]).  In 
general,  they  include  the  same  functions  relabeled  or  repack¬ 
aged  in  a  different  maimer 

One  of  the  deficiencies  in  these  paradigms  is  that  they  do 
not  give  adequate  emphasis  to  the  enemy.  The  enemy  is  not 
just  an  element  in  the  environment,  he  is  an  adversary  who 
is  deliberately  trying  to  achieve  Ins  own  objectives  and  deny 
us  our  objectives.  To  emphasize  the  two  sided  nature  of  the 
problem,  I  prefer  the  model  shown  m  Figure  25  which  I  orig¬ 
inally  introduced  at  the  Quantitative  Evaluation  Confeicnce 
in  I9S0  (2). 

The  command  section  of  the  pievious  paiadigms  are  embed¬ 
ded  in  the  boxes,  “Blue  Command”  and  “Red  Command” 
The  other  elements  of  the  C 2  process  aic  identified  specif 
really  and  can  be  associated  with  the  model  taxonom;  m 
Figure  17.  Most  importantly,  the  fundamental  two-sided  na¬ 
ture  of  combat  is  made  explicit 

In  all  cases  the  models  must  be  leplicatcd  (or  nested) 
vertically  to  show  the  command  hieiarchy  and  horizontally 
to  show  adjacent  units 

The  s.0nificance  of  the  icsuils  m  the  analysis  will  depend 
on  how  well  the  anal>st  treats  the  vanous  elements  of  the 
boxes.  In  a  given  application,  one  should  choose  the  model 
that  best  illuminates  the  mipoitant  features  m  particular 
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situation  at  hand.  At  the  current  stage  of  C2  theory  devd- 
opment  a  standard  or  generic  model  is  not  ueeded- 

The  other  Kay  that  one  should  vie*-  the  C 2  system  is  the 
classical  tirodine  approach  as  shcorn  in  Figure  26  (from  [15]). 


The  figure  illustrates  a  possible  timeline  for  a  Soviet  attack 
against  the  United  States  using  ICBMs  and  SLBMs  and  the 
actions  required  to  respond  uitfi  a  *  Launch  Under  Attack” 
option  Following  through  the  timelines  shows  that  there  is 
a  very  small  ”  Window  of  Opportunity'*  in  which  the  NCA 
(National  Command  Authority)  must  make  a  decision  in  or¬ 
der  for  this  option  to  be  successful.  Timeline  analysis  is  an 
important  element  in  most  C3  analyses.  There  arc  useful 
discussions  of  timeliness  in  (62]  and  (63). 

Some  representative  dynamic  models  arc  shown  in  Figure 

2$. 
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CLASSICAL  STATE  YAMAflU-  MODELS 
THBMOOfMAMC  (LAWSON) 

NAWCOV  MCOCLS  (TUPM.  MATK) 

-  STATISTICAL  MECHAMCS  UOOE1S  (MG££ft) 

•  POSSCKJSTC  MOOELS  (ZAOCH.  GOOOMAM) 

•  CATASTROPHE  AMO  CHAOS  (DOCKERY.  WOOOCOCK) 

•  ADAPTIVE  CONTROL  (STRACK) 

_ Figure  28 _ 

Most  of  them  haw  been  discussed  at  one  or  more  of  the 
MIT/ON R  or  JDL  C3  conferences  so  I  will  only  comment 
briefly.  Classical  state  variable  models  haw  a  natural  appeal 
because  of  their  success  in  treating  analogous  problems  in 
control  theory.  Lawson  (53]  used  a  thermodynamic  analogs' 
to  develop  a  simplified  model. 

Rubin  and  Mayk  (61-66]  haw  treated  several  interesting 
eases  using  a  stochastic  C5  model  whidi  is  based  a  discrete- 
time,  discrete-state  Maikov  process  model.  The}*  divide  the 
battle  into  a  sequence  of  stages  which  arc  then  subdivided 
into  phases.  By  numerically  solving  recurrence  equations, 
they  obtain  probability  distributions  for  various  force  effec¬ 
tiveness  measures. 

Ingber  (67*69]  has  used  a  statistical  mechanical  approach 
to  deme  dynamic  models.  The  central  feature  of  his  stodias- 
tic  model  u  the  path  integral  Lagrangtan.  In  his  paper  at 
this  conference  |70]  he  discusses  an  approach  which  is  consis¬ 
tent  with  the  theme  that  I  will  emphasize  later  with  respect 
to  models.  He  is  taking  data  from  the  National  Training 
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Cc^r  p^ac^insg  ty  aoAl 

roci*  iriti  ccUxcxs  li  XTCL 

(Wsu  [71-73]  h»  iJcttJopd  a  gepexzl  mode!  fccjC3^ 
pcwoMS  by  rkweg  d*=a  as  Jrftndisj  adwcb  of  aode ' 
cocsylexts  <A  &c«w-calcj.  Tbc  ddtJcj  repwcl  x  wide 
narfr  of  cUiiw,  (tg.  troops,  Urb,  fcwa  centers, 
£dd  cocstsd  ccScj).  Tic  code  stale  ud  jlratcrc,  its 
isp'rt  sfg£a]  variables,  aad  its  <y=ipct  slgsd  variables  (for  all 
tic  nodes  a  loti  Use  friendly  and  enemy  system)  axe  csed 
to  (ixiCtciK  lie  C5  }<occ«o-  Is  order  to  characterize  the 
cd the  state  of  C2ds  cl the  nodes,  bets!  rod  txesvar- 
iocs  logkil  rdatioaUups  (eg-:  dUsrica!  Boolean  lope,  prob¬ 
ably  logic,  Zadchs  ferry  lope,  or  Derapjter-Shaefirr  bdSef 
lope).  With  these  ideas  as  a  basis,  he  (brcsala  a  iorxal 
proeedarc  Ux  enlulng  the  cvohtioa  of  tic  system. 

Dockenrarid  Woodcock  hare  developed  models  using  catas¬ 
trophe  and  chaos  theory  (74-77].  Chaos  theory  (e.g.,  Gkrick 
[7£])  deals  with  physic*]  phenomena  in  which  small  change* 
in  initial  conditions  lead  to  drastically  different  system  be¬ 
havior  doc  to  nonlinear  interactions. 

St  rack  {75j  models  tbc  C2  system  as  an  adaptive  control 
system  and  uses  regression  analysis  to  develop  C2  system 
effectiveness  results. 

At  tbdr  present  stage  of  development  it  is  premature 
to  do  a  comparative  analysis  of  the  value  of  these  various 
models.  To  make  these:  or  other  dynamic  models,  useful, 
three  steps  are  important: 

1-  Model  a  reasonably  realistic  scenario, 

2.  Correlate  the  results  with  a  simulation,  testbed,  or  ac¬ 
tual  experience  and  understand  the  differences  between 
the  results. 

3.  Explain,  in  terminology  that  a  CIXC  or  the  JCS  is 
familiar  with;  the  lessons  learned  and  the  significance 
of  the  conclusions. 

The  last  step  is  particularly  important  in  helping  C1  re¬ 
search  in  making  an  impact  on  the  real  world. 

The  first  functional  area  of  interest  is  command  theory. 
Some  of  the  representative  dements  of  a  command  theory 
arc  shown  in  Figure  29. 

Cushman  [SOJ  has  identified  some  of  these  elements  in  what 
he  calls  *A  Commander's  Catechism*.  The  first  dement 
is  basic.  It  really  identifies  the  entire  structure  of  the  C7 
system:  who  is  authorized  to  make  what  decisions.  Thcothcr 
dements  delineate  other  issues  that  must  be  considered  in 
the  command  function.  Once  again,  the  list  is  representative, 
not  exhaustive. 

Representative  elements  of  a  headquarters  theory’  axe  shown 
in  Figure  30. 
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_ ■  Figure  29 _ 

ELEMENTS  Off  HEADQUARTERS  IffiQfflf: 

MFORMATIOM  FLOW  PATTERNS 

.  5fTRA-HOOAL  PROCESSSIS.  COMMIMCATICNS  AND  DISPLAYS 

•  PHYSICAL  TC^OtOGY  OF  HEADQUARTERS  FWCTION 
[DtSTWBUTED.  DISPERSED.  CENTRAUZEO) 

.  DATA  BASE  STRUCTURE  AMO  MAMTENANCE 

.  DECISION  AOS,  THE  USE  OP  ARTVlCtAL  INTELLIGENCE 

•  SORVUVABUTY  OF  HEADQUARTERS  FUNCTION 

_ Figure  30 _ 

The  headquarters  function  arc  those  processes  needed  to 
support  the  commandcr(s).  Although  both  the  command 
and  headquarters  functions  have  been  carried  out  for  several 
centuries,  often  with  spectacular  success,  the  development 
of  adequate  theories  is  still  an  area  of  active  research.  In 
many  eases  the  successes  appear  to  have  been  due  to  ap¬ 
plying  Clausewitz’s  dictum. ‘"Always  have  a  genius  in  charge, 
first  in  general  and  then  at  decisive  points’  (21j. 

Some  representative  command  and  hcr-dquartcrs  models 
arc  shown  in  Figure  31. 

CCMWANP^NP.HEAPQUAflTEBSjtQPSLS 

•  HEADQUARTERS  EFFECTIVENESS  ASSESSMENT  TOOL  (HEAT) 

•  OATA  FLOW  AND  DECISIONMAKING  STRUCTURES  (PETRI  NETS) 

-  MODELS  OF  DECISION  MAKERS 

•  RESOURCE  ALLOCATION 

_  Figure  31 _ 
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The  Headquarters  E£xtitcaess  Assessment  Tool  (IIEAT) 
was  originally  developed  by  ifoyes  a ad  is  being  evolved  fur¬ 
ther  by  various  researchers  (c.g.f  £S1])-  The  HEAT  model  is 
shown  in  Figure  32.  ' 


It  was  originally  used  for  headquarters  which  were  primarily 
responsible  for  planning,  supporting  and  coordinating  fight¬ 
ing  forces  (c.g.,  JCS  or  Corps  level).  It  treats  the  C2  process 
as  an  information  management  system  and  try's  to  measure 
effectiveness  in  terms  of  military  mission  accomplishment. 
Research  is  bang  carried  on  with  generalizations  of  HEAT. 

Some  useful  work  has  been  accomplished  in  modeling 
data  flow  and  decision-making  structures  using  Petri  nets. 
Petri  nets  which  are  widely  used  in  computer  science  (c.g., 
(S2,S3J)  appear  to  haw  first  been  applied  to  C2  problems  by 
Tabak  and  Levis  (S-1-S5).  These  papers  and  subsequent  pa¬ 
pers  [Sfi-90]  have  used  this  technique  to  develop  a  structured 
approach  to  the  design  of  command  and  control  organiza¬ 
tions.  They  first  generate  a  data  flow  structure  using  the 

Petri  net  formalism.  The  various  types  of  activities  such  as 
data  fusion,  situation  assessment,  and  response  selection  can 


with  a  response  selection  strategy.  The  model  is  developed 
using  N-dimensionaJ  information  theory.  The  total  rate  of 


activity  fn  the  system  is  divided  jnlo  throughput,  blockage, 
coordination,  and  internally -generated  terms.  One  can  then 
use  the  idea  of  bounded  rationalily-to  study  the  maximum 
rate  the  system  can  operate  without  overload.  The  simple 
model  in  Figure  33  can  be  extended  to  include  memory  and 
interacting  decisionmakers.  It  is  important  to  note  that  dia¬ 
grams  such  as  Figure  33  arc  not  models  of  commanders  like 
Kapolean  or  Patton,but  can  play  some  role  in  modeling  staff 
and  intcrmcdiate-Icvd  decision  makers. 

Resource  allocation  deals  with  the  problem  of  optimally, 
or  at  least  efficiently,  assigning  j\\  weapons  to  Ar2  targets. 
Often  the  commanders  and  their  weapons  arc  geographically 
separated  and  may  have  overlapping  areas  of  responsibility. 
A  representative  reference  is  (91). 

One  of  the  objectives  of  the  research  on  command  and 
headquarters  theory  should  be  to  understand  the  type  of  is¬ 
sues  highlighted  in  Figures  29  and  30.  Through  understand¬ 
ing,  we  can  improve  the  performance  of  the  commander  and 
his  staff.  We  should  note  that  there  is  a  large  body  of  work 
on  decision  support  systems  which  we  have  not  covered. 

The  next  category  of  models  arc  combat  and  conflict 
models  (Figure  3 1). 


be  represented  in  this  formalism.  Various  MOPs  such  as  ac¬ 
curacy,  timeliness,  task  processing  rate,  and  workload  arc 
evaluated.  The  data  flow  structures  arc  then  transformed 
into  C 2  organizational  designs  which  allocate  functions  to 
various  decisionmakers.  Then,  MOEs  arc  evaluated  for  the 
various  organizations. 

A  series  of  researchers  (91-93]  have  developed  models  of 
decision-makers.  A  typical  mode!  is  shown  in  Figure  33. 

The  quantity  ^  represents  a  set’  of  input  symbols  frein  a 
collation  of  sources.  It  is  corrupted  by  noise  n  so  that 
the  system  receives  X-  In  the  situation  assessment  stage, 
one  of  a  set  of  U  algorithms  is  selected  to  observe  the  in¬ 


put  and  hypothesize  the  situation.  The  output  is  a  silua*  The  earliest  work  in  this  area  was  by  Lanchcstcr  (3S).  A  sim- 


lion  assessment  z-  The  second  stage  is  a  response  selection 


stage,  where  one  of  V  algorithms  is  selected  in  accordance 
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pic  form  of  his  equations  for  aimed  fire  are  shown  in  Figure 
35-  f  ‘  /  * 


The  variables  F  and  E  arc  the  size  of  the  friendly  and  enemy 
forces  respectively  and  Ce  and  Cf  arc  the  kills/sec/ unit  of 
forces  In  these  simple  equations,  the  impact  of  G2  appears  in 
these  coefficients.  For  example,  improved  detection  and  reso¬ 
lution  capability,  better  target  location  accuracy  would  raise 
(?£,  Delay  in  receiving  target  location  information  for  mov. 
ing  targets  would  decrease  Ce-  There  haw  been  numerous 
generalizations-  of  Manchester’s  equations.  Taylor  (95)  pro¬ 
vides  a  comprehensive  overview  (without  any  C2)  emphasis. 
Moose  and  Wozcncraft  (96j  presented  a  useful  generalization 
at  an  earlier  symposium.  (See  (97)  also).  Shubik’s  Mathe¬ 
matics  of  Conflict  (9Sj  contains  several  relevant  papers.  The 
various  models  attempt  to  incorporate  the  effects  of  resup- 
ply,  self-attrition,  heterogeneous  forces,  and  information  un¬ 
certainty.  In  order  to  incorporate  the  effects  of  maneuver,  a 
set  of  coupled  partial  differential  equations  may  be  written 
(90).  Unlike  Manchester’s  original  equations  which  could  be 
solved  explicitly,  most  of  the  generalizations  require  a  nu¬ 
merical  solution. 

An  obvious  generalization  is  to  incorporate  the  stochastic 
nature  of  the  combat  process  to  obtain  a  Markov  process 
model.  Suitable  references  include  (100- 1 03],  The  behavior 
of  the  mean  value  of  the  process  relates  back  to  a  version 
of  generalized  Manchester's  equations.  Game  theory  has  also 
been  employed  to  model  combat  (e.g.,  (I0M05)) 

Communications  theory  is  perhaps  the  most  advanced 
of  the  various  functional  areas.  Representative  elements  of 
communication  theory  arc  in  Figure  36. 

Starting  with  the  user  requirements*  the  general  design  pro¬ 
cedures  arc  wdl  understood  and  in  most  eases  the  generic 
measures  shown  m  Figure  36  can  be  evaluated.  There  are  a 
large  number  of  classic  papers  and  texts  that  consider  these 
jssucs(Cf,  (106*109)).  Communications  is  an  area  in  which 
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USER  REOUWEMEKTS  (CONNECTIVITY.  QUALITY.  CAPACITY. 
SURVTV ABILITY,  ENVIRONMENT) 

,  ,  GENERIC  PROPERTIES  OF  MEDIA  AND  SYSTEMS 

CAPACITY 
*  -  QUALITY  , 

AJ  PERFORMANCE 
/  .  LPI  PERFORMANCE 

.  SURVIVABILITY 

.  reliability 

.  .  FLEXIBILITY,  - .  f 

.  CONNECTIVITY 
.  TIME  DELAYS 

1  Figure  36  __  — 

the  communications  research  community  has  had  a  major 
impact  oh  DoD  procurement  of  systems.  As  examples,  the 
AUPAnct  had  a  significant  influence  on  the  current  DoD 
communications  networks  and  Lincoln  Laboratories  satellite 
research  has  impacted  the  current  military  satellite  architec¬ 
ture. 

We  should  note  that  the  measures  in  Figure  36  are  all 
MOPs.  An  important  research  area  is  assessing  what  im¬ 
pact  a  given  communications  MOP  such  as  capacity  has  on 
mission  effectiveness.  Considerable  work  is  still  needed  in 
that  area.  , 

Representative  elements  of  a  surveillance  and  fusion  the¬ 
ory  are  shown  in  Figure  37. 


elements 


VOLUMES  OF  RESPONSIBILITY  ANO  INTEREST 

.  GENERIC  PROPERTIES  OF  SENSORS  (E  G,  DETECTION, 
TRACKING.  CAPACITY,  PROCESSING  CAPABILITIES) 

.  TASKING  PROCEDURES  (E.G-  RESPONSIBILITIES.  TIMELINESS) 

.  INFORMATION  FLOW  FROM  NON-ORCANIC  SENSORS 

,  TOPOLOGY  OF  SENSOR  INFORMATION  FLOW  AND  FUSION 


1  Figure  37  _  _ — J 

The  first  idea  is  that  of  volumes  of  tcsponsibility  and  m- 
leres<.  A  simple  definition  of  llic  Commanders  volume  of 
interest  is  that  space  around  the  commando  where  actions 
could  have  a  “real-time’  or  “near-term”  impact  of  Ins  mis¬ 
sion  accomplishment.  This  volume  has  grown  continuously 
over  the  years  as  the  range  and  attorney  of  weapons  systems 
has  increased.  Napoleon’s  volume  of  interest  was  prohahlv 
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a  circle  on  the  ground  with  a  radius  of  100  or  so  miles.  The 
JCS  volume  of  interest  consists  of  the  entire  globe  including, 
the  ocean  depths  and  space  up  to  at  least  the  geosynchronous 
satellite  orbit  altit  ude.  Sensors  have  continually  tried  to  keep 
up  with  this  volume  of  interest  in  orderto  reduce  our  uncer- 
tainty  about  the  enemy’s  intentions.  New  weapons  systems 
such  as  steathy  cruise  missiles  cause  the'raci  to  continue. 
The  volume  of  responsibility  is  generally  a  smaller  space  and 
must  be  clearly  defined  when -the  C3-  problem  is  structured 

The  generic  properties  of  sensors  and  their  MOPs.arc 
reasonably  well  understood.  As  in  the  communications  area 
there  are  a  number  of  classic  papers  and  texts  (Cf;  {110*1 12)) 
that  explain  how  to  design  radar  and  sonar  systems  and  mea¬ 
sure  their  performance.  Translating  these  MO Ps  to  MOEs 
is  still  a  challenging  problem  but  a  number  of  useful. results 
have  been  obtained.  Tasking  procedures  for  the  sensor  sys* 
term  connect  back  to  the  command  structure  problem. 

The  state  of  fusion  theory  is  far-  less  mature.  There  is 
separate  panel  under  the  JDL,  the  Data  Fusion  Panel,  that 
deals  with  this  area  (Cf.  (113)).  The  fusion  area  remains  a 
major  challenge  to  the  C3  research  community. 

The  two  remaining  functional  models  in  our  taxonomy 
arc  the  EW  and  Counter*  C3!  model  and  the  Information 
model.  In  the  interest  of  brevity,  we  will  not  discuss  them  in 
detail.  However,  they  arc  both  significant  areas  and  should 
not  be  neglected  in  the  C3  research  progiom. 

The  final  point  to  make  with  respect  to  the  model  tax¬ 
onomy  is  that  there  arc  significant  research  problems  in  each 
of  the  areas.  The  C3  research  program  should  be  balanced 
m  its  efforts. 

Progress  in  Simulation,  Test  Beds,  and 
Exercises 

The  other  area  of  interest  is  simulations,  test  beds,  and 
exercises.  They  deserve  equal  attention  with  the  modeling 
area  for  several  reasons: 

1  As  indicated  in  Figure  13,  they  are  closer  to  the  real 
world; 

2  They  arc  mudi  more  expensive,  DoD  probably  spends 
2-3  orders  of  magnitude  more  money  in  this  area  than 
in  the  modeling  area 

3.  They  tend  to  have  more  impact  on  operational  com¬ 
manders  and  decision- makers  so  improving  their  fidelity 
is  important. 

However,  in  the  interest  of  time  and  space,  wc  will  simply 
list  some  representative  facilities  for  simulation  (Figure  3S), 
test  beds  (Figure  39),  and  field  exorcises  (Figure  10) 


REPRESENTATIVE  SiWlATION  FACILITIES 

•  NAVY  WAR  COLLEGE;  WARS,  NWGS 

•  TACTICAL  AIR  WARFARE  CENTER:  BLUE  FLAG 

•  ARMY  WAR  COLLEGE.  JOINT  THEATER  LEVEL  SIMULATION 

•  USAFE.  RAMSTEJN.  WARRIOR  PREPARATION  CENTER 
*,  IFFN  JOINT  TEST  AND  EVALUATION 

•  NOSC:  IBGTT/RESA 

•  MAXWELL  FIELD.  COMMAND  READINESS  EXERCISE  SYSTEM 

•  JCS*  JESS 

•  JDL-SIMNET 

••  NPG:  WARGAME  LAB 

_ Figure  38 _ 


•  NATIONAL  TRAINING  CENTER 

•  RED,  GREEN  FLAG 

•  9TH  INFANTRY  DIVISION.  FT.  LEWIS 
ADDCOMPE,  FT.  BRAGG 

AEGIS  TEST  BED,  MOORESTOWN,  NJ 

•  SDI  NATIONAL  TEST  BED 

_ Figure  39 _ 


REPRESENTATIVE  F1EIP,  EXERCISES 

•  GALLANT  EAGLE 
NORTHERN  WEDDING 
REFORGER 

•  $0i:0  SHIELD 
GLOBAL  SHJELO 

_ Figure  40 _ 

Once  again  wc  emphasize  the  mipoitancc  of  a  thiead  of  con¬ 
sistency  across  the  various  areas 

Fundamental  Principles 

After  completing  this  teview  of  progicv>,  a  logical  ques 
tion  is*  Arc  there  any  fundamental  pnnup!es?  If  one  is 
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looking  for  something  as  fundamental  as'Shannon’s  Channel 
Capacity  Theorem  [114]  or  Hcisenburgs  Uncertainty  Princi- 
pie,  the  answer  is  clearly  ‘no".  ,1(  one  is  looking  for  irnpor* 
tant  central  results  such  as  optimum  NVienerJiUcrs,  Kalman 
filters,  the  fundamental  importance  of  eigenvalues  and  eigen* 
functions,  or  ambiguity  functions,  (Cf.  {109,110})  the  answer 
is  probably  still  “no".  The  best  I  was  able  to  do  was  to  list 
the  ideas  shown  in  Figure  42. 


ANl£.MflM£HIALPJ31MCl£Ld2 

.  HME  *  UNCERTAINTY  TRADEOFF 

•  TWO-SIOED  NATURE  OF  PROBLEM 

.  SPEEO  OF  DECISION  CYCLE 

•  FORCE  MULTIPLIERS  CAK  START  AT  ZERO 

Figure  42 

These  notions  seem  to  arise  frequently. 

Uncertainty  is  fundamental  in  warfare.  As  wc  get  more 
information  (vs  data)  our  uncertainty  decreases.  As  time 
met  eases  the  uncertainty  will  normally  approach  some  min¬ 
imum  value.  Unfortunately,  the  window  of  opportunity  may 
close  before  the  uncertainty  reaches  an  acceptable  level.  Thus 
the  commander  and  his  staff  must  deal  with  this  time-uncertainty 
tradeoff.  It  is  important  for  the  staff  to  apprise  the  com¬ 
manders  of  the  specific  uncertainties  that  arc  inherent  in  the 
information  that  they  are  presenting  to  him. 

The  next  principle  to  lemcmber  is  that  combat,  and  the 
C 2  associated  with  it,  is  inherently  a  two-sided  problem.  At 
the  system  design  level,  we  must  remember  that  the  commu- 
nicaUoiis  and  radar  systems  must  work  in  a  hostile  environ¬ 
ment  c  ited  by  both  the  enemy  and  nature.  The  ability  to 

function  n  the  presence  of  jamming,  physical  attack,  EMP, 
and  other  threats  must  be  an  important  design  factor.  At 
the  decision-making  level,  we  must  remember  we  are  deal¬ 
ing  with  an  intelligent  adversary  and  consider  his  possible 
reactions  to  our  various  strategics  We  must  also  remember 
that  wcare  fight.ng  an  information  war  and  that  disrupting, 
confusing,  or  destroying  his  C3  is  a  key  element  in  an  overall 
strategy 

The  “speed  of  decision  cycle"  principle  is  just  a  way  of 
describing  the  fact  that  we  must  be  able  to  react  faster  than 
the  enemy  This  principle  applies  from  onc-on  one  air  cn 
gageme/its  to  entire  campaigns  History  is  replete  with  ex¬ 
amples.  horn  Alexander,  Caesar,  and  Napolean  to  Patton 
and  \fac\ithiu  whctc  fastei  reaction  tunes  were  important 
to  battlefield  success  The  Son  'lay  pr.son  camp  raid  m  1970 
is  a  good  example  of  where  a  long  decision  (and  implemen¬ 
tation)  cvclc  lead  to  failure  It  took  about  six  months  from 
the  time  the  location  was  fust  identified  until  the  raot  was 


conducted  and,  by  that  time,  the  prisoners  were  gone.  Ev¬ 
ery  element  of  the  C2  system  and  process  must  recognize  the 
importance  of  s'peed  and  timely  decisions. 

The  final  principle  is  that  force  multipliers  can  start  at 
zero  We  often  refer  to  C2  as  a  force  multiplier.  The  basic 
idea  is  that  if  we  take  as  a  reference  point  two  opposing  forces 
with  assumed  C2  systems  and  a  set  of  assumed  strategics 
then  there  would  be  a  given  battle  outcome.  This  outcome 
(or  MOFE)  can  be  measured  in  different  ways  (c.g.,  surviving 
forces,  territory  occupied;  objectives  obtained).. By  examin¬ 
ing  the  actual  C2  system  a  given  MOFE  will  be  changed 
Thus, 

AtOFE#  =  cxMOFEn, 

where  the  subscripts  N  and  R  denote  ‘‘new"  and  “reference", 
respectively,  and  a  is  the  C 2  force  (effectiveness)  multiplier. 
In  many  cases  one  can  show  that  improved  C2  can  signifi¬ 
cantly  increase  the  effectiveness  of  the  force  Unfortunately, 

there  are  many  examples  in  which  the  C 2  system  can  signif¬ 
icantly  reduces  the  effectiveness  of  the  force.  The  capture  of 
the  Pueblo  is  an  example  where,  by  being  unable  to  get  avail¬ 
able  airplanes  to  the  sccr.c  in  time,  the  C2  system  reduced 
the  force  effectiveness  to  zero. 

There  arc  probably  other  equally  important  notions  as 
these  four  principles  Since  I  was  unable  to  develop  any  really 
fundamental  principles,  it  will  be  useful  to  discuss  what  I  will 
immodestly  refer  to  as  “Van  TVccs  Laws  of  C3". 

Van  Trees  Laws  of  C3 

Law  1:  Budget 

The  first  law  deals  with  the  budget  and  is  motivated  by 
Figure  43. 


PERCENT 


PERCENTAGE  Of  TOTAL  DEFENSE  BUDGET  AUOCATEO  TO  C3 

_ Figure  -13 _ J 

In  1970,  C3  was  tVc  of  the  tot.d  defense  budget  In  1985, 
this  had  grown  to  7 l/  Using  lm<\u  cxU.ipolation  we  obtain 
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the  first  Jaw; 

“By  204 S,  the  entire  defense  budget  will  be  allo¬ 
cated  to  cKn 

The  first  corollary  in  this  law, is  that: 

“The  C2' force  multiplier-' will ‘have  to  approach 
infinity,  because  there’will  be  no  forces  left.” 

It  is  important  to  note  that  the  C3  budget' numbers  do 
not  include  intelligence  systems  due  to  their  classified  nature. 
If  intelligence  were  included,  the  result  would  be  even  more 
dramatic. 

A  second  corollary  follows  if  one  plots  the  cost  of  a  com¬ 
munications  satellite  (on-orbit)  starting  with  the  DSCS-I 
(1DCSP)  in  the  1960’s  and  concluding  with  the  projected 
Milstar  satellite  in  the  early  I990*s.  Then-compare  those 
costs  with  the  total  C3  budget.  Although  we  do  not  show 
the  curve,  it  results  in  the  second  corollary: 

“By  approximately  2032,  the  entire  C3  budget 
will  be  devoted  to  a  single  military  communica¬ 
tions  satellite’*. 

The  positive  side  of  this  corollary  is  that  it  should  reduce  in¬ 
teroperability  problems  and  simplify  the  C3  budgeting  pro¬ 
cess. 

While  the  first  law  states  an  improbable  conclusion,  it 
should  demonstrate  the  importance  of  understanding  the 
utility  and  effectiveness  of  C3  systems  so  w<.  *.  .1  determine 
how  much  C3  is  needed. 

Law  2-  Uncertainty 

The  second  law  deals  with  uncertainly  and  is  illustrated 
in  Figure  44. 


UNCERTAINTY 


Figure  44 


The  sketch  is  a  plot  of  uncertainty  using  an  appropriate  mea¬ 
sure  as  a  function  of  time.  As  more  information  about  the 
situation  is  assimilated  the  uncertainty  decreases.  Unfortu¬ 
nately,  the  Second  Law’  says: 

“The  uncertainty  in  a  C7  system  generally  reaches 
an  acceptable  level  after  the  required  action, time 
is  past,” 

Thus,  the  commander  must  work  with  the  uncertain  in¬ 
formation  that  is  available  at  the  time  he  must  make  a  deci¬ 
sion.  The  strategic  C 2  example  in  Figure  27  was  a  dramatic 
example  of  this  effect.  According  to  that  proposed  timeline, 

the  NCA  must  make  a  decision  by  about  15  minutes  after  a 
Soviet  launch  if  he  desires  to  implement  an  LUA  option.  At 
that  time  there  may  be  still  a  significant  uncertainty  about 
the  situation. 

Examples  of  C 2  decisions  throughout  history  show  simi¬ 
lar  phenomena.  Technology  is  not  going  to  change  this  ba¬ 
sic  relationship.  For  example,  as  sensor  ranges  go  up,  the 
volume  of  interest  will  increase.  The  successful  commander 
must  cope  with  these  uncertainties  (the  Fog  of  War)  and 
make  appropriate  decisions.  The  role  of  the  C2  system  is 
to  reduce  the  uncertainties  as  much  as  possible  and  make 
certain  the  commander  understands  them. 

Law  3:  Communications  Capacity 

The  third  law  deals  with  the  capacity  of  the  communica- 


If  we  plot  the  communications  capacity  in  bits/sec  as  func¬ 
tion  of  time,  it  is  easy  to  show  that  it  lias  grown  exponen¬ 
tially.  A  good  example  is  the  tiansatlantic  military  com¬ 
munications  capacity  in  World  War  I,  World  War  H,  1965, 
and  now  The  exact  current  capacity  may  be  classified,  but 
by  simply  counting  satellites  and  rabies,  wc  can  see  that  it 
must  be  in  the  range  of  500  mbps  to  1  gbps  compared  to 
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a  miniscule  World  War. I  capability  Unfortunately,  the  user 
demand  has  grown  even  more  dramatically,  leading  the  third 
law: 

“The  total  communication  capacity  of  C3  sys¬ 
tems  has  grown,  as  A(,eot.  The  perceived  user 

requirement  has  grown  as  8^*,  where  0  >  a” 

In  all  of  the  architecture  studies,  one  sees  an  insatiable 
demand  for  more  communications.  One  of  the  reasons  for 
this  relationship  is  that,  unlike  the  civilian  community,  the 
actual  military  user  or  the  person  determining  communica¬ 
tions  requirements,  does  not  get  a  monthly  telephone  bill. 
Thus,  the  tradeoff  between  requaed  capacity  and  cost  is  less 
direct.  In  spite  of  this,  the  community  must  develop  meth¬ 
ods  of  determining,  “How  much  is  enough”  in  terms  of' the 
contribution  of  communications  capacity  to  force  effective¬ 
ness. 

Law  *1:  Processing  Capacity 

A  similar  phenomenon  for  information  processing  capac- 


A>  each  new  generation  of  computers  has  been  introduced 
into  command  centers  the  mlounalion  pioccssing  capacity 
has  increased  dramatically  A  uuve  fitted  to  the  growth 
would  show  exponential  gtowth  as  a  function  of  time  How¬ 
ever,  the  Fourth  Law  states 

"The  m  foi  mat  ion  pioeessmg  capai  ity  of  comput¬ 
ers  in  command  centcis  has  gtown  exponentially 
The  perceived  processing  load  has  grown  with  a 
larger  exponential " 

Examples  of  this  phenomenon  abound.  For  example,  in 
Vietnam,  there  were  500,000  messages  per  month  coming  out 
the  two  communication  centcis  m  1966  This  corresponded 


to  an  enormous  information  processing  load.  When  you  look 
at  the  results  of  JCS  exercises  or  processing  loads  during 
crises,  you  see  exactly. the  same  behavior.  A  significant  chal¬ 
lenge  to  the  research  and  operational  community  is  to  match 
the  information  processing  demands  to  what  the  commander 
needs  and  his  staff  can  absorb. 

Law  5:  Duality 

The  next  law  deals  with  what  I  call  “Duality”.  A  com¬ 
mon  approach  among  mathematicians  and  researchers  is  to 
translate  a  new  problem  into  one  that  someone;  lias  already 
solved  and  then  apply  the  carliei  icsult.'  One  can  construct 
reasonably  good  analogies  between  C7  systems  and  living 
(biological)  systems.  One  can  also  constiuct  analogies  be¬ 
tween  C7  systems  and  the  management  of  large  companies. 
Unfortunately,  these  analogies  lead  us  to  Law  5. 

“The  C 2  problem  is  analogous  to  the  living  sys¬ 
tem  problem.  By  mapping  one  into  the  other,  wc 
can  replace  one  unsolved  problem  with  another 
unsolved  problem.” 

The  corollary  5A  is  that  you  can  map  the  C 7  problem  into 
a  business  management  problem  that  is  equally  hard  to  solve 
We  would  probably  hesitate  to  use  U.S  Steel,  International 
Harvester,  or  Texas  Air  as  models  of  how  to  run  the  military. 
The  point  of  this  law  is  that  analogies  arc  interesting  but 
duality  is  only  useful  if  it  helps  obtain  quantitative  results 
or  aids  in  intuitive  understanding. 

Law  6:  Acronyms 

The  next  law  deals  with  acronyms  and  is  related  to  Au¬ 
gustine’s  9th  Law  (115)  which  is. 

“Acronyms  and  abbreviations  should  be  used  to 
the  maximum  extent  possible  to  make  tuvial  ideas 
profound.” 

This  general  law  refers  to  the  ontne  Defense  Department 
However,  the  C3  community  lias  developed  "Acronymiza- 
tion”  to  a  fine  art.  The  result  is  Law  G 

“If  one  takes  the  16  most  frequently  used  letters 
in  the  English  alphabet  and  mates  an  ordered 
triplet  randomly  from  tins  set,  the  probability 
is  0  216  that  the  result  will  Ik*  a  segment  of  C 3 
acronym.” 

For  example,  if  the  tuple t  conus  uul  SDK,  unr  has  the 
space-based  radar,  Til)  gives  JIIDS,  and  m  foilh  Note 
that  by  using  .216  instead  of  21  in  the  itsull,  >u  have  addtd 
credibility  to  the  conclusion 

Acronjms  are  just  a  visible  sign  of  the  difficult)  the  C 
community  has  in  communicating  with  the  lest  of  the  vunld 
Overcoming  this  communications  juoblem  is  an  impoiUnt 
challenge  to  the  community 

Law  7:  Complexity 

As  everyone  realizes,  C'3  equipment  is  becoming  more 
complex  as  each  new  gcncialion  is  developed  I  he  pioblun 
is  shown  in  Figure  17 
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I  Two  metrics  that  may  be  relevant  in  dealing  with  the  popu* 

lation  that  must  develop  the  basic  tlicoty,  design  the  systems 
and  equipment,  and  operate  and  maintain  the  equipment  arc 
also  shown  in  the  figure.  Although  the  decline  in  SAT  scores 
appears  to  have  leveled  off,  the  statistics  concerning  the  math 
and  science  capabilities  of  our  high  school  and  college  grad* 
uates  is  alarming.  It  should  be  noted  that  the  Services  haw 
done  an  excellent  job  in  raising  the  average  education  level 
of  their  recruits.  A  related  and  equally  disturbing  statistics 
is  the  decline  in  Ph.D.’s  in  Math,  Science,  and  Engineering 
awarded  to  U.S.  citizens.  This  trend  affects  not  only  our  C3 
capability,  but  the  ability  of  oui  nation  to  compete  in  the 
world  market. 

This  complexity-ability  divcigencc  increases  the  impor¬ 
tance  of  equipment  reliability,  built-in  test  equipment  (BITE), 
and  extensive  training  undet  leaiistic  conditions.  It  also 
emphasizes  the  importance  of  reducing  equipment  complex¬ 
ity  by  keeping  the  specifications  tcasonablc.  Often  the  last 
0  5dB  of  pciformancc  increases  the  complexity  (and  cost) 
significantly. 

Law  8:  Models  versus  Reality 

Often  C*  researchers  arc  cuticizcd  because  their  models 
don’t  correspond  to  reality.  Actually,  the  piobicm  may  icst 
with  operational  comma iideis  as  shown  in  Figure  18. 


LAW  8;  MODELS  VERSUS  REALITY 


OPERATIONAL  COMMANOERS  CAN'T  SEEM  TO  UNDERSTAND 

THAT: 

A.  TO  MOVE  A  8ATTAUON 100  MILES  IS  A  SIMPLE  STROKE 
WITH  THE  “MOUSE" 

B  A  FLANKING  ATTACK  IS  ACCOMPLISHED  BY  TRANSPOSING 
THE  TRANSITION  MATRIX. 

s 

1  Figure  48  1 


The  research  community  knows  that  if  you  portray  the  Corps 
sector  and  the  location  of  its  units  on  a  computer  screen,  then 
you  can  move  a  battalion- by  simply* moving  the  “mouse” 
^Similarly,  if  .you  represent -the- mot  ion  of  a  particular  unit 
by  an  appropriate  Markov- process,  then  yon  can  conduct  a 
flanking -attack. by  a  matrix  transposition.  Unfortunately, 
operational  commandcrs  feel  that  the  actual  operations  are 
not  so  easy. 

This  law  ties  back  to  one  of  the  important  points  in  the 
Progress  in  Modeling  discussions.  In  order  for  models  to 
be  useful;  it  must  correspond  a  realistic  scenario,  correlate 
with 'simulations  or  testbeds  or  actuab  experience,  and  be 
explainable  to  the  operational  commander  in  his  terms.  The 
onus  for  accomplishing  these  steps  rests  on  the  model-maker, 
not  the  operational  commander. 

Law  9:  Predicting  Future  C3  System  Performance 

The  Ninth  Law  deals  with  predicting  the  performance  of 
C3  systems  as  shown  in  Figure  49. 


LAW  9:  PREDICTING  FUTURE  C*  SYSTEM  PERFORMANCE 

THE  PERFORMANCE  OF  FUTURE  C5  SYSTEM  GENERALLY  TURNS 
"GREEN"  AT  T0.  WHERE  T0  IS  GREATER  THAN: 

(I)  END  OF  CURRENT  ADMINISTRATION  PLUS  8  YRS. 

(II)  PRESENTERS  RETIREMENT  AGE  PLUS  3  YRS. 

_ Figure  49 _ j 

Representative  mission-oriented  analyses  typically  evaluate 
the  current  system,  the  near  term  system  and  a  far  term 
system.  The  normal  cfTcct  that  you  gel  when  you  use  anal¬ 
yses  with  icd,  yellow  and  gieen  as  metrics  is  that,  in  the 
current  system,  there  aic  a  fan  luuubvi  of  missions  that  arc 
red  and  yellow.  From  ibis  one  u tales  packages  oi  piograms 
tc  improve  it.  By  the  neai  turn  you  will  have  a  mixtuic 
of  red  and  yellows,  but  with  moie  gioens  Theie  is  a  lea 
sonably  general  phenomena  that  almost  all  missions  turn 
green  in  the  far*tcrm  system,  pailicuiarly  if  you  are  willing 
to  supply  funds  for  what  the  picsentei  is  piop<>smg  The  m 
(cresting  point  that  this  law  deals  with  is  the  lime, 7b, when 
everything  turns  green.  What  the  data  shows  is  that  7b  is 
generally  one  of  two  turns  It  is  either  at  the  end  of  the  cur 
rent  administration  plus  8  yeais  in  that  option  it  gives  the 
system  time  to  circulate  tlnough  two  new  sets  of  jtolitical 
appointees  Therefore,  if  it  doesn’t  actually  turn  out  to  be 
green,  then  the  current  person  has  at  least  one  or  two  gen 
crations  of  preceding  people  to  blame  Alternatively,  horn 
the  standpoint  of  the  presenter,  it  is  generally  his  retirement 
age  plus  about  3  years 

Unfortunately,  past  experience  indicates  the  actual  per¬ 
formance  of  future  C3  systems  is  genu  ally  not  as  “gieen” 
as  projected  in  their  early  stages  of  planning  Among  other 
factors.  Laws  3  and  4  contribute  to  this  problem 
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Law.  10:  interQperabiHty 
*  One .version;oL(hls,  law  is: 

4  When  Clause witz  talked  about  -“friction  in  war,” he. 

'  was  predict-ng  the  problems  with  C3  in  joint'op- 
-  .erWons.’’ 

One  of  the  key  problems  that  we  have  in  C4  systems  4s  ixx* 
tetoperabiUty.  All,  this  law  does  is-  point  out-thatHhe  phe¬ 
nomena  *>wasy predicted  anu mber ,  of •  years'* ago.  This d$ .  a  > 
fundamental  problem  and  there  are;  major  efforts  underway; 
to  correct  these  interoperability  problems.  Some  of  the  ear¬ 
lier  speakers' have  given  specific  examples. ,  It  is  still  one, of 
the  most  signficant  problems  that  we  have  in.thc  C3  world 
and  deserves  the  attention  of  the  research  community. 

Although  there  are  a  number  of  oiher  laws  dealing.with 
such  interesting  phenomena  as  sensor  range  vs  volumes  of 
interest,  the  ratio  of  signal  personnel  to  the  size  of, the  total 
force,  the  effects  compartmcntation/the  characteristics  of 
software,  and  the  size  of  staff!,  it  is- appropriate  to  stop  at 
ten.  One  should 'also  note  that  a  number  o{  Augustine’s 
Laws  (H 5:  Laws  5, 12,15,17, IS, 19, 37,  and  13)  can  bo  applied 
dircctlyto  systems,  ~  * 

While  I  was  presented  these,  laws  m  a  somewhat  humor¬ 
ous  ' vcinjf  you-  look  >  at  the  facts.cmbedded  in  thern,  there 
really  very  fundamental  results  in  the  area  of  C3,  It  is  im- 
portant  to  recognize  these  phenomena. when  you  are  doing 
your  C3  work. 

Problems  andiShortfalls 

In  the  final  segment  Of  the  talk,  !  would  liko  to  discuss 
some  problems  and  shorlfafts  as  1  see  them.  1  have  listed 
seven  of  them  in  Figure  50. 


EflflBLEMS.AMO  .StiQRTfAlLS 

«  REUTIONSHJP  WITH  REAL  WORLD 

*  IMPACT  ON  COMMUNITY,  “WHATS  IT  GOOO  FORT* 

*  BETTER  ARTICULATION  Of  ACCOMPUS*BIEHTS 

*  NOT  OVER  ACADEMIC  THRESHOLD 

'  INCORPORATION  OF  HOMAN  ELEMENT  INTO  ANALYSES 
»  INTERACTION  WITH  CLASSIFIED  COMMUNITY 

*  INTERACTION  WITH  BROADER  OPERATIONS  RESEARCH 
COMMUNITY. 

.  Figure  50  • 

First  is  the  relationship  with  the  teal  world.  We,  as  a  coming 
nily,  have  not  done  an  adequate  job  of  relating  the  research 
that  ive  ore  working  on  to  the  actual  C3  operational  prob¬ 
lems  that  are  encountered  in  practice.  It  goes  back  to  the 
diagram  in  Figure  0.  There  is  a  large  real  world  of  decision 
makers  and  commanders  who  are  dealing-with  C3,  there  is 


a  small  research  community  and  there  is  very,  little  overlap. 
The  onus  is  on  the  C3-  research  community  to  create  a  larger 
overlap. 

The  second  problem!  is- really  related  to. the: first  It  is 
important  that  the  research  community %be .able  to  tell  the 
Operational  community, and' the  decision-making' community 
what' the  researches  good  forrito  tell  how  this  research, will 
rhelp  them  understand' C3  and  help  them  solve* their- prob¬ 
lems. 

Third,  if  you  look  back  at  the  comments  from  the  DSB 
Task ‘Force  mT978  and  1987:  they  are.  really  very  similar. 
The  implicit  undertone,  in  the  I9S7' statement  is  that  riot 
really, much  had  been  accomplished  in  a  period  of  10, years. 
An’important  reason  for  this  attitude  is  that  we,  as  a  research 
community, ! have-not  done  agood  job rof  articulating  our. 
accomplishments.'  While  wc  still  have  a  long  way,  to  go, .if  you 
look  at  the  work  that  is  presented  here  and  the  work  that  has 
been  presented  in  some  of  the  earlier  conferences  wc  actually/ 
have  made  a  fair  amount  of  progress  m, understanding  parts 
of  the  C3  problem.  However,  we  haven’t  done  a  good  job  of 
articulating, the  results  and. showmg.what. they;  arc  is  good 
for. . 

The  fourth  point  is  that'  C3  research  as  a  discipline  is 
not-.yct over,  the  academic,  threshold.  Tf-you  look- at  many 
of  the  people  in  the  universities  who  arc  working  in  the  C3 
research  area;  they  were  already  established  in  their  own* 
fields;  such  as  control  theory,  communication  theory,  or  sys¬ 
tems  theory  before  they  became  involved  in  C3  research.  It  is 
vital  that  the  C3  research  field  have  academic  respectability 
it  wc  vvant  to  create  a. body  of  ,  researchers  in -various  uni¬ 
versities,  They  have  to  be  able  to  liavo  the  same  stature 
as  the  other  disciplines.  In  order  to  help  accomplish  this 
credibility,  we  need  journals  where  thsrc  arc  real  peer  re¬ 
views.  Wc  need  some  segment  of  a  professional  society  that 
is  interested,  in  C 3  research,  as  a  major  thrust,  It  is  very 
important  that  we  can.  show  to  young- professors  a  career 
path  that  can  lead  to  tenure  by  becoming  known  as  an  ex¬ 
pert  or  qualified  authority  in  the  C°  field.  This  is  not  uni¬ 
form  situation:  there  aro  several  universities  such  as 
Carnegie  Mellon,  Connecticut,  Naval  Postgraduate  School, 
and  George  Mason  where  it  is  iccogmzcd  as  a  legitimate  and 
intellectually  exciting  discipline.  This  academic  involvement 
is  essential  to  developing  a  C3  theory. 

Thafifth  point  is  that  wo  have  not  >ct  done  an  adequate 
job  of  incorporating  the  human  element  (c.g.,  the  comman¬ 
der,  the  staff  and  the  other  C3  personov.)  into  our  analyses. 
It  is  vital  that  wo  create  adequate  models  or  wc  utilize  lest 
beds  that  give  realistic  interface  with  the  people  involved 
with' the  C3  systems.  Otherwise  vve  arc  not  going  to  have 
valid  results  for  our  system. 

The  sixth  point  is  that  vyc  do  not  have  adequate  interac¬ 
tion  with  the  classified  C3  community,  L would  expect  that 
70  to  80%  of  this  audience  is  Ucaied.  Thcic  is  a  fair  amount 
of  interesting  work  that  goes  on  in  this  community  and  we 


hare.'t^firid^meihaiusra  'to  mow  acress  these  boundaries, 
,  PcihapSjOne  approach  Is  to  have,  a  classified  session  as  part 
■  of  this  conference-  , 

•■  Finaiiy,  I  thinlove  need  to  establish  broader  interaction' 
(With  the  general  Operationsiftejarch  community.  The  Op- 
*  ”»ti0P8  R^eirch  cimmuiiity  has  at  least  a fifty;  vear  history. 

■of.dotng-vwiout  k^dsof  military-modeling  MidianalystB  to 
support  general  militafy.operations.  ’ 

■While  they  hape  not  emphSizid  C2 3,‘they  have  developed 
.ainumber  of  intaesting (techniques, ,  mathcmaticai'-rHodelsi 
and  simuktions  which.we  should,  be  aware  of '.They,  may  be 
readily. adaptable  to  the  problem  of  interest  to' us  - 

Summary 

Figure  51  is  a  brief  summary. 


SUMMARY 


&GNFICAMT  PROGRESS  HAS  BEEN  MADE  SINCE  f  »7t  ; 

•  THE  COMMUNTTY  MUST  DO  BETTER  AT  COMMUNICATING 
ANO  INTERFACING  WTTH  THE  HEAL  WORID^ 

-  C*  SYSTEMS  THEORY  »  BTIU BUTS  EARLY  STAGES 

—  -  Figure  51  _  .. 

I  believe  that  significant  progress  has  been  made  since  1978. 


In  spite  of  the  progress  (which  is  partially  reflected  in  the 
references  l  haw  included),  wc  must  do  a  better  job  in  com¬ 
municating  with  the  real  world.  Finally,  I  think  C3  system's, 
theory,  however  it  is  defined,  is  still  in  its  early  stages, 
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ABSTRACT 

Tbc  subject  reference  model  Jl|  describes  a  framework  for  the 
evolution  of  a  coordinated  and  detailed  definition  of  a  C3 
discipline  addressing  complete  C3  systems.  thrir  rcsocrces  and 
inherent  isaracrions.  It  includes  generic  and  analog  cxrcnsions  to 
the  International  Standards  Organization  (ISO),  Open  System 
Interconnection  (OSI)  Reference  Model  (RM)  12, 3J.  As  such.  it 
requires  reinterpretations  and  generalizations  u  Inch  go  far 
beyond  the  scope  of  the  ISO  OSI  RM.  Any  constraint  or  feature 
which  may  be  present  u-ithin  the  ISO  OSI  RM  should  not  in  any 
way  be  assumed  to  be  automatically;  present,  relevant  and 
applicable  throughout  the  C3RM.  The  C3RM  includes  the  ISO 
OSI  RM  by  adopting  it  for  the  communications  types  of 
interactions.  In  parallel,  layers  of  three  other  complementary 
types  of  interactions  also  provide  services  to  the  application  layer. 
The  C3RM  embraces  2nologoui  architectures  for  all  the  key  types 
of  physical  interactions  and  utilizes  the  application  layer  to 
provide  command  and  control  over  all  types  of  interactions  in  an 
integrated  fashion.  The  goal  of  C3RM  is  also  to  provide  a 
framework  to  guide  the  development  of  a  coherent  set  of 
standards,  specifications  and  implementations  of  interoperability 
and  to  protect  extensive  investments  in  modular  rcuseable 
technologies. 

BACKGROUND 

The  development  of  the  C3RM  has  been  motivated  by  the  fact  tliat 
a  multitude  of  paradigms  for  C3  have  been  and  arc  continuing  to 
be  developed  in  an  ad  hoc  fashion.  Such  a  proliferation  in  the 
long  run  may  have  an  adverse  effect  of  stifling  the  research  and 
development  of  C3  as  a  discipline  by  increasing  the  state  of 
confusion  about  C3  rather  than  enriching  it  as  the  case  might  be 
with  a  variety  of  well  coordinated  complementary  perspectives. 
The  C3  is  often  hidden  in  war  stones,  doctrine  ana  even 
technological  products  which  compete  for  their  opportunity  to  be 
fielded.  In  effect,  however,  C1  may  be  found  individually  m  any 
resource  involved  in  a  conflict  and  collectively  in  all  resources 
teamed  as  a  coherent  fighting  force.  C3  m3y  have  infinitely 
many  dimensions  corresponding  10  infinitely  many  perspectives. 
As  a_  result,  C3  research  and  development  efforts  need  to  be 
multidisciplinary  and  require  a  significantly  high  level  of 
collaboration  to  reach  a  common  understanding.  Facing  thi\ 
challenge,  members  of  the  Joint  Directors  of  Laboratories  (JDL  i 
Technical  Panel  for  C3  (TPC3  )  through  the  C3  Research  amt 
Technology  (C3R&T)  Program  [41  are  chartered  to  sponsor  the 
development  of  the  C3RM  As  a  result  of  deliberations  by  the 
Basic  Research  Group(BRC)  of  JDL  TPC1  C1  Research  and 
Technology  Program,  the  C3RM  Subgroup  was  formed  to 
further  develop  and  provide  a  focal  point  for  the  C'RM  as 
proposed  in  reference  [5].  The  progress  made  to  date  is  ihe  rc'nli 


of  coordination  with  and  feedback  from  many  individuals,  most 
of  whom  are  identified  in  the  acknowledgement  section  of  this 

paper.  It  W3S  coincidental  and  perhaps  an  indication  that  the  time 

was  right  for  the  emergence  of  the  C3RM,  that  a  similar  structural 
frameworje  war  proposed  at  the  same  time,  at’ the  same 
conference  but  in  a  different  working  group  session  [6J.  It  is  the 
diversity  of- perspectives  on  C3  which  beckons  a  common 
-  reference  model  and  associated  terminology  to  facilitate  the 
evolution  toward  a  consolidated  framework  for  understanding 
C3.  The  primitive  notions,  definitions  and  the  entire  structure  or 
the  C3RM  adopted  to  date  are  subject  to  change,  pending  future 
developments  as  required  to  achieve  a  greater  common 
understanding,  to  be  coordinated  by  the  BRG  C3RM  Subgroup 
with  the  suppon  of  the  C3  community  at-large. 

APPROACH 

Regardless  of  the  stage  of  technological  development,  systems 
comprising  of  interacting  personnel  and  materiel  utilize 
fundamental  building  blocks.  These  blocks  may  be  subjects  or 
objects  which  also  may  be  comprised  of  interacting  materiel  and 
personnel.  They  may  be  functional  or  physical.  Functional 
descriptions  may  be  incorporated  into  physical  realizations  and 
conversely,  physical  descripions  may  be  reducible  to  functional 
modules.  The  characteristic  of  the  blocks,  the  possible  local  and 
global  associations  within  and  among  the  blocks  and  their  means 
of  interactions  constitute  the  C3  architecture  and  imply  the 
potentials  of  all  derivative  systems.  The  initial  stage  of 
developing  the  C3RM  is  directed  towards  conceptual  explications 
and  elucidation  of  generic  and  technology  independent  principles. 
Conceptual  developments  will  be  aided  by  and  stimulate  the 
further  development  of  common  formal  descriptive  techniques. 
The  approach  is  comprehensive  in  the  sense  that  it  allows  for 
exploiting  a  wide  spectrum  of  theories  which  may  be  based  upon 
the  phenomcnolgy  of  macroscopic  behavior  as  well  as  basic 
principles  of  meta-,  meso-  and  microscopic  nature.  The  scope  of 
the  general  architectural  principles  required  for  layering  and 
sublaycring  the  blocks  is  very  broad  and  should  lead  lo  a 
universal  framework  for  the  stepwise  unfolding  and  progressive 
adaptation  and  integration  of  capabilities.  It  is  left  up  to  each  C1 
organization  to  study  the  C'RM,  extend  it,  if  needed,  and  apply  it 
to  itself,  us  subordinates,  us  superiors  and  other  C3 
organizations  of  importance  to  motivate  and  obtain  greater  insight 
v*  here  needed. 

SCOPE 

The  C3RM  describes  a  framework  for  modularizing 
interoperability  among  resources  which  must  be  networked  to 
comprise  C1  systems.  As  such,  it  establishes  a  framework  for 
voordinuung  the  development  of  existing  and  luture  standards  as 
well  as  specifications  for  the  jmcropuabiity  of  resources  and  is 
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provided  for  reference  by  those  standards  and  specifications. 
The  C3RM  doer  riot  specifyaciual  services  and  protocols  for 
I  interoperability.  - It  is  neither  an  implementation  specification  for 

*  C3  systems,  nor  the  basis'for  appraising  the  conformance  of 
implementations. .  Iris  intended  only  to  provide  uniformity  of 
guidance^ with  respect  to  the  need*  of  a  coherent  set  of 
complementary'  standards  for  C3  systems.  The  scope  of  the 
architect  ml  principles  required  for  nxxiularizing  interoperability, 
is  applied  in  the  broadest  sense  possible  to  embrace  all  key 
physical  and  logical  interactions  required  for  resources  of  C3 
systems..  It  is  concerned  with  physical  interactions  involving  not 
only  communications,  but  transportation's,-  identifications,  and 
inflictions,  as  defined  herein. which  may  take  place  between 
resources  of  the  same,  friendly,  adversarial  or  neutral  C3 
systems.  It  is  equally  concerned  with  the  logical  interactions 
which  result  in  and  from  the  physical  interactions.  The  reference 
to  the  ISO  OS!  RM  for  communications  docs  not  by.  itself 
constitute  an  endorsement  of  the  ISO  OSI  standards  for  any"C3' 
system. 

INTRODUCTION 

Command  is  typically  associated  with  exercising  "authority" 
where  as  control  is  associated  with  exercising, "direction"  over 
assigned  forces  in- the  accomplishment  of  missions.  The 
definitions  for  "Command  and  Conirol  (C2  )"' usually  imply  the 
combination  of  command  and  control  in  an  additive  fashion. 
Definitions  of  "Command  and  Control  System",  however, 
typically  include  the  facilities,' equipment,  communications, 
procedures  and  personnel  essential  to  the  commander  for 
planning,  and  controlling  operations  of  assigned  forces  pursuant 
lo  the  missions  assigned.  Note  that  the  force  and  the  commander 
are  generally  excluded  from  being  a  part  of  the  "C2  system",  yet 
both  the  commander  and  the  C2  system  arc  included  in  the  Table 
of  Organization  and  Equipments  (TO&E)  of  force  units.  The 
above  definitions  are  insufficient  to  resolve  among  others  the 
following  key  potential  ambiguities: '  Is  the  commander  a  part  of 
the  "C2  System*?.  If  not.  what  is  the  name  of  the  system  that 
includes  the  comntandcr?  What  is  the  name  of  the  system  that  in 
an  integrated  fashion  includes  not  only.thc  commander  but  his 
forces  as  well?  What  is  the  difference  between  "C2"  and  "C3" 
and  between  "C2  System"  and  "C3  System"?1^  overcome  this 
problem  of  divergent  interpretations,  organizations  charged  with 
the  mission  to  advance  the  state-of-the-art  in  different  areas 
related  to  ,C3  must  collaborate  to 'establish  and  support  the 
evolution  of  a  common  framework  for  the  C2  discipline,  via  a  C3 
reference  model  The  C3RM  incorporates  certain  primitive 
notions  and  definitions  .as  a  basis  for  its  description  of  C3 
architectures  The  notions  defined  are  established  as  part  of  the 
C2RM  and  technically  should  not  be  confused  with  the  notions 
conveyed  by  the  same  ftords  which,  may  be  found  in  other 
documents  of  other  disciplines  or  as  a  pan  of  lay  language, 

V'TCe  generalized  canonical  dimensions  of  C1  archiurctures  form 
'>'■  basis  for  constuctmg  C3  systems  as  represented  by  il.e 
.1  ious  C1  paradigms  These  thrce^dimcnsions  involve  a)  ihc 
Resources  Xj .  b)  the  interactions  Sfj ,  and  c)  the  conflicts  Zj . 
No  description  of  CJ  is  complete  without  interrelating  elements 
from  the  aforementioned  canonical  dimensions.  The  physical 
dimensions  of  space  and  time  arc  implicit  within  each  of  the 
generalized  dimensions.  The  resources  X^rc  layered  to  provide 
services  The  interactions  Y,are  layered  in  a  corresponding 
fashion  to  enable  interrelated  identifications,  communications, 
w asportations,  and  inflictions.  Finally,  the  conflicts  Cj  are  also 
layered  to  allow  the  transition  from  global  .warfare  to  individual 
use  of  armaments.  The  hierarchical  and  layered  nature  of  C3 


suggests  a  similar  structure  for  describing  C3  countermeasures 
and  C3  counter  countermeasures. 

Note  that;  the  environment  is- responsible 'for  triggering 
observations.  A  subsequent 'action  may  then  impact  the 
environment.  Define  a  system  F  as  a  collection  of  resources 
X*\. interactions  YF4  and  their  underlying  dynamics  driven  by  as 
well  as  generating  new  conflicts  CF, .  A  primitive  resource  is  a 
collection  of  iMct-tchicdingrcdient  items  which/frriw  i physical 
subject  able  to  perform  a  useful  set  of  processes,  Wj  (  XF ). 
Physical  and  logical  processes  gqicrate  2nd  receive  physical  and 
logical  objects  in  the  course  of  interaction  with  other  resources. 

A  logical  object  is  a  block  of  data,  providing  information  or 
knowledge  about  physical  objects.  The  key  ingredient  items  are 
the  physical  as  well  as  the  logical  assets  -  which  are  crucial  in 
characterizing  the  performance  of  the  resource.  The  physical 
assets  axe  capable  of  expending  the  potential  energy  available  to  a 
process  when  instructed  to  generate  the  kind  of  results  desired 
by.  the  resource.  Such  results,  as  a  minimum,  express  any 
redistribution  of  physical  assets  as  well  as  any  other  pertinent 
state  variable  as  a  function  of  time;  In  particular,' the  state  of 
preparedness  and  readiness  of  the  distributed  assets  is'of  crucial 
importance.  Note  that,  ultimately,  all  processes  arc  embodied  by 
the  physical  assets'.  * 

Individual  resources  may  be  linked  and  networked  to  create 
large-scale,  compound,  collective,’ aggregated  or  functional 
processes  spanning  many  resources.  Inversely,  processes  from 
different  resources  may  be  linked  and  networked  to  create 
large-scale,  compound,  collective,  aggregated  or  functional 
resources!  This  reality  dictates  a  combined  layered  resource/  C3 
process  architecture  which  should  prove' useful  in  development  as 
well  as  in  research.  The  process  aspects  of  the  model  allow  for 
conceptual  visualization  whereas  the  resource  aspects  of  the 
model  allow  for  design  and  implementation  of  ihc  C3  system. 

The  C3  process  aspects  of  the  C*RM  have  been  expanded  a 
shown  in  Figure  1.  Each  C3  system  must  continuously  go 
through  the  main  cycle  as  shown  It  is  a  multi-sided  paradigm. 
In  Figure  I,  however,  only  one  side  is  shown  to  interact  through 
the  environment  In  general,  as  shown  in  Figure  la,  resources 
are  involved  iri  performing  three  types  of fundamental  processes 
observation,  decision  and  action,  A  subsystems  a  subset  of 
system  resources  including- their  imbedded  dynamics  The 
observation  subsystem  is  the  collccpon  of  all  resources  which  are 
involved  in  making  observations  with  regard  to  other  resources 
and  the  environment.  The  action  subsystem  is  the  collection  of 
all  resources  which  arc  involved  in  executing  actions  which  may 
impact  other  resources  and  the  environment.  The  decision 
subsystem  is  the  collection  of  all  resources  involved  in  making 
decisions,  i.  c.  /those  resources  responsible  for  deciding  about 
conflicts  with  other  resources  and  how  to  best  utilize  the 
observation  and  action  subsystems  to  accomplish  the  missions 
evolving  from  the  conflict.  These  subsystems  may  then  be 
decomposed  into  specialized  subsystems  for  different  phases  ol 
observation,  decision  and  action  which  may  occur  sequentially  oi 
in  parallel  as  shown  in  Figures  lb  and  lc.  The  complete 
paradigm  may  be  imbedded,  nested  and/or  layered  to  convey 
multiple  levels  of  analogous  processes  as  shown  m  Figure  Id 
Note.that  in  nested  architectures,  lower  level  resources  become 
assets  of  higher  level  resources  As  shown  in  Figurelb  it  is 
possible  to  add  feed-forward  connections  which  use  the  latest 
observations  for  adjustment  of  decisions  to  provide  a  prion 
predictive  actions  and  thereby  speed  up  the  mam  C3  cycles  As 
shown  m  Tigure  lc,  a  is  also  possible  and  often  desued  ui 
required  to  incorporate  feed  backward  connections  for  fast 
corrective  actions  which  use  previous  decisions  as  desired  states 
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Environment 


Figure  K  TI:e  General  Structure  of  C*  Paradigms* 
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to  react  a  posteriori  o  unpredictable  changes  in  the  environment . 
and  other  systems. 

The  environment  E  is  depicted  as  a  separate  factor.  Given  the 
universe, as  the  totality  of  all  physical  objects,  potentially 
adverserial  .C3  systems,  F.G.H....  and  the  environment  E  are 
disjoint  sets  of  physical  objects  which  together  form  the  universe. 
Note  that  •  independent  C3  systems  structure  and  dynamics  are 
genencally  identical.  In  addition,  physical  elements  depicting 
land,  air,  sea,  space  and  weather.are  considered  as  pan  of  the 
■environment  'Since  E'alsoincludes  environmental" assets 
(natural  resources)  which  C*  systems  require  for.  habitat  and 
consumption,  a  pnniaty  concern  for  any  C3  system  is  its  ability  to 
survive  and  thrive  in  pcacc’within  E,  Fence- is  the  state  of  a 
spacc’wmc  region  in  E  which  is  void  of  conflicts  between  and 
among  co-existing  C3'  systems.  Competition  for  natural- 
resources;  however,  as  well  as  other  apparently  rational  or 
irrational  C3  system  requirements  may  lead  to  the  development  of 
space-time  regions  of  conflict.  As  shown  in  Figure  2,  each 
space-time  region  of  conflict  must  be  supported  by  a  number  of, 
varied  resources  of  processes  which  depends  upon'the  scale  of 
the  conflict.  The  highest  region  of  conflict  is.  a  space-time 
region  characterized  by  the  state  of  war  nested  in  the  region  of 
peace .  In  addition  to  the  region  of  war ,  the  region, of  conflict 
consists  of  a  set  of  five  other  hierachically.  nested  regions  with 
lay-crcd  relationships.  The  structure  of  the  environment,  E,  and  its 
associated  regions  are  also  formally  defined  as  an  integral  part  of 
the  C3RM.  As  defined  by  the  tfRM.  any  discontent  may  lead  to 
conflicts-  of  concerns,  interests,  influences,  maneuvers, 
interactions  and  the  impact  of  weapons  which  are  nested 
hierarchically  to  characterize  the  space-time-regions  of  war. 
campaign,  battle,  combat,  engagement  and  armament, 
respectively. 


•The  commander  is  responsible  for  every  C3  system  unit  of  action, 
iforce  or  power  used  in  peacpofin  conflict: -Conversely  no  unit 
of  action,  force  or  power  should  act  without  the  authority  of  its 
commander.  The  authority  of  the  commander  maybe  formalized 
biif  must  always  retain  the  flexibility  to  take  initiatives  as  required 
to  meet  unexpected  conflicts,  and  exploit  opportunities  which 
enhance  the  survivability  posture  of-the-C3  system  Thus,  the 
system  which  executes  commands  is  strongly  coupled  to  the 
system  whicfigenerates  commands  and,  as  such,  both  arc  treated 
in  an  integrated  fashion  as  one  C3  system. 

The  mission  of  the  C3  system  is  a  primitive  notion  which, defines 
the  goal,  aim,  objective,  purpose,  intent,  decision  requirement, 
function,  or  desired  state  of  the  C3  system.  The  mission  must  be 
■  derived  from  the  conflict  in  which  the  C3  system  is  invplved  A 
mission  may  be  decomposed  into  a  scries  of  submissions  At  the 
system  level,  the  mission  is  supported  by  layered  services  global 
to  all  resources  arid  associated  process  entities .  which  are  local  to 
each-resource.  The  service  process  entities  in  turn,  may  be 
modulanzcd  and  refined,  stepwise,  in  ri  formally,  descriptive 
manner,  into  a  senes  of  'activities  end  functions  Note  that 
whereas  the  generic  structure, of  C3’ system  ts  common  and 
independent  of  echelon,  the  meaning  of  us  specification  will  vary 
depending  upon’the  C3  system  frame  of  reference. 


As  shown  in  Figure  3;  the  resource  stmeture  of  theC/RM  is  a. 
generic  and  analog  extension  of  the  ISO  OSI RM  development 
{2J.  Such  an  extension,' however,  is  non-trivial  since  it  requires 
significant  reinterpretation' and  generalizations  far  beyond  the 
present  scope  of  the  ISO  OSI  RM.  The  C3RM  includes  the  ISO 
OSI^RM^by.addjriingritfor  thc-communications^types  of* 
Interactions?  *tn  parallels  layers  of  three  other  complementary- 
types  of  interactions,  as  defined  herein;  also  provide  services  to 
the  application  . •layer;  The  C3RM  ;cmbraces-.aho]ogous 
architectures  for  all  the  key” types  of  physical  interactions  and 
utilizes  the  appli<»rioh  layer  to  provide  command  and  control  over¬ 
all  types  of  interactions  -In  ah  JntegratedTasIuon.  The  four- 
fundamental  types’  of  Interactions'  are  identifications, 
communications,  transportations  and  Inflictions. '’Identifications 
js  ah  interaction  which’ directly  results  in  the  recognition. of 
objects  in  the  environment'  Identification  Is  used  to  determine  the 
stages,  phases  rind  targcts.reqmred  for  each  layer.of  conflict. 
Communications  is  an  interaction  which  directly  results  in  an 
exchange  of  infotmation/  Communication  is  used  to  command, 
control  arid  coordinate  between  and  among  .the  resources, 
Transportations  is  an  interaction  which' directly, results  in  the 
motion  of  objects.  Transportation  is  used 'to  carry,  supply, 
strengthen,  equip  and/or  load  the  resources  with  the  necessary 
personnel  and  materiel.  Finally,  inflictions  is  an  interaction 
which  directly  results  in  the  destruction,  damage,  degradation  or 
disruption  of  objects. Tnflictiori'is  used  to  destroy,  damage,, 
degrade,  disrupt  the  capabilities  of  the  targets  involved  in  the 
conflict.  Each  resource  involved  in  a  conflict,  as  a  minimum, 
must  be  capable  of  communications.  The  capability  for  any  one 
of  more  of  the  remaing  types  ofjmeractiensdcpends'onthe 
Specialty  of  the  reSource.-  For  example,  weapon  resourccslriust 
be  capable  of  infliction,  sensor  resources  must' be. capable  of 
identification  and  logistic  resources  must  be  capable  of 
transportation.  The  autonomous  resource  depicted  in  Figure  3 
includes  the  physical  assets  to  Interact  with  other  resources  using 
interactions  of  all  four  fundamental  types  in  an  integrated  manner. 
Note  that  the  different,  fundamental  types  of  interactions  arc 
depicted  by  the  differently  textured  thick  lines  connecting  the 
resource  with  the  environment. 
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Much  like  the  ISO.OSfRM  SccuHty  Architecture  pj,  security 
’  considerations  must  be  also  applied  at  every  (sublayer  of  every 
resource  and  for  every  type  of  interaction  -  Ideally,  any  breach  of  - 
security  at  a  particular  (sublayer  of  a  resource  should  be  isolated 
by  the  (N-l)(sub)!ayer  and/or,  the  (N+IX$ub)layer  and  prevented ' 
from  further  propagation.  Otherwise,  the"  (N)(sub)layer  of  the 
other  resources  must  be  able  to  isolate  the  defectivcresource  to 
-  prevent  it  from  contributing  to  any  further  potential  compromise. 
Consider  the  C?  system.  Every  process  arid  every  resource  is 
important.  Informatiori:  between  and' among  processes  ' is 
continually- being  exchanged  explicitly  or  implicitly/  Thus, 
communications  in 'general  is  critical  in  coupling  between  and 
among  .processes  which  are' cither  collocated  or  distributed, 
within. a  given; 'resource,  or  across  a  number  of  resources/  In 
addition,  processes -may  be  coupled  strongly  or -weakly, 
depending  upon  the  need  for,  physical  separation  between  the 
resources  and  the  potential  interactions  involved.  The  processes 
in  any,  given  resource! are* organized  in  a  layered  tree  graph 
fashion '  to  perform  the  global  services  required  of  each  global 
(sublayer.  An  (N)process  is  associated  with  an  (N)cntity  which 
performs 'an-  (N)furiction  to  support  a  part. of  the.  global  (N) 
service  called  (N)facility.  A  pan  of, the  activity  of  an  (N)chtity 
may.  he  directly  -  governed’  by-’a  set  of  global  rides  called 

Srotocols.  These  rules,  depending  upon  the -level  of 
ementation  may  also  be  known  as-  logic,  laws,  policy, 
tactics,  strategy  or  doctrine.  As  the  system  is  stimulated  by  a  set 
of  external  events ,  the  rules  available  within  cach  resource  are 
applied  in  succession  and/or  in  parallel  to  make  an  "optimum" 
decision  which,  in  turn,  initiates  a  set  of  desired  actions.  Due  to 
uncertainty'  in.  system  reliability  .and  differences  between 
observations  and  reality,  any  oneriction  may  result  in  a  variety  of 
outcomes  v 

THE  C2  APPLICATION  LAYERS 

At  the  highest  level  of  abstraction,  the  application  layer  of  the 
ISO  OSI  RM  is  called  thecC2  Application  Layer  of  the  C3 
$>stcm.  It, consists  of  seven  sublayers,  as  shown  in  Figure  4. 
such  that  each  sublayer  provides  services  to  the  sublayer  directly 
■above.  Conversely,  the  services  defined  at  each  sublayer  rely 
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uporuhe  services  provided  by  the  sublayer  directly, underneath 
/The  third  ;"C  'in^  C^"c standsr  for^cpmmunicatibrfs.  o^  all 

-  comextually/mw^  -necessary  ‘  to 

•accomplish'  the  mission  of  theC3  System.  /The  media  is  typically 
electronic,  photonic  or  audio.  Since  ^leadership  i$‘a  quality  of 
motivation  which’  may.  be  conveyed  only  through 
communications;  it  2$  imbedded  in  the  C3RM  arid  the  meaning  of 
communications  is  thereby  broadened  beyond  the  mere  technical 
aspects  of  transmitting  and, receiving  bits" of  infomiation  as' 
layered  for  the  communications  port.  (ISO,  OSI  RM  Layers  1-6) 
The  communications  aspects  relevant  to  C3  reside  in  the  C2 
Application  Layer  and  entail  logical  communications' with  respect  - 
,  to  and  via  all'possible  means  of  interactions  heeded  to  be  ready 

-  for  or  to  resolve  "a  given  conflict.  Topologically,'  transportations, 
identifications  and  inflictions  interactions  between  and  among 
nodes  in  a  network  have  isomorphic  properies  to  communications 
networks.  It  should  therefore  be  possible  to  defineTayered' 
structures  analogous  to  the  physical  and  logical  communications 
interactions  as'dcscribed  by  the  ISO  OSIRM.  Thus,  the  C? 
At  ^'cations  Layer  includes  application  services  involving  the 
individual  interactions  and  the  interrelationships  of  all  four  of  the 
aforementioned  types  of  interactions.  For  easc'of  reference,  the 
sublayers  of  the  C2  Applications  Layer  are  called  the  layers  of 
C2  and  the  sublayers  of  the  highest  C2  layer  are  called  the 
layers  of  C2>conflict.  Horizontal  communications r (peer 
level)  betsveen  and  among  (sublayers  at  the  same  level  represent 
the  interoperability  .of  C3  system  resources.  Vertical 
communications  represent  intra-operability  of  C3  system 
processes  within  resources.  Common  services  required  by  each 
of  the  layers  of  C2  for  database, 'display,  arid  communications 
capability -relevant  to  the  data  objects  associated  with,  each 
sublayer  arc  provided  for,  by  the  C2  Asset  Layer, 7.1.  Note  that 
the  general  sublayer  structure  depicted  in  Figure  4  is  embedded 
explicitly  m  the  general  layered  structure  of  the  resources  shown 
m  Figure  3.  The  following  sections  present  an  up  to  date  detailed 
description  of  the. functions  and  services  performed  by  .each 
layer. 


Thc  C2  Conflict  Layer  7.7 

Conflict^  application  services  provide  for,  the  management, 
supervision,  arid ‘execution  of,  missions.  They  are  primarily 
concerned  .with  the  overall  conflict  facing. the  C3  system, 
generating,  updating  and  monitoring  the  mission  to  ensure  that  its 
accomplishment  will  end  the  conflict  as  constrained  arid  bounded 
by- the  commander,  -They*  ensure  that  a)  the  mission,  is 
communicated  arid  understood  by  all  resources  of  the  systerri  to 
the  maximum  extent  possible,  b)  the  appropriate  resources  can  be  • 
dedicated,  activated  or  in  reserve  and  are  adequately  supplied  and 
equipped  to  cany  out  the  mission  related  interactions  and  c)  the 
plans  developed  by  the  presentation  layer  cover  all  aspects  of  the 
mission  in  an  integrated  fashion.  The  mission  includes  the  full 
definition  of  success,  failure  arid  stalemate.  The  services  provide 
for  the  general  allocation  of  functions  and  resources  to  perform 
the  functions'as'.wcll  as  for  the  demonstration  of  leadership  and 
dedication  of  the  resources  to  the” system  The  mam  products  of' 
this  layer  are'  mission  -  data  objects.  * 

Sublayer  Structure  of  C2  Conflict  Layer 

,The  conceptual  layering  of  adversarial  relationships  is  shown  in 
Figure  5.’  C3  systems  must  to  operational  in  peace  and  ready  for 
war.  -  War  characterizes  a  space-time  region  of  conflict  which  is 
layered  hierarchically  and  nested  to' serve  the  general  mission  of 
peace.  Any  space-time  regiorrioT peace  which' is  threated 
becomes  a  region  of  concern  subject  to  war.  Threats  may  be 
realized  by  the' prospects  of  takeover,  destruction,  disruption, 
damage  and  degradation  of  living  conditions  resulting  from  the 
imposition  of  .general 'Constraints  u  po  n.  the  f  freedom  and 
survivability,  of  the  C3  system  Front  the  perspective  of  the 
C3RM  C2  Conflict  Layer,  war  is  undertaken  to  achieve  or  regain 
peace  in  a  limited  or  broadened  environ  mem.  The  mission  must 
also  describe  any  lower  layer  of  conflict  in  which  the  C3  system 
is  to  be  involved  Ultimately,  the  importance  of  accomplishing 
the  mission  may  be  motivated  as  necessary  to  bring  peace,  for 


Resource  A  Rcsou  rcc  B 


CO-EXKTAWB 

_  1 

MUTUAt.TRtJ.ST 

ITACIi 

CONCERNS 

- j - 

_ 

ACCESSABlt.tTY 

WAR 

CAMPAIGN 

_ ’ _ 

INTERESTS 

MOTOKlAHIMOf 

CAMPAIGN 

BATTUE 

JNH 1IFNCB 

- i - 

BATTLE 

TRANS  PORTABILITY 

COMBAT 

_ 

• 

maneuver 

MOBILITY 

ENGAGEMENT 

INTI  RACTtONS 

engagement 

l.lilUAIJi  V 

ARMAMENT 

IMPACT 

DAMAGE 

LNVIRONMLNT/1N71 RACTION  MEDIA 


Figure  5.  Sublayer  Interactions  of  the  C3RMC2  Conflict 
Layer. 


'  the  short-term  ahd/or  the  long-term.  Each  C3  system  must  define 
its  own  peace  and  "relat^  conflicts  in. which' it  may.  become 
involved.  Once  a  conflictis  identified' it  may  be  resolved  or 
dissolved  at  any  layer,. Resources  may,be  positioned  in',  various 
.  states  of  readiness  (Corresponding  to'each* layer  of  conflict.-  The 
reaction  of ■  friendly/  neutral  and  adversarial' C3/systems  will ' 
•depend  to  a  large  extent  on  observing  and  analyzing  the  state  of 
readiness  at  each'la'yer  of  conflict:  ’ Thusia  resource  may, be 
war-ready  but  not  campaign-ready.  Another  resourcc.may.  be 
combat-ready  but  not  engagement-ready/ The  ability jo'diffuse  or 
eliminate  a  conflict  at  any  layer  above  the  armament  layer  is  called' 
dctcrencc.  .If  a  resource  is  said  to  be  readyrat  a  lower  layer  of 
conflict,  it  js  automatically  ready. at  any  of  the  higher  layers.  In 
’  the  general  case,  all  layers  of  conflict  are  needed  to  characterize  a 
conflict.  A  conflict  cannot  be  characterized  withoutpeace.  In 
various  simplifying  cases,  however,  a  higher  layer  of  conflict, 
may  be  degenerate  with  a  lower  layer  of  conflict.The  perception 
of  peace  and  the  threat  of  a  conflict  is” relative  tolheC3  system  F. 
C3  systems  Gand  H  mayhavcdiffcrcnt  perceptions. ;  Regardless 
of  the  relative  perceptions/  the  generic  characterization  of  the 
layer  of  peace  and  supportive  layers  of  conflict  are  common  to  all 
C3  systems. 

Each  layer  of  conflict  may  be  staged  and  phased  in  time.  Staging 
involves  positioning  of  resources  for  optimum  deployment  for 
that  layer  of  conflict.  Phasing  invloves  windows  of  opportunities 
for  optimum  execution  associated  with  that  level  of  conflict. 
Each  conflict  mayalso  be  characterized  by  its  intensity.  The 
intensity  of  the  conflict  is  characterized  by  the  number  of 
resources  which  are  made  ready  for  the  conflict  at  a  given  layer.- 
Resources  may  transitlorifrom  one  layer  of  conflict  into  another 
as  a  result  of  physical  and  associated  logical  interactions.  The 
general  sublayer  structure  depicted  in  Figure  5 1$  embedded  in  the 
general  layered  structure  of  the  resources  shown  in  Figures  4  and 


The  ,C2  Peace  Layer  7.7.7 

The  peace  layer  is  responsible  for  maintaining  the  null-state  of 
conflict  characterizing  a  space-time  region  of  content  and  void  of 
conflicts.  It  is  responsible’ for  the  missions  of  identifying 
potential  conflicts,  resolving  them  without  a  conflict  and  as  a  last 
resort,  entenng  into  conflict  when  peaceful  means  fail  to  deter 
potential  adversary  resources  from  launching  into  conflict.  C3 
resources  are  said  to  be  in  peace  if  and  only  if  they  co-cxist  with 
mutual  trust  and  support.  -The  products  of  this  layer  are  peace 
mission  data  objects, 

The  C2  War  Layer  7.7.6 

The  war  layer  of. conflict  is  responsible  for  the  missions  of 
protecting  the  concerns  'essential  for, the  friendly  or  own 
resources  to  win  a  peace.  War. type  missions  may  launch  a 
number  of  campaigns  to  be  conducted  in  parallel  or  sequence 
essential  to  achieve  freedom  of  access  to  and  from  the  space-time 
regions  of  concern  Mobilization  and  maintaining  an  adequate 
inventory  of  supply  are  critical -to  the  success  of  a  w3f. 
Campaigns  are  selected  by  analyzing  their  accessibility  from  the 
region  of  concern  to  the  region  of  interest.  The  products  of  this 
layer  are  war  mission  data  objects. 

The  C2  Campaign  Layer  7.7.5 

The  campaign  layer  of  conflict  is  responsible  for  the  missions  of 
securing  interests  toVin  a  W3r  Campaign  type  missions  may 
launch  a  number  of  battles  to  be  conducted  in  parallel  or  m 
sequence  to  enable  to  reach  the  space-time  region  of  interest  to  be 
secured.  Prepositioning  and  sustainment  of  supplies  to  be  made 
available  for  ensuing  and  on*going  battles  arc  critical  to  the 


success  of  a  campaign.  >  Battles  arc  selected  by  analyzing  their 
supportability  in  the  space-time' region  of  influence- from  the 
space-time;  region 'ofj  interest.  The.prdducts  of  this  layer  arc 
campaign  mission,  data  objects. 

.The  C2  Battle  Layer  7.7.4 

The  battle  layer  of  conflict  ^responsible  for  the  missions  of 
achieving  influence  to  win  a  campaign.  -  Battle  type  missionsmay 
launch' a  number  of  combats  to  be  conducted  in  parallel1  or  in 
sequence  ^enable  to  reach  the  spacetime  region  of  influence. 

■  Resupplying  and  reinforcement  of  combat-ready  resources  are 
critical  to  the 'success  of- a  battle.  Combats  are  selected -by 
analyzing  the  transportability  of  combat' resources  from  the 
space*  time  region  of  influence 'to  the  space-time  region  of 
.maneuverability.  The  products  of, this  layer  are  battle  mission 
data  objects.  ‘ 

The  C2.  Com  batLayer.  7.7.3 

The  combat  layer. of  conflict  is  responsible  for  the  missions  of 
maneuvering  to  win  a  battle;  .  Combat  type  missions  may  initiate  a 
number  of  engagements  against  multiple  targets,  conducted  in 
parallel  or  in  sequence  to  enable  the  reaching  of  the  space-time 
region  of  all  four  types  of.  interactions  identified  in  Figure  3; 
Inflictions  include  the  firing  of  explosive  projectiles,  rockets  and 
missiles  and  the  radiation  of  the  electomagnetic  energy. 
Identifications  arc'  derived  from  observations  of  sensors  and 
•  radars.'  Communications  allow  for  the  exchange  of  information 
for  command,  control  rand  coordination.  Transportations 
interactions  consists  of '  supplying  and  replenishing  any 
consumables  or  perishables  that  may  be  needed  by,  the  resources. 
The  mobility  of  engagement-ready  resources  is ‘critical  to  the 
success  of  combat.  Engagements  are  selected  by  analyzing  the 
mobility  of  engagement-capable  resources  from  the  space-time 
region  of  maneuverability  to  the  space-time  region  of  interactions. 
The  products  of  this  layer  are  combat  mission  data  objects. 

The  C2  Engagement  Layer  7.7.2 

The  engagement  layer  of  conflict  is  responsible  for  the  missions 
calling  for  interactions  to  win  a'combat.  Engagement  type 
missions  may  launch  a  number  of  armaments  to  be  delivered  in 
parallel  or  in  sequence  against  individual  pr  aggregated  targets  to 
enable  to  reach  the  space-time  region  of  impact  as  generated  by 
infliction  type  of  interactions.-  A  single  engagement  is  relative  to 
a  single  target.  Engagements  may  be  composed  by-,  the 
superposition  of  fundamental  topologicsTor  direct,  direct 
support,  support  reinforcement,  general  support  engagement 
missions.  Note  that  two  fundamental  interactions  arc  required  to 
characterize  the  simplest  type  of  engagement,  i.  e  direct 
engagement.  The  support  of  direct  engagements  requires 
communications  between  the  friendly  resources  to  command, 
co«*'ol  and  coordinate  the  more  complex  engagements.  The 
implicit  distinction  between  general  support  and  direct  support  is 
borne  out  when  considering  engagements  of- multiple  targets 
simultaneously.  Targets  subject  to  direct  support  engagements 
may  or  may  not  be  subject  to  general  support  engagements 
depending  upon  the  availability  of  general  support  resources 
which  span  a  much  wider  region  of  space  for  engagement.  The 
effective  range  of  the-sensors  and  the  delivery  range  of  the 
armaments'  are  critical  to- the  success  of  an  engagement 
Armaments  are  selected  by  analyzing  the  target  as  a  threat 
potential  and  the  lethality.  of  armament-capable  resources  as 
projected, from  the  space-time  region  ofjmeracno'rin'o  the 
space-time  region  of  impact.  The  products  of  this  layer  are 
engagement  mission  data  objects. 
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The  C2  Armament  tSyer'  7.7.1 

•The  armament  layer  of  conflict  is  responsible  for  the  missions  of 
Jri  fi  ictfn gTpKy Seal and/or '*  logt  caHB  amageV- permanent  or- 
-  temporary,  to,wm'Sri  engagement/  •'Any  ‘'number,6f  armamentS' ' 
may  be-launched  against  a  single" targe^dependihg-upon  its 
survivability.  The  accuracy  of  sighting  and  delivery, as  well  as 
the  lethality ,  of  the*  impact  are- critical  to*  the  success  of 'ah 
armament.  The  destructive -or (disruptive-envelope  of  the 
armament, define  the- space-time; region  of -damage.  The 
space-time  region  of  damage  is  a  subset  of  the  space- time  region  - 
of  impact."  -The  products  of  this  layer  arc  armament  mission :  data 
objects.  *  '  ' 

The  C2  Presentations  Layer  7.6 

Presentation  serviccs( provide  for  the  management,  supervision' 
and  'cxccution  of  plans.  They,- are  primarily,  concerned  with, 
understanding  the  conflict1  and>c6rres'pondihg;mission-w’en 
enough  to  draft,  coordinate  and  finalize  plans  to  support  various 
potential  missions  of  contingent  conflicts. .  Planning  consists  of 
two  phases.  Tlic  first  phase  is  concerned  with  the  adequacy  of 
existing  resources,  assets'and  their  organization.-  At  this  layer, 
services  may  reorganize  subordinate  resources,  their  distribution 
of  assets  and  justify  the  need  for  any  changes  in  the  quantity  and 
quality  thereof.  The  products  from  such  scrvices  arc’ called 
organization  plans.  The  second  phase  is  concerned  with  plans 
for  a  coordinated  sequence  of  operations  with  a  given 
organizational  structure.  Such  plans  are  known  ^'operations 
plans.  Operational  plans  set  schedule  constraints  to  achieve  key 
milestones  toward. accomplishing  a  given  mission.  They,  also 
provide  guidance  fori maneuver  and  thresholds  fori  expenditures 
of  resources  and  their  assets.  The  main  products  of  this  layer  arc 
plan  data  objects- 

-The  C2  Operations  Layer  7.5 

•Operations  services  provide  for  the  management,  supervision  and 
execution  of  staff  functions  concerned  with  generating  clear  and 
concise  orders  to  a  wide  variety  of  subordinate  resources  and 
assets,  Orders  arc  generated  and  updated  to  .select  appropriate 
procedures  and  synchronize  their  execution  sequentially  or  in 
parallel.  Operations  services  are  highly  heuristic  and  typically 
call  for  the  initialization  of  concentration  or  relief  of  effort  by 
available  resources  at  given  times  and  given  places,  They  may 
also  undertake  to  adapt,  modify  and  rehearse  any  existing  set  of 
procedures.  Operational  and  higher  level  services  evolve  direcilv 
as  a  result  of. the  mission  in  a  particular  scenario.  the  mam 
products  of  this  layer  are  task  data  objects. 

The  C2  Procedures  Layer  7.4 

Procedural  services  provide  for  the  management,  supervision  and 
execution  of  well-defined,  pre-established  procedures  selected  to 
implement  orders  denved  by  operational  services.  Procedural 
services  may  be  established  scientifically  through  theoretical 
reasoning  and  experimental  calibrations.  The  same. procedural 
services  may  be  called  upon  to  support  operations  derived  from  a 
wide  range  of  missions,  for  example,  procedures  include  all 
well  defined  tactical  maneuvers,  target  reporting  andiwc3pon 
engagement  selection  disciplines  which  are  incorporated  in 
training  as  part  ot  doctrine.  Any.improvisation  in  procedure 
should  be  well  coordinated  to  ensure  that  potential  conflicts  arc 
avoided  or  minimized  Any  well  rehearsed  operation  may  be 
instituted  at  the  procedure  layer.  Procedure  services  are  generally 
scenario  independent  and  allow  for  the  internetting  of 
complementary  resources  bridging  transportation  networks, 
communication  networks,  logistic  networks,  sensor. networks, 
weapon  networks  and  other  types  of  network  assets. 


Procedural  and  lower  level  services  are  known  and  prepared  well 
before  the, mission  is  generated  for  a  given  scenario.  The  main 
productspf this  layer are/ofr/data objects/ 

Thy  C2  Networks  Layer  7.3 : 

Network  services  provide  for  the  management,  supervision  arid 
execution  of  multilateral,' collective  interaction  of  supplementary 
resources  (with  similar,  assets)  to  create  a  synergistic  effect  when 
compared  with  individual  and  link  level  independent  services. 
Network  services  includc.ariy  network  of  interacting  resources 
such  as  communications  networks,  transportations  networks  for 
logistics  and 'mahueyer,  sensor  networks;  intelligence  networks, 
weapon  networks  arid  navigation  networks;  Network  services 
■cnsure'that  end-to-end. interaction  are  supported  by  resources 
capable.of  indirect  contributions., -The  twain  products  of  this  layer 
ixcassfghment  'data ‘objects; 

The  C2  Links  Layer, 7.2  - 

Link  services. provide  for  the  management,  supervision  and 
execution  of  one-to-one  and  one-to-many  interactions.  Services , 
include  communicationsTinks.. transportation  links,  logistics 
links,- sensors  links,  weapons  links,  sensor- target  detections, 
weapon-target  engagements,  sensor- weapon  coordination  and 
relative  navigation.  Link  interaction' response  >  times, 
throughputs,  failures  and  errors  as' well  as  failures  and  errors 
recovery  arc  of  primary  concerns.  The  main  products  of  this 
layer  are  package  data  objects. 

The  C2  Assets  Layer  7.1  • 

Asset  services  provide  for  the  management,  supervision  and 
execution  of  individual  assets  and  associated  physical  processes 
available  within  caclj  resource.  These  assets  are  more  directly 
involved  with  any  oric  type  of  interaction,  i.e.,  communications, 
transportations,  identifications  and  inflictions.  Assets  include  as 
a  minimum  supplies,  equipments,  and  earners.  Supplies  include 
any  combination  of  ammunition,  fuel,  oils  and  lubricants,  rations 
and  spare  parts.  -Equipments  include  any  combination  ot 
weapons,  sensors,  and,communicanons.  Camcis  include' any 
type  of  personnel,  vehicle,  vessel,  air  or  space  craft.  Asset 
services  must  ensure  that  individual  assets  attain  the  highest 
possible  state  of  preparedness  and  operational  readiness.  In 
addition  to  transaction  database,  display  and  communications 
facilities,  services  at  this  level  are  concerned  with  a;  weight, 
size,  power  and  other  compatibility  requirements  necessaiy  to 
sustain  and  interconnect  the  resources  b)  maneuverability  and 
navigation  necessary  to  respond  to  marching  orders,  and  c) 
assessment  of  physical  destruction,  disruption,  interruption 
and/or  damage  which  may  be  incurred  or  imparted  in  the  course 
of  any  given  interaction.  Note  that  the  actual  pciloimunce  ol 
management,  supervision  and  execution  associated  mote  directly 
■with  each  individual  physical  asset  is  canted  oul  by  layeis  I 
through  6 coiTCsponding  to  each  interaction  as  shown  in  I  iguie 
3.  The  main  products  of  this  layer  are  transaction  data  objects 

THE  ASSET  PORT  LAYERS 

The  framework  for  interactions  of  each  type  is  also  la>ered  it  an 
analogous  fashion  to  the  interactions  of  the  communications  type 
as  desenbed  by  the  ISO  OS1 RM J2J  Thus,  the  layered  atiucture 
of  the  C1  Application  Layer  defines  not  only  the  sublayers  of  the 
application  layer  of  the  ISO  OS1  RM  for  communications  but  die 
extension  of  these  same  sublayers  of  the  application  layei  s  ol  the 
isomorphic  reference  models,  yet  to  be  defined,  loi 
transportations,  identifications  and  inflictions  as  well. 
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/Laye red t Iden t i  fi cations  (1-7.1)  .  ^ 

Signals  retrieved  from  the  env’rbhnicnt  results  in  the  recognitii  n. 
•  of  objects/ in^he-eriVtromnmcht.  '  The  idemificatibri.'port 
interactions  are  subject  to  further  study. '  Physical,'  link,  network, 
transport,  session'and  presentation  characteristics  of  recognizing 
targets^employingj  'algbmhmsi  ranging/from  signal  A  mage 
:pr<xe$singthrough  data  fusion  are  fo,  be  described  in  a  common 
‘  framework :  tofbe-  developed  Ca  rid  ""coord  i  ri  ated  :herein  -or:  by 
^reference./'  "*  '  \  w  ~  . 

‘Layered;  Communications  »(i-7.1)+\ 

'Signals  transmitted  and  received  from  other  resources  allow  for 
'  'the  ^exchange  ofTnforinauVn”throughUhe. environment/.  The 
A  'Communtcation’port  interactions  are. typified  in l  Figure  6  based 
.Upon  the  ISO  OSf  RM  (2;  3).  Physical,  link,  network,  transport, 
session,  and < presentation: characteristics  of' communications 
employing  techniques  ranging  from  modulation  to  database  and 
display  format  and  update  algorithms  are  described  in  a  common 
framework  as  developed  and  coordinated  for  the  ISO  OS  I  RM; 

Layered  Transportations  (1-7,1).. 

Vehicles,  manual  or  motorized,  provide  for. the  translation  and 
rotation  of  physical  objects  as  well  as  the  movement  of  resources 
-  through  the  environment;’ The  transportation  port  interactions  arc 
subject  to  further  study/ Physical^  link,  network,  transport 
-session  (and,  presentation,  characteristics'  of  transportations 
employing  techniques  ranging  from  packaging  of  physical  objects 
to  unpacking  for  expenditure,  consumption,  or  coordinated 
mancuvcr,are  to  be  described  in  a  common  framework  to  be 
developed  and  coordinated  herein  or  by  reference,  " 

Layered Inflictions  (1-7.1) 

Armaments  provide  for  the  destruction,  disruption,  degradation 
or  damage  of  physical  as  well  as  logical  objects  through  direct  or 
indirect  impact  on  target  resources.  The -infliction  port 
interactions  arc  subject  to  further  study.  Physical,  link,  network', 
transport,  session  and  presentation  characteristics  of  inflictions 
employing, techniques  ranging  from  single  shots  of  isolated' 
targets  to  coordinated  engagements  are  to  be  described  in  a 
common  framework  to  be  developed  and  coordinated  herein  or 
by  reference. 
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IGENERIC  EXAMPLE 

Avshown  in  Figure  7,  .individual  resources;  depicted  by Jhe- 
seven-: layers  of  C2,  may-  roam  about  the-’, environment 
independently  carrying  out  autonomous  missions  or  they  may  be 
grouped  to  complement  and  supplement  each  other's  effort  m  an 
aggregated  manner  as  shown  in  Figure  8. 


Figure  7.  Independently  Layered,  Individual  Resources 


Figure  8  Hierarchically  Layered,  Aggregated  and  Distributed 
Resources. 
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>  -I  ’• 

In- Figure  .9,  the -potential  interaction?- among  resources  arc 
explicitly ’distributed,  to  depict  a  more  complex  three  tier.C3 
system  structured  At  the -highest  tier*  ‘denoted  by, a,  one 
command  resource  is  responsible  for  establishing  the  mission, 
generating,  updating  and/or  selecting  plans  and  monitoring  the- 
•resulting  operations  as  generated  by  the  subordinate  resources, 
aa  and  ab.  At  the  middle  tier,  control  resources,  aa  and  ab,  are 
responsible  for  establishing  the  operations,  generating,  updating 
and/or  selecting  procedures  and  monitoring  the  resulting  network 
interactions  us  activated  by  their  respective  line  resources,  aaa 
.and  aba.  Tbe  resources,  aaa  and  aba,  at  the  lowest  tier,  are 
responsible  for  establishing  a  cohcsivc  network  of  multilateral 
interactions  which  "utilize  and  expend,  the  assets  at  their, disposal  . 
m  support  of  the  system  level  mission  as  communicated  through 
channels  from  the  command  resource,  a u  The  C3  system  shown 
in  Figure  9  may  represent  a  wide  range  of  C^pafadignis.  In 
particular,  a>compariSon:  with r  Figure  1 .  may .  bepsed  to  -  map 
several  possibilities,  For  example,  resources  grotipcdaccording- 
to  ((aaa)  (aba^nod (a,  aa,  ab))  pr;((aaa;  aa)  (aba,  ab)  and 
(a))'  may  constitute  the' observation,'  action- and  decision 
subsystems,  rcspectiv  cly.  Following*  the c formal  description 
provided  thus  far  and  as  typified  m  .Figure  9  a  more  specific 
•  example  is  illustrated. 

An; Illustrative  Example 

Consider  the  topological  positioning  Of  resources, and  their 
mutual  physical  interactions'fcr  a  hypothetical  but  illustrative 
example  as  shower  in  Figure.  10a,  Resource  Cis  the  commander 
of  System  F<  ' Resource's  Is  a  sensor  cf  System  F  which’  includes 
its  own  controller.  Resource  W )',  a  weapon  of  System  F  which 
also  includes  its  own  controller  .  Resource  0, belongs  to  system 
G,  'Thus,'  system'?  is  4  simplified  version  of  the  C3  system 
shown  in  Figure  9  whereby  Resource- a  corresponds  to  Resource 
C,  Resource-aa  and  aaa  have  been  integrated  or  aggregated  to 
represent  Resource  S  and  Resource  ab  and  aba  have  been 
integrated  or  aggregated  to  represent  Resource  Systems  F 


a 


and  G  are  involved  m  a-  mutual  conflict.  More  specifically,  the 
conflict' has  deteriorated  down  to  the  level  of  engagement 
■  (Conflict  Layer  7.7.2).'  Note’ that  Resources  C,  S,  and  G  are 
fixed  sites  whereas  Resource  W  is  mobile  as  indicated  by.  the 
textured -arrow  for  transportation  As  shown;  by.  the  other 
textured /arrows;  Resource  S  is  within  identification  range  of 
Resource  G  as  a  potential  target.  Resources  C  and  S,  as  well  as 
Resources  C  arid  W  are  within  communications  range  Finally, 
Resource  W  is  within  range  to  inflict  damage  upon  Resource  G. 
Having  identified  the  types  of- interactions  which  are  key.  to  a 
given  resource  in -a  given  scenario,  each  resource  may  be 
-expanded,  in  terms  of.the- layers  which  correspond -to/ each 
interaction  type  and  the  application  -sublayers  which  couple 
-among' the  interactions  across  resources  In  the  following 
scenario  the  proposed  layers  involved  for  each’  proposed  service 
are  Identified  in  parethesis, 

a)  Topological  Positioning  and  Physical  Interactions 


,  tJS  a 

Comm.  TS,s. 

1 

-  ildent.” 

Comm. .  _  /kt 


b)  A  Single  Thread  Analysis  ol  the  Logical  and  Physical 
Interactions 


Sensor  *  Chvir 

-Resource,  S  Resource.  C 


Weapon 
Resource,  W 
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Consider  a- single’ thread  analysis,  as  shown  in  Figure.  10b;  of 
only  one  .of  an  infinite  number  of,  sequences  of  events,  which 
could  occurfrora  detection  by  Resource  S  to  the  firing  of  a  round 
by  Resource  W  upon  Target  Resource  G.'-Usirig  binoculars  as  its 
physical  asset' for  the  identification-port,  Resourced  detects 
(Identification  Layer  1/S)  an  activity  on  top  of  an  adjacent  hill. 
Resource  S  tracks  (Identification  Layer  2/S)  the  activity  •  for  a 
short  time  period  (Identification  Layer  3/S-5/S)  and  notices  h. 
large-antenna.  Resources  ^performs  additional  correlation 
(Identification  Layers  3/S-6/S)  to  determine  that  Resource^ G  at- 
location-time  (x.y.z.t)  is  an  observation  post.  At  Layer  7.1/S, 
the  target  information  is  stored  and  .displayed  as  a  transaction: 
data  object.  At  Layer  7.2/S,  the  target, information  is  packaged 
to  enable  it  to  be  transferred  immediately  to  the.commandcr, 
Resource  X,  using; its  available  communications-,  port' 
(Communications  Layers  6/S*  I/S)  and/or'for  a  local  assessment* 
of  its  relevancy  with  respect  to  any  one  of  the  several  .  available 
assignments  generate  at  Layer  7.3/S.7  As  an  unexpected  target  - 
of  opportunity,  an  assignment  cannot  be  made  by  Resource  S  and 
Layer  7.4/S  must  decide  if  any  procedures  have  been  authorized 
for  handling  the  target  as  a  pan  of  any  one  of  several  on-going 
jobs.  Assuming, that  tasks  activatcd'at  Layer  7.5/S  did 'not 
anticipate  this  type  of  target  at  the  given  location,  the  plan 
generated  at  Layer  7.6/S  must  be  reviewed  to  see  if  indeed  the 
recognized  target  is  of  interest  to  the  mission  derived  at  Layer 
7.7/S  for  any  resource  of  System  F.  Assuming  that  the  mission 
is  sufficiently  broad,  Resource  S  decides  to  report  on  Target 
Rcsourcc-G  as  a  target  of:  potential  interest  to. Resource  C. 
Resource  S  reinterprets,  revises  or  regenerates  a;plan  (Layer 
7.6/S),  task  (Layer  7,5/S),  job  (Layer  ?.4/S),  assignment  (Layer 
7.3/S!  and  package  (Layer  7.2/S)  in  that  order. to  cnble-a 
communications  transaction  (Layer  7.1/S)  to  be  motivated  and 
formated  down  through  the  communications  port, 
(Communications  Layers  6/S-l/S).  The  resulting  message  is 
transmitted!  through  the  environment  to  Resource  C.  Resource  C 
demodulates  and  decodes  the  message  (Communications  Layers 
1/C-6/C)  for  presentation  to  Layer  7.1/C. 

Stored  and  displayed  by  Layer  7.1/C,  the  transaction  is  made 
available  to  Layer  7.2  /C  for  repackaging.  Repackaging,  even  if 
trivial,  is  essential  for  cross-coupling  transactions  between  any 
two  resources,  At  this  point,  Resource  C  may  ask  for  more 
information.  In  this  example;  however,  time  is  of  the  essence 
and  the  commander  must  decide  immediately  whether  the  target  is 
a  threat  to  his  immediate  mission  or  some  future  mission.  Being 
caught  by  surprise,*  the  transaction  which  is  automatically 
repackaged  for  potential  infliction  is  pre-empted  by  a  review 
process  for  consistency  and  practicality  with  respect  to  currently 
active  assignments  (Layer  7.3/C),  jobs  (Layer  7.4/C),  tasks, 
(Layer  7.5/C),  plans  (Layer ,7,6/C)  and  missions  (Layer  7,7/C) 
as  understood  by  Resource  C,  .Once  consistency  is  established  as 
the  target  is  processed  not  only  with  respect  to  tis  immediate  and 
future  threat  capability  but  also  with  respect  to  the  consequences 
which  contemplated  levels  of  infliction  might  have  on  the  success 
of  resolving  the  current  and  future  conflicts.  Resource  C  decides 
to  select  (Layer  7.7/C)  Resource  W  to  engage  the  target  G.  An 
engagement  mission  is  generated  (Layer  7.7.2/C-7.7.1/C),  a  plan 
is  redrawn  or  revised  (Layer  7,6/C),  a  task  is  re-issued  (Layer 
7,5/Q,  a  job  is  reinitiated  (Layer  7.4/C),  and  an  assignment  is 
remade  (Layer  7.3/C)  to  repackage  (Layer  7.2/C)  the  target 
information  in  a  manner  suitable  for  a  transaction  (Layer  7.1/C) 
to  Resource  AY.  The  repackaged  information  about  Target 
Resource  G  is  processed  by.  Layer  7.1/C  to  create  a 
communications  transaction  .which  follows  the  ISO  OSI  RM 
services  down  through  the  communications  port  of  Resource  C 
(Communications  Layers  6/C*  1/C ),  through  the  environment  and 
up  through  the  communications  port  of  resource  AV 
(Communications  Lajers  IAV-6AV). 


Stored  and  displayed  by;  Layer  7T/W,*  the  transaction  is  made 
available  to  Layer  7.2/W  for  potential  repackaging.  Repackaging 
(Laycr;7.2/W)  alIows  for  cross-coupling  orcommunication; 
■transportation  and  infliction  transactions'.  At  this  point;  Resource 
W  must  decide  (Laycr.7.3AV)whether  it  is  close  enough  to  cause 
the  required  damage  ro’r>  whet hcr  it  should  move  closer  to 
optimize'' its; probability  of  impact:'.  Once  an  assignment  is 
contemplated  for  infliction  (Layer  7.4/W)  it  is  presented  higher- 
up  to  be  scheduled  assart  of  an  on-going  job.  The  candidate  job 
is  then  subject  to  review  for  priority,  consistency,  arid  urgency 
with  respect  to  existing  tasks  (Layer  7.5/W),  plans  (Layer  7.6/W) 
and  missions’ (Layer  7.7/W).'Having  decided  to  respond  with  a 
: hasty, fire  mission  (Layer  7.7/W),an  overall  deployment  plan  is 
made. available  (Layer  7.6/W)  to  check  and  make  sure  that 
Resource' S* is  a  safe  distance  .away  from  possible  fratricide 
(Layer  7.5/W).  *  Haying"  approved  the  job  as  minimum  risk 
(Layer  7.4/W),  the  assicninent  is  approved  for  infliction  (Layer 
7.3/W).  The  target, information  available  from  storage(Layer 
7.1/W)  iS'repackaged'with.suppIemental  timing  constraints 
(Layer  7.2/W).  It  is  then  reprocessed  to  create  an  inflictions 
transaction  (Layer  7.1/W)  which  is  serviced  by.  the  inflictions 
hort,  ranging  from  a  survey  of  the- weapon’s  own  position  to 
loading  the  aimament  arid  pulling  the  trigger  (Inflictions  Layers 
6/W-l/W ).-  The  armament  is  launchedjhrough  the  environment 
and  may  penetrate  up  through  any  port.of  Target  Resource  G 
which  may  become  damaged' in  this  example, Tor  hypothetical 
completeness,  Resource  W  is  able  to  destroy  the  antenna  of 
Target  Resource  G. 

-This  example  may  be  easily  modified  and  expanded  to  illustrate 
many  other  exar  '  *s  of  interest  to  specific  R&D,  operations  and  • 
tests,  cducaiio..  arid  training  organizations.  The  reader  is 
challenged  to  come  up  with  his  own  example  to  be  considered  for 
future  reference  arid  as  a  test  for  both  understanding  command 
and  control  arid  this  C3RM. 


The  C^RM  continues  to  be  a  viable  framework"  for  combined 
research  and  development  of  C3  systems.  It  provides  a  flexible 
structure  to  be  able  to  definc,  describe  and  evaluate  organizations 
of  C3  systems  at  any  echelon,  their  measures  of  performance  and 
measures  of  effectiveness  and  potential  improvements  upon  their 
design  in  a  highly  interoperable  yet  modular  fashion.  By 
following  in  the  footsteps  of  ISO,  it  is  recommended  to  be  used 
as  a  common  framework  for  the  development  of  interoperability 
standards.  It  is  particulary  suited  to  describe  military  systems 
which  are  layered  hierarchically,  their  mission-onented  resource 
allocation  structures,  their  interfaces,  interactions  and  integrated 
operations.  Its  adoption  as  a  model  of  choice  should  prove 
useful  in  practical,  large-scale,  distributed X1  simulations, 
developments  and  operations. 


Based  upon  previous  disseminations  to  many  potential 
contributors,  written  contributions,  endorsements,  concerns  and 
constructive  comments  were  incorporated  from  many  individuals. 
It  is  hoped  that  this  list  will  grow  as  this  model  is  proliferated  and 
the  opportunity, to  use  it  avails  itself  The  authors  wish  to 
acknowledge  their  interactions  with  the  following  individuals.  Eh 
Beane,  COL  Gary  Q  Coe,  Herbert  Cohen,  Frank  Effenberger, 
Dr.  Robert  J.  Fallon,  MAJ  Patrick  L,  Gandce.  Richard 
■  Goodbody,  Dr.  Irwin  Goodman,  COL  Dickey  Hitchcock,  Dr 
Lester  Ingber,  Dr  Carl  Jones,  NPS,  Dr.  Theodore  Klein,  Dr 
Dirk  R'Klose,  Clark  MoUenhauer,  Mike  Mudunan,  Jack  Plant, 
David  Seltzer,  Dr  Mike  Sovereign,  Chadwick  H  Dennis,  Dr 
Earl  Craighill,  Philip  Feld,  Dr.  Michael  S  Frankel,  Jerry  Hines, 
Dr.  Mdt,Lavin,  M.  J,  Lockwood,  Larry-Low,  Dr.  Donald  S. 


Marshal!,- br£ Frances iNicdcnfuIer, ; Dr,  (^rbI:Niznik, <B rian t. 
•OTeary,  /Dbcodorc^ Pfeiffer, <Lou  sSchreier; '  Dr;  >Nachum 
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ABSTRACT 

Array  corps  c  maneuver,  planning  a  is  the.  problem -of 
-constructing  a  battle  plan  that  accomplishes  a  specified  mission, 
given  commander's  guidance,-  descriptions  of  the' battlefield' 
environment-  (terrain5 and  weather),  -friendly  andteriemy 
situations.  This  paper  discusses  the  Maneuver  Planning  Expert 
Systepi  (MOVES),  which  is  a  component  of  the  DARPA/ARMY- 
AirLand  Battle  Management '(ALBM)  program'  that  is  being, 
developed  to  assist  corps  and  division  staffs  to  reduce  the  length 
of  the  planning  cycle,  thus  enhancing  the  capability  for  a  corps 
to  act  faster  than  , the  enemy. s  In  addition,  ,■ we  endeavor  to 
generate  high- quality, plans  for  execution.. In  particular, ; we 
describe  the  manual  plartning  process^cbmpare  that  to  the. 
system’s  planning  process  "model,  discuss  the;Procedura! 
Reasoning  System  (PRS)  that  is  used  to  represent  and  execute 
the  plan n ing ;proces$r and’dcscribcM ho w' the - resulting  plan  is 
represented. 


INTRODUCTION 

'»  *  •  t 

Sun  Tzu  observed  that  "a  victorious  army  wins  its  Victories 
before  seeking ,  battle.”  A  goal  of  the  AirLand  Battle 
Management  (ALBM)  program  is  to  assist  the  U.S.  Army  in  its 
victories  by  providing  a  collection  of  cooperating  expert  systems 
to  support  maneuver  and  fire  support  planning  at  both  corps  and 
division  level.  The  focus  of  this  paper  is  one  of  , the  ALBM 
expert  systems  -  the  corps  level  version  of  the”  Maneuver 
Planning  Expert  System  (MOVES). 

MOVES  is  an  interactive,  knowledge-based,  expert  system 
that  generates  and.cvaluatcs  courses  of  action  (COAs)  for  an 
army  corps.  The  inputs  to  the  system  are  a  mission  from  echelon 
above  corps,  guidance  from  the  corps  commander,  and  data 
objects  containing  descriptions  of  the  terrain  and  weather  in  the 
area  of  operations,”  the- projected  enemy, situation,  and  the 
projected  friendly  situation;  the  output  is  the  maneuver  portion  of 
an  operation  order  and  the  COA  sketch.  The  problem,  then,  is 
to  gcncrate  and  evaluate  multiple  COAs  that  each  accomplish  the 
given  mission  and  conform  to  the  commander's  guidance  for  the 
situation  at  hand,  eventually  selecting  a  single  COA  from  which 
ah  operation  order  is'  produced.  One  additional  requirement  on 
the  system  is  that  it  be  capable  of  supporting  mixed  initiative, 

i.c.,  the  user  controls  the  degree  of  autonomy  given  to  the 
system  by  inputting  in  advance  as  much  or  as  little  of  a  COA  as 
he  desires,  by  modifying  decisions  made, by  the  system,  and  by 
exercising  some  control  over  theorderm  which  reasoning 
processes  are  performed. 


*  This  kttttrch  w*s  supported  by  ihc  Defense  Advsneed  Research  propels 
A$«Ky  (DARPA)  »»J  ihe  U.S.  Army  BsllisUe  Rcretrch  Lsboxswry  (BRL) 
wvier  subconusct  7A4QB0820M  from  UcUieed  Miisiks  &  Sp*e* 
Compsoy,  Inc.  Austin  Division. 


To  design  arid  build  a  system  that  can  solve  the  problem 
described  above,  it' was  necessary,  to  study  and  answer  the 
'following  fundamental  questions: 

L  ‘-How  does  the  U.S.  Army  plan  today? 

2.  How  does  one  engineer  software  to  perform  maneuver 
planning? 

3.  What  software  technology  should  be  used  to  capture  the 
.  maneuver  planning  process? 

4.  -How  does  one  represent  a  maneuver  plan  in  machine 
understandablc/orm? 

These  four,  questions  are  answered  ,  in  the  remainder  of  this 
paper. 


THE  MANUAL  MANEUVER  PLANNING 
PROCESS 

MOVES  is  an  expert  system,  and  as  such,  its  reasoning 
processes  arc  modeled  after  those  used  by- human  maneuver 
•planning  experts.  Asa  starting  point,  MOVES  is  modeled  after 
the  doctrinal  planning  process  that  is  described  m  various  Army 
field  manuals  {1,2]  and  taught  at  thc’Command  and  General 
Staff  College  (CGSC)at  Ft.  Leavenworth,.  Kansas.  This 
process,  called  the  co?nmand  estimate,  is  depicted  in  Figure  1. 


Figure  l  i  The  Manual  Maneuver  Planning  Process 
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Tbe  process  5  rnaxj  ^  ga  ctf  i  gsaae.  The. 
nusssoa  b  analyzed  so  geseext  a  £«  of  asks  it  ht  pgfanxi 
asJ  a  nasjsoa  szz&xzl  The  atrsaig  ao  iha  p»3i  the 
staff  with  guidance  in  ares  such  as  courses  of  aerica  (CO As) 
that  shocld  or  shook!  rax  be  considered.  the  crrrSrr  of  COAs 
that  should  be  geseered,  where  risk  cay  be  acecpcsb5e.  aad 
command  aad  coetrol  arraegemrms.  The  soff  then  pshers 
together  rise  dra  ihat  w21  be  eeeded  so  support  the  pSam&ag 
process  and  nrsies  assrer^docs.  where  necessary.  as  subsumes 
for  unknown  crhical  facts. 

The  steps  performed  to  iHs  point  ia  tbe  process  have  set 
the  sage  fee-  the  first  major  reasoning  task  DevcJopCOAsL  la 
this  step,  which  is  performed  oece  for  each  CX)A  to  be 
'cnensted.  a  skeletal  COA  is  produced.  (The  COA  is  fleshed 
oat  further  during  the  Analyze  COAs  s^p,  whrb  is  described 
subsequently.)  The  subcases  performed  here  are: 

1-  Analyze  relative  combat  power  -  compare  enemy  zed 
friendly  combat  power  to  infer  which  types  of  oprrriora 
are  feasible. 

2.  Dev  elop  scheme  of  maneuver  -  choose  missions  for 
subordinate  units,  determine  how  modi  force  is  required 
for  each  of  these  missions,  allocate  units  to  reasssoos  and 
array  them  on  tbe  baakfieJd. 

3.  Determine  command  and  consol  means  -allocate  major 
subordinate  command  (MSC)  headquarters  to  the  anayed 
forces  and  determine  control  measures  such  as  MSC  ” 
boundaries,  phase  lines,  objectives  and  .assembly  areas. 

4.  Develop  COA  statements  and  sketches  -  produce  wrintn 
and  pictonal  descriptions  of  the  COA. 

In  analyze  COAs.  each  COA  iscvaluaud  via  unrgaming  to 
refine  or  modify  the  COA  based  on  the  expected  outcome, 
determine  the  required  time  sequencing  of  tbe  various  tasks  in 
the  COA.  estimate  the  resources  required  to  support  the  COA. 
and  identify  advantages  and  disadvantages  of  the  COA.  This 
step  in  the  process  is  highly  iterative;  wargaming  often  proceeds 
until  a  weakness  in  the  COA  is  discovered,  then  the  COA  is 
modified  using  reasoning  processes  similar  to  those  employed  in 
the  Develop  COA  step,  then  further  warg^ming  occurs,  etc. 
After  all  of  the  COAs  have  been  analyzed,  they  are  compared 
with  one  another  to  identify  the  COA  that  will  be  recommended 
to  the  commander 

The  commander  chooses  one  of  the  COAs  proposed  by  the 
staff  or  asks  for  modifications  to  a  proposed  COA,  the  COA  is 
expanded  into  an  operation  plan  or  order,  and  the  plan  is 
monitored  as  it  is  executed  The  last  task  m  Figure  1.  Update 
Situation,  is  a  continuous  process  to  collect  information  from  the 
field  to  support  the  information  requirements  of  the  command 
estimate. 


TIIE  MOVES  WANNING  PROCESS 

The  reasoning  process  employed  within  MOVES  is  shown 
in  Figure  2  First,  an  intelligent  user  interface  provides  an 
environment  for  the  corps  commander  or  hiv  operations  officer 
to  perform  the  mission  analysis  and  provide  guidance  to  the 
system,  the  results  of  which  arc  represented  internally  as  tasks, 
guidance,  and  constraints  Mission  and  guidance  components 
that  specify  portions  of  the  solution  (resulting  plan)  arc 
instantiated  into  the  plan  object,  which  is  the  machine 
representation  of  the  COA  and  which  is  described  later  in  this 
paper  .  ne  initial  fragment  of  the  plan  object  is  expanded  with 
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Figure  2:  The  MOVES  PLsrjdn?  Process 

The  system  then  hierarchically  decomposes  the  mission 
aad  intern  ixo  scs  of  reomr  arrms  for  the  principal  elements  of 
the  battle,  deep,  security,  main,  reserve,  and  icai  battle.  The 
different  ways  of  decomposing  tbe  overall  mission  ireo  the  goals 
to  be  achieved  per  bask,  clement,  each  dccoroposn-on  leading  10 
distinct  guidelines  for  the  COA  genenmen  process,  provides  one 
«  the  mechanisms  in  MOVES  for  producing  multiple  COAs. 

After  consmxting  the  inaial  planning  goals,  tbe  remainder 
of  thv  MOVES  planning  process  is  an  iterative  constructive 
approach  consisting  of  three  major  subproccss  components 
generate,  test,  and  debug. 

Problem  constraints  are  employed  to  conduct  a  controlled 
search  through  plan  generation  space  to  construct  a  plan 
fragment  containing  a  proposed  scheme  of  maneuver  for  a 
selected  component  of  the  battlefield  This  plan  fragment  is  then 
evaluated  with  a  heuristic  or  an  analyiical  wargame  If  tbe 
results  of  the  wargame  are  unfavorable,  an  attempt  is  nude  to 
debug  the  current  plan  fragment  to  compensate  for  unexpected 
shortfalls  identified  by  the  evaluation.  If  the  fragment  cannot  be 
debugged,  the'  it  is  net  the  right  solution  u«hm  the  current 
planning  context,  it  is  discarded  and  a  new  fragment  is 
generated.  For  example,  there  might  not  be  enough  force  left 
when  the  reserve  battle  is  planned  jo  perform  a  counterattack 
Once  a  satisfactory  plan  fragment  for  the  haute  CiCment  has  been 
found,  this  process  iterates  over  the  remaining  bat'le  elements. 

After  completing  the  development  of  a  scheme  of 
maneuver,  command  and  control  arrangemenis  and  command 
measures  are  generated  Multiple  COAs  for  the  same  force 
laydown  van  £  generated  by  considering  alternative  means  oi 
control  A  good  example  of  this  would  be  to  generate  one  COA 
that  has  thv  vorps  retain  centralized  control  ol  the  covering  force 
battle  and  a  second  COA  that  decentralizes  the  control  of 
covering  force  units  to  the  units  in  the  main  hanlc 


CAPTURING  THE  MANEUVER  PLANNING 
PROCESS 


Bcci»c  the  nraneevcr  phasing  process  is  highly 
procedural  ia  crura,  the  caderiy rag  technology  thr  isesed  ia 
MOVES  to  capture  the  process  is  procedural  reasocrag  (?t  Ia 
the  following  sshseetioos.  we  describe  the  Procedural 
Reposing  System  (PRS)  that  was  developed  at  Advanced 
Dcc&oa  Systems  a  sspport  of  the  MOVES  devdopmcc:  effort, 
thea  dbccss  bow  PRS  is  used  to  represent  maneuver  phasing 
knowledge. 

THE  PROCEDURAL  REASONING  SYSTEM 

PRS  provide*  a  method  of  encoding  procedural  lope  in  a 
visual  reprcsectaiioa  that  is  understandable  2nd  modifiable  by 
domain  experts,  c.g„  Army  maneuver  planners,  2nd  compilable 
iruo  efficiently  executable  code.  It  supports  a  goal-directed 
method  of  programming  that  encourages  a  modular,  hierarchical 
decoropos-rioa  of  goals  2nd  scbgcds.  ~RS  was  inspired  by  the 
work  of  Georgeff  and  Lansky  f4|  on  plan  representation  and 
cxecurion. 

PRS  combines  features  of  several  programming 
paradigms.  As  in  PROLOG,  it  encodes  infcrencing  Krregics,  is 
goal  carected  and  features  backtracking  and  retraction  of  data 
changes.  As  in  ADA.  it  has  declarative  semantics,  packaging, 
and  exception  handling.  As  in  LISP,  it  is  a  symbolic  language 
and  facilitates  rapid  prototyping.  As  in  rule-based  systems,  PRS 
also  provides  a  frame  system  for  dam  representation.  Unlike 
any  of  these  ocher  languages,  PRS  represents  a  program  visually 
and  includes  a  graphical  editor  for  program  creation  and 
modification. 

The  fundamental  element  of  a  PRS  program  is  called  a 
procedure-  A  PRS  procedure  is  developed  by  a  knowledge 
engineer,  or  possibly  by  a  trained  domain  expert,  and  can  then 
be  augmented  by  a  software  engineer  to  add  declarations  and 
daa  flow  specifications  that  enable  Ac  procedure  to  be  compiled 
into  modular,  efficiently  executable  code.  Execution  speed  of 
the  PRS  program  is  enhanced  by  performing  the  bulk  of  the 
necessary  searching  and  p3Ucm  matching  during  compilation,  at 
which  time  the  visual  representation  is  translated  into  executable 
COMMONL1SP  code.  The  visual  nature  of  the  language  allows 
a  domain  expen  who  is  not  computer  literate  to  participate  more 
actively  in  the  construction  and  critiquing  of  the  software  than  is 
possible  with  a  standard  computer  language. 

PRS  DEFINITIONS 

A  procedure  is  a  network  representing  a  set  of  instructions 
for  accomplishing  a  specified  goal.  As  seen  in  the  sample 
procedure  in  Figure  3  (which  is  a  screen  dump  of  an  actual  PRS 
computer  display),  boxes  represent  actions  or  goals,  circles 
represent  states,  and  directed  arcs  represent  the  reasoning  flow 

There  are  a  number  of  different  actions  that  can  be  used 
alcng  the  arcs  of  a  procedure: 

1  Achieve 1  effect-name  parameters  Find  a  match  for  the 
specified  effect  in  the  achievement  base.  If  no  match  is 
found,  execute  each  procedure  that  can  achieve  the  effect 
unu!  one  succeeds  or  all  fail. 

2  Achieve  (no  test)  - "  effect-name  parameters  -  Execute 
each  procedure  that  can  achieve  the  effect  untJ  one 
succeeds  oral!  fail 


3.  Test  "*  effect- same  parameters  Find  a  materi  for  the 
specified  effect  in  the  achievement  base.  Ifnomatehis 
found,  tcefcrcdc 

4.  Perform  -  @  procedure-name  parameters  -  Execute  the 
specified  procedure  directly. 


There  are  also  actions  for  asserting  affects  and  for  evaluating 
LISP  expressions. 


Figure3:  A  Simple  PRS  Procedure 


There  are  a  number  of  different  node  types  that  are 
supported  within  PRS.  A  start  node  is  the  normal  entry  point 
for  a  procedure.  End  3nd  Break  nodes  represent  successful 
completion  of  a  procedure,  the  Break  node  allowing  reentry  to  a 
procedure  during  backtracking.  Raise  and  Exception  nodes 
allow  abnormal  exit  from  a  procedure,  similar  to  raising 
exceptions  in  ADA. 

EXECUTING  A  PROCEDURE 

Any  path  through  the  network  from  the  Start  node  to  any 
End  node  represents  a  possible  successful  execution  of  the 
procedure  and  is  called  a  line  of  reasoning  A  procedure  is 
searched  in  an  ordered  depth  first,  left  first  manner,  thus  the 
order  of  search  is  inherent  in  the  topological  structure  of  the 
procedure. 

Backtracking  occurs  whenever  an  action  fails  or  a  goal 
fails  to  be  achicv  ed  Execution  backs  up  and  attempts  the  next 
untried  branch  Automatic  retraction  of  assertions  and 
assignments  occur  simultaneously  with  backtracking,  thus,  onl> 
actions  along  a  successful  path  or  line  of  reasoning  affect  the 
final  results. 

To  illustrate  the  execution  of  a  procedure,  we  now  step 
through  the  example  that  was  shown  in  Figure  }  Assume  that 
the  procedure,  named  RIVER-CROSSING,  has  been  invoked 
cither  by  name  or  by  requested  achievement  of  the  effect  named 
"reach  other  side."  Before  execution  begins,  the  precondition 
“crossing  type  =  unopposed"  is  checked,  and  only  if  the 
precondition  is  true  will  the  procedure  be  executed  One  can 
have  several  procedures  capable  of  achieving  the  same  effect 
Some  can  be  general  purpose,  others  can  be  specific  to  certain 
situations  The  precondition  is  one  method  of  controlling  which 
procedures  can  be  considered  in  a  given  situation  Assume  that 
the  precondition  is  ratified 


The  first  arc  executed  from  the  Start  node  is  an  achieve 
iction  to  find  all  feasible  crossing  locations,  uhich  fails  only  if 
there  arc  no  feasible  locations.  If  it  succeeds,  the  next  arc 
executed  is  a  test  to  see  if  there  are  many  locations  to  chose 
from.  Suppose  this  test  fails.  The  search  backtracks  to  the 
previous  node  and  executes  the  other  outgoing  branch,  which  is 
a  test  that  there  are  only  a  few  1c  .lions  to  consider.  The  system 
next  attempts  to  achieve  the  effect  called  "schedule  units 
crossings",  to  make  efficient  use  of  the  limited  number  of 
available  crossing  sites.  If  this  arc  fails,  execution  backtracks 
again  and  the  arc  to  achieve  a  wider  area  of  interest  is  tried  next. 
Assuming  success  and  returning  now  to  the  Stan  node,  feasible 
crossing  locations  for  the  broadened  area  of  interest  are  found. 
This  time,  perhaps  there  are  many  locations  to  chose  from,  and 
the  next  arc  prioritizes  them.  If  the  test  for  "bridge  available" 
succeeds,  a  procedure  is  invoked  to  execute  the  crossing,  the 
system  asserts  the  effect  "reach  other  side."  and  this  procedure  is 
exited  with  successful  completion. 

HOW  PRS  REPRESENTS  THE  MANEUVER 
PLANNING  ROCESS 

The  maneuver  planning  process  is  encoded  within  a 
hierarchy  of  PRS  procedures.  High-level  procedures  encode  the 
knowledge  required  to  solve  large  subcomponents  of  the 
planning  problem  at  a  high  level  of  abstraction;  low-level 
procedures  encode  the  fine  grained  knowledge  required  to  solve 
small,  narrowly  scoped  subproblems. 

At  the  highest  level  of  the  MOVES  hierarchy  is  a  procedure 
called  MOVES-TOP.  shown  in  Figure  4.  Ibis  procedure 
captures  the  entire  maneuver  planning  process  at  a  very  high 
level  of  abstraction.  Tracing  through  the  procedure,  ore  sees  the 
steps  of  developing  multiple  plans,  recommending  one  CO  A  to 
the  commander,  refining  the  COA  to  respond  to  feedback  from 
the  commander,  expanding  the  COA  into  a  full  plan,  and 
notifying  the  force  control  component  that  the  plan  is  ready  to  be 
processed  by  a  block  text  generator  to  produce  the  operation 
order. 


Two  levels  below  MOVES-TOP  m  the  hierarchy,  beneath 
the  arc  labeled  “!!  dev  clop-plans,"  is  the  DEVELOP-COA 
procedure,  depicted  in  Figure  5.  This  procedure  captures  the 
process  of  generating  a  single  COA.  The  steps  sic  to  define  the 
close  tattle  area  (which  also  defines  the  other  battle  areas  relative 
to  the  close  battle  arc a;,  incrementally  develop  plans  for  the  dose 
battle,  deep  battle,  and  reserve  battle!  allocate  any  units  that  have 
not  been  committed  to  any  tattle,  and  then  determine  the 
command  and  control  measures. 

Two  more  levels  down,  exploring  the  "!!  determine- 
reserve-effort"  arc,  is  the  procedure  "DEFEAT-SECOND- 
ECHELON  "  This  procedure  develops  a  plan  for  defeating  the 
enemy  second  echelon  forces  with  the  reserve  b3ule.  As  seen  in 
Figure  6,  the  procedure  first  explores  the  possibility  of 
counterattacking  the  entire  second  echelon  (in  our  current 
scenario,  this  is  two  Soviet  tank  divisions),  first  with  nominal 
probability  of  success,  then  with  some  additional  risk  accepted. 
If  there  is  not  enough  force  available  for  the  reserve  to 
counterattack,  the  system  will  attempt  to  achieve  a  separation  of 
the  elements  of  the  second'echelon  so  that  they  can  be  dealt  with 
individually.  If  the  separation  can  be  achieved,  the  system  tries 
to  counterattack  the  lead  elements  of  the  second  echelon  and 
defend  against  the  follow-on  elements.  If  the  separation  cannot 
be  achieved,  the  system  attempts  to  plan  a  defend  mission  for  the 
reserve  against  the  entire  second  echelon  If  the  system  does 
find  a  mission  that  seems  to  be  feasible  for  the  amount  of  force 
available,  it  produces  a  plan  fragment,  evaluates  the  fragment 
with  a  wargame,  analyzes  the  wargame  results  to  see  if  the 
desired  effect  was  achieved,  and  either  accepts  an  adequate  result 
or  backtracks  to  try  another  mission  if  the  result  was  inadequate. 

It  may  be  the  case  that  too  much  force  was  allocated  to  the 
close  battle,  leaving  insufficient  force  for  the  reserve  to  even 
defend.  In  this  case,  the  DEFEAT-SECOND-ECHELON 
procedure  would  fail  after  having  ined  all  of  us  known  methods 
for  achieving  the  defeat,  control  would  return  to  the  calling 
procedure  with  failure  as  the  result,  and  reasoning  processes 
higher  up  could  choose  between  removing  forces  originally 
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committed  to  the  dose  battle  to  give  to  the  reserve  or  changing 
the  reserve  goal  to  something  that  could  be  accomplished  with 
less  force  than  the  original  goal  of  defeating  the  second  echelon. 

Below-  the  DEFEAT-SECOND-ECHELON  procedure  arc 
a  number  of  further  layers  that  perform  actions  like  determining 
a  counterattack  objective,  calculating  how  much  friendly  force  is 
required  to  counterattack  the  given  enemy  force,  arraying  the 
required  force  on  the  battlefield,  etc.  As  one  proceeds  deeper 
into  the  hierarchy,  the  problem  being  addressed  by. each 
procedure  becomes  smaller  and  the  reasoning  knowledge 
represented  becomes  more  detailed.  At  the  lowest  level,  there 
arc  primitive  procedures  whose  arcs  can  invoke  LISP  code,  but 
cannot  invoke  subordinate  procedures. 


REPRESENTING  THE  PLAN 

The  results  generated  by  the  ALBM  planning  process  must 
be  stored  m  a  representation  that  is  sufficiently  complex  to 
capture  the  complete  description  of  the  tactical  actions  that 
compose  the  plan  and  the  relationships  that  exist  between 
various  tasks  and  physical  areas  on  the  battlefield  The  plan 
object  consists  of  four  major  components. 

o  Task  Organizauon 
o  Battlefield  Geometry 
o  Fire  Support  Plan 
o  Tactical  Action  Dependency  Network 

TASK  ORGANIZATION 

The  Task  Organization  (TO)  component  describes  the 
operational  command  structure  for  the  plan  It  identifies  how  the 
various  major  subordinate  commands  are  structured  as  a 
function  of  the  different  phases  of  the  plan  It  reflects  the  attach 
and  opcon  (operational  control)  relationships  that  have  been 
derived  by  the  planning  process  to  account  for  shortages  or 
extras  m  the  organic  unit  compositions 

BATTLEFIELD  GEOMETRY 

The  Battlefield  Geometry  (BG)  component  of  the  plan 
object,  represented  in  Figure  7,  contains  the  information 
describing  terrain  related  control  measures  This  information 
includes  the  designated  areas  of  operations  for  each  of  the  major 
subordinate  commands,  assembly  areas,  attack  and  counterattack 
objectives,  engagement  areas,  and  axes  of  advance.  Certain 
coordination  information  is  also  included  in  this  schematic  in  the 
form  of  phase  lines  A  particular  friendly  or  enemy  unit 
crossing  a  phase  line  can  be  the  trigger  for  termination  of  some 
current  activity  and  initiation  of  the  next  T  he  BG  object  also 
contains  information  describing  how  the  various  battle  elements 
(security,  mam,  deep,  rear,  reserve)  arc  spatially  defined  for  the 
course  of  action  Part  of  this  component  is  filled  in  with  mpjts 
provided  by  echelon  abovt  corps,  eg,  the  corps  area  of 
operations  and  perhaps  the  Forward  Edge  of  Battle  Area  (FEBA) 
or  covering  force  coordinating  points  The  remainder  of  the 
information  is  either  provided  by  the  system  user  or  is 
determined  as  pan  of  the  maneuver  planning  process 

FIRE  SUrrORT  PUN 

The  fire  support  component  of  the  plan  object  describes 
which  fire  support  assets  arc  retained  under  coips  control  and 
which  assets  arc  assigned  to  (he  major  subordinate  commands 
The  spe-.ific  sets  of  fire  support  tasks  that  support  the  maneuver 
missions  are  incorporated  into  the  tactical  action  dependency 
network,  described  below 


Figure  7:  Battlefield  Geometry  Component 


TACTICAL  ACTION  DEPENDENCY  NETWORK 

The  Tactical  Action  Dependency  Network  (TADN)  is  the 
most  important  and  most  complicated  of  the  plan  representation 
components  This  component  captures  the  tasks  that  have  been 
assigned  to  the  corps  and  its  subordinates,  and  the  various 
dependency  relationships  between  tasks  that,  taken  together, 
describe  the  sequence  of  activity  making  up  the  plan. 

The  TADN  is  a  network  of  risk  and  conditional  nodes, 
with  the  arcs  representing  hierarchical  task  decomposition, 
temporal,  and  tactical  proximity  relationships  between  the  nodes. 
Figure  8  illustrates  the  plan  object  from  the  task  decomposition 
perspective  The  TADN  begins  with  a  top-level  reference  node 
representing  ihe  task  which  corresponds  to  the  given  corps 
mission.  The  network  is  hierarchically  organized  according  the 
decomposition  of  tasks  into  subtasks  Thus,  nodes  deeper  in  the 
structure  arc  more  detailed  and  represent  units  at  lower  echelons 
In  Figure  8,  the  fin  decomposition  would  represent  the  corps 
tasks  for  the  deep,  close,  rear,  and  reserve  battle  elements  The 
specific  decomposition  of  the  corps  close  battle  element  task 
could  be  found  in  the  division  level  segment  of  the  diagram. 

Each  TADN  node  contains  a  task  object  and  sets  of  parent 
links,  child  links,  temporal  links,  and  tactical  proximity  links 
The  task  object  stores  basic  information  about  the  kind  of  tactical 
action  that  is  to  be  periurmed  on  the  battlefield  The  task  object 
contains  the  following 

Who  -  The  unit  performing  the  action 

What  -  The  activity  to  be  performed 

What  Direct  Object  -  Object  to  which  the  activity  applies 

Where  -  The  location 

When  -  The  lime 

Why  -  The  purpose  to  be  achieved 
Why  Direct  Object  -  Object  of  the  purpose 
How  -  The  specific  fonn  of  maneuver  or  another 
decomposition 

For  example,  consider  the  following  task 

On  order  (when)  the  208  ACR  (who)  at’acks  (what)  the  79 
Tank  Regiment  of  the  27  Division  (what  direct  object)  at 
objective  blue  (where)  to  force  deployment  (w  hy)  of  the  9 
Tank  Regiment  of  the  27  Division  (why-direct  object) 

In  this  example  the  how  was  not  given,  indicating  that 
the  way  in  which  iht  mission  is  accomplished  is  implicitly 
described  in  the  task  obitcis  of  suboidinaic  nodes  in  the 
network 


Figure  8.  TADN  Task  Decomposition 

Additional  information  about  the  task  is  also  available  for 
determining  whether  the  task  is  a  principal  maneuver  task  or  a 
support  task.  Some  tasks  have  special  invocation  and 
terminations  that  are  not  derivable  from  the  temporal  relations. 
For  example,  when  the  208  ACR  is  pushed  back  over  Phase 
Line  Dill,  it  transitions  from  a  "defend"  mission  to  a  "delay" 
mission.  Crossing  the  phase  line  is  the  termination  condition  for 
the  "defend*  mission. 

Whenever  the  maneuver  planner  determines  that  a 
particular  temporal  ordering  of  two  tasks  is  required,  the 
relationship  is  represented  as  a  temporal  link  connecting  the 
corresponding  task  nodes  There  are  thirteen  possible  values 
that  desenoe  .he  way  m  which  tasks  can  be  temporally  related, 
the  temporal  relationships  being  based  on  Allen’s  theory  of  time 
(53  These  relations  have  been  defined  as  follows: 

before  (A.B).  A  ends  before  B  suits 

after  (A  JB):  A  suns  after  Bends 

overlaps  (A  JB)*  A  suns  before  B  suns,  ends  after  B  suns,  and 

ends  before  Bends 

overiapped-by  tAJB).  A  suns  after  B  starts,  ends  after  Bends 

equal  (A3);  A  and  B  have  sar.it  sun  and  end 

suns  (A.B);  B  suns  when  A  suns 

suited  by  (A3).  A  suns  when  B  suns 

ends  (A3);  Bends  when  A  ends 

cnd$by(A3X  A  ends  when  Bends 

meets  (A3)'  A  suns  when  Bends 

met-by(AJB)  B  suns  when  A  ends 

dunng  (A3;  A  suns  after  B  suns,  and  A  ends  before  B  ends 

contains  (A3)  A  suns  before  B  starts,  aid  A  cods  after  B  ends 

Allen  uses  these  relationships  to  describe  the  possible 
temporal  relationships  that  can  exist  between  two  time  intervals 
A  temporal  link  between  two  TADN  nodes  has  a  stronger 
connotation:  the  link  represents  a  requirement  that  a  particular 
temporal  relationship  exist  between  the  two  nodes.  The 
information  contained  in  the  “when*’  slots  of  two  nodes  can  be 
examined  to  determine  the  temporal  relationship  that  exists 
between  the  two  nodes,  but  the  nodes  could  be  temporally 
independent  and  me  relationship  could  be  purely  coincidental 
However,  if  a  temporal  link  connects  the  two  nodes,  then  the 
temporal  relationship  must  be  maintained,  and  changing  the  time 
interval  associated  with  one  of  the  nodes  may  cause  the  time 
interval  of  the  other  to  be  adjusted  accordingly. 

TACTICAL  PROXIMITY 

When  allocating  the  command  and  control  measures  after 
forces  have  been  arrayed,  it  is  important  to  know  which  tasks  in 
the  network  strongly  influence  other  tasks  in  the  network  Such 


tasks  could  be  considered  as  being  pa  af  a  single  battle.  This 
relationship  between  nodes  is  called  tactical  proximity.  The 
values  for  this  relation  arc  indicated  by  tactical  proximity  links. 
The  acceptable  values  arc: 

Tactical Iy-c Jose  (A.B):  strong  influence 

Tactically-distam  (A,B):  negligible  influence 

Tactically-intermediate  (A,B):  moderate  influence 

Tlie  concept  of  "tactically  close"  does  not  depend  on  physical 
distance  only.  For  example,  two  defend  activities  on  adjacent 
avenues  of  approach  may  be  "tactically  distant"  if  a  significant 
obstacle  exists  between  the  avenues  If  two  tasks  are  "tactically 
close,"  there  is  strong  motivation  to  assign  both  tasks  to  the 
same  maj'or  subordinate  command. 

CONDITIONAL  NODES 

A  single  set  of  tactical  actions  may  not  always  be  adequate 
to  respond  to  sets  of  differing  enemy  actions.  In  this  case  the 
plan  representation  must  have  the  capability  to  incorporate  a 
branch.  A  branch  is  indicated  by  a  conditional  node.  A 
conditional  node  consists  of  sets  of ’parent,  child,  and  temporal 
links,  but  in  addition  it  .ias  a  list  oi  "control  forms  ”  Each 
control  form  consists  of  a  LISP  predicate  and  an  accompanying 
list  of  task  nodes  to  be  executed  if  the  predicate  evaluates  to  true 
during  plan  execution.  This  predicate  corresponds  to  a  test 
against  the  world  states  that  result  from  execution  of  the  plan. 
For  example,  the  predicate  might  test  whether  enemy  units  move 
to  the  north  or  south  at  a  particular  intersection  of  major  roads 
If  the  predicate  indicating  enemy  goes  north  is  true,  me  nodes 
corresponding  to  that  branch  of  the  plan  are  executed  as 
required.  These  sets  of  predicates  also  help  to  identify 
requirements  for  what  kind  of  data  needs  to  be  collected  about 
the  battle  as  events  unfold. 


CONCLUSIONS 

This  paper  has  discussed  the  ongoing  development  of  the 
Maneuver  Planning  Expert  System  (MOVES),  which  is  a  major 
component  of  the  AirLand  Battle  Management  program.  Wc 
have  designed,  implemented,  and  demonstrated  the  first 
prototype  of  a  system  that  generates  corps  manual  decision¬ 
making  process.  Both  the  manual  process  used  in  the  U.S 
Army  today  and  the  process  model  built  into  the  system  are 
highly  procedural  in  nature,  leading  to  the  conclusion  that  the 
Procedural  Reasoning  System  (PRS),  developed  at  Advanced 
Decision  Systems,  is  an  appropriate  technology  with  which  to 
implement  the  MOVES  system. 

PRS  has  a  number  of  features  that  make  it  an  appropriate 
software  development  environment  for  MOVES  development 

1 .  It  is  designed  specifically  to  address  the  problem  of 
representing  procedural  knowledge. 

2  Its  graphical  representation  of  both  domain  knowledge 
apd  .nfcrcnce  control  mechanisms  make  the  inherent 
reasoning  processes  visual  to  the  software  developer 
and,  more  importantly,  to  the  computer  illiterate  domain 
expert,  who  can  then  interact  with  the  developer  directly 
through  the  code,  rathe,  than  through  the  developer  s 
explanation  of  what  the  code  is  supposed  to  do. 

3.  The  PRS  programming  paradigm  encourages  the 
development  of  modular,  hierarchically  structured 
software  It  supports  the  ability  to  develop  the  reasoning 
knowledge  only  down  to  a  certain,  desired  depth,  with 
the  logic  below  that  level  easily  "stubbed'1  out  until  it  is 
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desired  to  fill  in  more  low-level  knowledge.  The  PRS 
development  environment  supports  an  incremental 
approach  to  software  development  through  rapid 
prototyping. 

4  Much  of  the  search  and  pattern  matching  is  performed  at 
compilation  time,  providing  excellent  performance  at 
execution  time,  unlike  most  expat  system  development 
environments. 

PRS  is  used  to  represent  the  maneuver  planning  reasoning 
processes,  but  is  not  used  to  represent  the  plan  that  is 
dynamically  generated  by  the  MOVES  system.  A  complex  plan 
object  has  been  developed  to  represent  the  actions  that  make  up  a 
plan,  the  various  dependency  relationships  in  effect  between 
these  actions,  and  the  measures  in  place  to  control  the  plan. 

Over  the  remainder  of  the  project,  MOVES  will  evolve  as 
we  continue  to  expand  the  know  ledge  encoded  in  the  system  in 
the  form  of  PRS  procedures,  adding  m cre  breadth  to  the  types 
of  missions  for  which  the  system  can  generate  plans,  and  adding 
more  depth  to  the  knowledge  already  captured. 
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ABSTRACT 


A  number  of  automated  tool  s  have  been 
developed  to  find  sultabl'e  oaths  for  aircraft 
oenetrators  In  a  surface-to-air  nlsslle 
environment.  Unfortunately,  the  techniques  used  by 
the  existing  tools  force  them  to  Iqnore  many 
factors  (soeed,  altitude,  Bf,  Threat  al'ert  status, 
number  of  oenetrators,  etc)  that  are  so  rel'evant  to 
the  problem.  The  data  bases  of  tho  exlstlnq  tool's 
are  al’so  difficult  to  modify  for  moving  threats. 
RAOC  develooed  an  In-house  concent  (Oeclslon  Aid 
for  Tnreat  Penetration  Analysis,  OATPA)  that  was 
meant  to  overcome  many  of  4hese  shortcomings. 
DATPA  simplified  the  process  *{»,-"Xjqh  a  combination 
of  heuristics  and  object-cr t-nted  oroqrammlnq. 
These  techniques  alloy  tho  oroqram  to  encomoass  £W, 
saturation,  or  other  tactics  so  that  the  oath 
recommended  Is  more  survlvable.  Those  Imorovements 
can  be  realized  because  tho  heuristics  dramatically 
lover  the  number  of  potential1  routes  and  the 
object-oriented  reoresentatlon  creates  robust  data 
structures  that  are  easily  manipulated  and 
dupl leafed. 


INTRODUCTION 

"For  centuries,  successful  national  military 
strategies  have  been  based  on  orlncloles  of  war 
learned  In  equally  as  many  centuries  of  military 
experience.  Those  lessons  came  hard;  and  at  great 
cost  In  lives  and  qold,  and  In  national 
oover... (These)  orlncloles  of'  war...  have  been 
successful  for  moro  than  2500  years.  We  Iqnore 
these  lessons  at  our  peril." 

General  Curtis  CoMay  (1962) 

General  '.eMay's  concerns  are  valid  and  must  be 
considered  as  wo  begin  to  automate  our  olannlng 
orocesses.  This  oaoer  discusses  a  way  to  Include 
the  *PrInclolos  of  War*  In  our  automated  planning 
systems.  The  Air  Force  Identifies  the  Oorlncloles 
of  war*  In  AFM  1-1.  They  Include  such  fundamental 
concents  as:  objective,  offensive,  mass,  economy 
of  force,  surprise,  maneuver,  etc.  Unfortunately, 
as  we  begin  to  Introduce  automated  tools  Into  the 
Planning  orocess,  we  have  sometimes  avoided  these 
orlncloles.  This  is  especially  true  In  the  field 
of  route  olannlng. 


RAOC  developed  a  conceot  of  route  olannlng 
that  uses  some  unique  techniques  to  Improve  the 
route  oi’annlnq  orocess.  This  conceot  was  described 
In  the  Soring  1986'  NATO  Advisory  Group  for 
Aeronautic  Research  and  Development  as  the  Oeclslon 
Aid  for  Threat  Penetration  Analysis  (DATPA). 
although  OATPA  was  orlqlnally  develooed  as  an 
alternate  approach  to  route  olannlng  that  could  be 
extended.  Its  basic  Ideas  lent  themselves  to  a 
system  that  can  more  effectively  create  a  olan 
utilizing  the  traditional  orlncloles  of  war.  This 
oaoer  will  discuss  a  conceot  of  automated  olannlng 
that  can  accommodate  these  orlncloles  of  war  uslnq 
the  techniques  found  In  OATPA.  Property  aool led, 
the  tool  described  here  could  serve  for  olannlnq 
Individual  sorties  and,  more  Importantly,  could 
suqqest  major  theater  level  tactics. 

PR0BL1EM 

Although  the  orlncloles  of  war  mentioned  above 
aoply  to  all  levels  gf  command,  they  are  most 
Important  at  the  hlqher  levels.  Route  olannlnq,  as 
used  In  this  paper,  refers  to  the  oath  used  by 
softies  to  accomplish  tholr  objectives.  Obviously 
routes  must  bo  planned  at  the  unit  level1  for  each 
Individual*  sortie  In  order  to  actually  fly  the 
mission,  but  route  olannlnq  should  also  be  a  major 
factor  In  theater  ol'annlng.  In  the  terms  of  war 
principles;  the  decision  of  where  to  mass  forces, 
how  to  achieve  surorlse,  the  size  of  force 
necessary  (economy  of  force),  etc.,  are  all 
Inteqraliy  Intermixed  with  the  routes  flown.  Thus, 
many  routes  may  converqe  to  achieve  a  critical  mass 
aqalnst  a  defense  or  certain  routes  mav  be  chosen 
to  deceive  a  defense  and  enhance  surprise. 
Ideally,  all  automated  route  olannlnq  systems 
should  encomoass  these  orlncloles.  Unfortunately, 
this  Is  not  the  case. 

Most  exlstlnq  automated  tools  for  route 
olannlnq  are  limited  to  minimizing  tho  threat 
exposure  for  a  single  sortie.  This  is  usually 
accomplished  bv  building  an  vrav  reorosentinq  tho 
threat  lethal l tv/time  and  then  using  an  aiqorlthm 
that  minimizes  the  sum  of  moves  through  the  array. 
This  results  In  a  oath  (route)  that  minimizes  the 
exoosure  to  threats.  Various  techniques  are  used 
to  soeed  tnis  orocess  and  limit  the  search.  Tools 
that  use  these  methods  are  Incapable  of  fully 
accommodate  g  the  orlncloles  of  war  mentioned 
above,  Tne  tools  are  limited  because  they  use  a 
‘’static1  reoresentatlon  of  the  threats  and  they  are 
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comoutatJonally  Intensive.  Thus  -the  routes 
generated  are  Insensitive  to  massed  oenetrators, 
deceptive  tactics,  surorlse,  etc. 

Ideally  the  automated  tools  should  suqqest  not 
only  Individual  routes,  but  also  the  best  olan  that 
exololts  basic  orlnclol'os  of  war.  To  accomol'lsh 
this,  the  automated  tools  must  be  sensitive  to 
factors  such  as  massed  oenetrators,  surorlse, 
deceotlon,  etc..  This  Holies  8  tool  that 
reoresents  threats  In  a  mere  dynamic  manner.  Real 
threats  do  not  have  a  fixed,  unchanging  caoabll Ity 
against  all  oenetrators.  Instead,  real  threat" 
characteristics  change  as  a  function  of  the 
oenetrator  tyoe,  the  threat  al'ert  status,  the 
number  of  threats,  the  local'  terrain,  the  munitions 
status  of  the  threat,  etc..  Some  of  those  factors 
can  get  quite  comol'ex.  For  examole,  If  -No  threats 
are  somehow  In  communication  with  each  other; 
flylnq  oast  one  automatically  alerts  the  other  and 
Increases  Its  orobablllty  of  kill.  This  means  a 
threat's  caoablllty  mav  be  a  function  of  the  route 
flown  (l.e.  threats  oassod).  This  becomes  a  sort 
of  Incestuous  Noe  of  oroblem.  The  route  should  be 
a  function  of  the  threat  orobablllty  of  kill  and 
the  threat  orobablllty  of  kill  may  be  a  function  of 
the  routo. 

TECHNIQUES 

Three  techniques.  Integrated  together,  could 
bo  used  to  create  an  automated  tool  that  could  olan 
Individual'  routes  and  could  also  rocommend  soeclflc 
theater  tactics  that  would  satisfy  basic  orlncloles 
of  war.  The  first  of  those  techniques  Is  the  use 
of  heuristics. 

Heuristics  or  ‘rules  of  thumb'  can  be  used  to 
slmollfy  oroblems  and  to  soeod  search  orocessos. 
For  route  olannlng,  one  slmole  hourlstlc  Is  to 
avoid  threats  where  oosslblo.  Threats  can  bo 
avoided  by  golnq  around  them.  Two  oaths  can  be 
created  to  go  around  any  threat  (clockwise  and 
counterclockwise).  Thus,  one  slmol'e  heuristic  Is 
that  uoon  encountering  a  threat  attemot  going 
around  It  clockwise  and  counterclockwise.  Uslnq 
this  heuristic,  the  search  soace  In  a  dense  threat 
area  Is  limited  to  the  edges  of  threats.  This 
dramatically  reduces  the  number  of  ootentlal  oaths. 
Other  heuristics  can  Include  tactical  actions  taken 
uoon  encountering  a  threat  (l.e.  Jam  the  threat, 
deolov  chaff/flares,  maneuver,  kill  the  threat, 
change  altltude/soeed,  etc.).  The  aoollcatlon  of 
these  heuristics  can  be  viewed  as  a  means  of 
creatlnq  alternate  oaths  as  threats  are 
encountered.  Thus,  as  a  threat  Is  encountered  the 
heuristics  mav  create  clockwise  oaths  at  different 
soeeds,  oaths  that  exoend  chaff,  oaths  that  kill 
the  threat,  etc..  Each  of  these  generated  oaths 
can  be  evaluated  for  distance,  lethaMN,  and 
oractlcallN  vl th  Imoractlcal  oaths  rejected  and 
the  best  (dlstance/lethnl'lty)  extended.  The 

heuristics  used  to  create  the  alternate  oaths  can 
be  collectively  evaluated  by  an  exoert  system  as 
threats  are  encountered.  Uslnq  an  exoert  system 
allows  the  heuristics  to  be  easily  added  and 


modified.  Most  Imoortantly,  the  expert  system 
allows  the  heuristics  to  be  caotured  as  slmol'e 
statements  that  are  easily  understood  rather  than 
aS'ComDl'ex  mathematical’  algorithms. 

The  second  technique  Is  °object-orlented' 
orogrammlng.  Object-oriented  oroqrammlnq  Is  a  wav 
of  orogrammlnq  that  develoos  the  orogram  as  a 
series  of  objects.  An  object  Is  something  that  has 
behavior  characteristics.  That  Is,  the  object 
behaves  In  some  stated  manner.  The  behavior  Is 
caused  (Invoked)  by  sendlnq  an  object  a  message. 
Objects  can  Inherit  characteristics  from  other 
objects  and  objects  can  send  messages  to  other 
objects.  For  route  olannlnq,  the  threats  can  be 
treated  as  objects.  Each  threat  tyDe  can  be 

described  as  an  object.  The  doscrlotlon  would 
contain  the  basic  characteristics  of  the  threat 
(caoablllN  aqalnst  various  oenetrators, 
susceotlbll Ity  to  attack  SEW,  or  othert,  sensor 

types,  ohyslcal  coooeratlveness,  munitions,  etc.). 
The  descrlotlon  would  also  Include  behaviors  such 
as  how  to  qo  around  the  threat,  throat  doctrinal 
considerations,  etc..  Threat  behaviors  would  also 
Include  the  orocodures  for  the  threat  to  maintain 
Its  current  status.  Thus  the  threat  would 

automatically  keeo  track  of  Its  alert  status, 

munitions  aval labll  Ity,  coTtnunlcatlons,  etc..  This 
status  could  easily  change  as  a  function  of  time 
and  events.  As  Instances  of  the  threat  were 
created,  Information  soeclflc  to  the  Instance  would 
be  constructed.  This  Includes  the  local 
.qoograohlcal  Information,  connectlvlN  to  other 
threat  Instances,  current  munitions  loadlnq, 
current  alert  status,  etc..  It  would  be  oosslble 
to  send  a  mossaqe  to.  a  threat  Instance  and  have  the 
threat  Instance  create  a  oath(s)  around  Itself. 
The  message  could  easily  contain  arguments  that 
would  affect  the  oaths  created.  Examining  the 
Incestuous  oroblem  of  Interconnected  threats 
described  above;  It  Is  easily  oosslble  to  oass  as 
an  arqument  the  threats  already  encountered.  The 
threat  could  then  use  this  arqument  to  determine 
whether  to  change  Its  alert  status  and  thus  Its 
orobablllN  of  kill.  Object-oriented  orogrammlnq 
has  a  side  benefit  In  that  It  can  be  very  concisely 
coded.  This  means  a  very  comolex  orogram  Is  both 
easy  to  develop/tost  and  It  Is  relatively  small. 

The  last  technique  Is  a  branch  and  bound 
search  with  dynamic  oroqrammlnq.  A  branch  and 

bound  search  Is  a  search  that  oroqresslvely 
constructs  oaths  and  links  them  to  orevlouslv 
created  oaths.  The  branch  and  bound  algorithm 
first  constructs  a  series  a  of  oaths  from  an 
Initial  location  and  selects  the  least  cost  oath. 
eavJnq  tho  remalnlnq  oosslble  oaths.  Next 

additional  oaths  are  constructed  from  the  chosen 
oath  location  and  the  sum  total  of  those  oaths  are 
comoared  w*th  the  orevlously  rejected  oaths.  The 
lowest  cost  total  oath  Is  next  extended.  This 

orocess  Is  continued  until  the  qoal  Is  reached.  If 
a  location  that  had  been  orevlously  reached  is 
reached  some  later  oath,  the  later  oath  is  deleted 
since  best  oaths  have  always  been  extended  first. 
As  oaths  are  created  Imoortant  statistics  can  be 
retained  on  each  oath.  Thus  the  remalnlnq  fuel, 
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current  al tltude/soeed,  aircraft  conf Iquratlon, 
consumable  (chaff,  etc.)  status  can  all  be 
associated  with  a  oath.  Therefore  two  routes 
flying  the, exact  same  course,  but  at  different 
soeeds  would  be  treated  as  two  separate  oaths.  The 
statistics  allow  oaths  that  exceed  caoabll I ties  to 
be  rejected  (e.g.  a  oath  that  consumes  too  much 
fuel).  This  search  technique  has  the  advantage  of 
yielding  a  mathematically  optimum  solution  without 
examining  all  possible  alternatives.  The  orlma-v 
disadvantage  of  this  technique  Is  that  It  can 
Involve  many  alternative  paths.  The  heuristics 
described  above  can  be  used  to  limit  the  number  of 
oaths  examined. 

SYSTEM  CONCEPT 

The  techniques  described -above  can  be  used  for 
an  Individual'  (slnqlo  sortie)  route  Dl'annlnq 
system. 

The  system  would  have  a  modulo  for  the  threat 
Information.  This  module  would  contain  a  high 
level  throat  object.  This  object  would  contain  the 
methods  and  orocedures  common  to  all  threats.  The 
modulo  would  also  contain  objects  for  each  threat 
tvoo.  The  threat  type  objects  would  Inherit 
characteristics  from  the  threat  object.  The  modulo 
would  contain  additional  objects  for  key  terrain 
features,  enemy  units,  weather,  or  terqots  that  may 
Influence  the  route  chosen.  These  objects  could  be 
similar  to  the  threat  objects;  containing 
orocedures/methods  for  navlqatlnq  around  them  cr 
throuqh  them.  The  basic  objects  would  be  an 
Intoqral  part  of  tho  system  when  used  In  any 
application.  The  Information  contained  In  these 
object  descriptions  would  chanqe  Infrequently  (l.e. 
when  now  threat  tvoes  are  discovered).  Instances 
of  the  various  objects  would  be  creatod  In  tho 
modulo  to  correspond  to  a  particular  tactical' 
situation.  As  the  Instance  were  created,  the 
Information  specific  to  that  Instance  would  be 
constructed.  This  may  Include  Information  such  as 
the  terrain  masking  at  selected  altitudes, 
communications  networks,  etc..  As  the  Instance  was 
created  tho  Instance  could  ensure  that  tho  oaths 
avoiding  It  were  flyable.  This  can  be  done  via  a 
set  of  heuristic  rules  and  a  knowledge  of  tho 
features  around  the  object.  The  object  Instances 
would  be  expected  to  chanqe  frequently  as  the 
tactical1  situation  evolved.  Since  most  of  the 
Information  resides  In  tho  object  description 
rather  than  the  Instance,  It  Is  relatively  easy  to 
change/modify  the  Instances.  The  name  of  each 
object  Instance  would  be  oosted  on  a  mao 
corresponding  tc  the  area  affected  bv  the  Instance. 
Thus,  olven  a  oartlcular  mao  location,  messages  can 
be  sent  to  all  objects  caoable  of  affecting  routes 
In  that  area.  The  objects  themselves  can  reoly 
giving  alternative  routing  possibilities. 

Another  module  in  the  routlnq  system  would 
contain  the  branch  and  bound  search  and  dynamic 
orogi  awnlnq  alqorlthm.  This  module  would  construct 
a  tree  tvoe  of  search;  bulldlnq  now  paths  on  the 
tree  as  new  objects  (threats)  are  encountered.  The 
alqorlthm  would  start  at  that  origin  point  for  the 


sortie  and  would  attempt  to  create  a  oath  toward 
the  objective  (tarqet).  As  object  were 
encountered,  the  alqorlthm  would  send  messaqes  to 
the  objects  requesting  alternative  oaths  In 
relation  to  the  object.  The  alternatives  would  be 
created  using  the  heuristic  system.  Thus  one 
alternative  might  be  to  follow  a  oath  around  the 
threat  at  the  current  altlfude/soeed;  another  ralqht 
be  to  jam  the  threat  and  continue  on  the  current 
course;  another  might  be  going  around  the  oath  at  a 
different  speed  (and  fuel  consumption);  etc.  The 
number  of  alternatives  created  deoends  on  the 
characteristics  of  the  heuristics,  but  the 
possibilities  are  virtually  endless  and  limited 
only  by  the  eventual  processing  time  to  evaluate 
the  alternatives.  As  each  object  answered  the 
messaqes  with  an  alternative  oath,  It  would  also 
orovlde  the  expected  lethality  and  distance  of  the 
oath.  The  ability  of  objects  to  send  messaqes  with 
each  other  olays  a  part  also.  If  a  clockwise  oath 
around  a  threat  encounters  another  threat,  that 
path  can  Immediately  be  modified  to  reflect  the 
additional  lethollty  of  golnq  throuqh  the  new 
threat.  In  addition  new  oaths  would  be  created  by 
the  new  threat.  For  oxamole,  a  counterclockwise 
oath  around  the  new  threat  and  throuqh  tho  current 
threat  would  be  created  and  a  clockwise  oath  around 
the  new  threat  would  be  created.  The  lethality  and 
distance  of  those  now  oaths  could  be  calculated 
Immediately  because  all  Information  on  both  threats 
could  be  determined  via  messaqes.  Therefore  the 
algorithm  could  evaluate  and  extend  the  best  route 
while  eliminating  dynamically  unflyeble  routes.  A 
key  consideration  In  this  orocess  Is  the  creation 
of  alternative  oaths  only  as  new  objects  ere 
encountered.  This  dramatically  lexers  the  search 
alternatives  to  compare.  Hlqh  oath  resolution  Is 
maintained  since  the  oath  generated  bv  tho  threat 
can  be  any  resolution  desired. 

A  final  key  modulo  In  the  routing  system  would 
contain  the  heuristic  rules  and  an  Inference  engine 
to  evaluate  the  rules.  Thus  module  would  Interact 
with  the  algorithm  described  above.  Althouqh  man^ 
heuristics  could  be  Incorporated,  It  may  be  best  to 
limit  the  heuristics  to  avoid  lonq  processing 
times. 

Additional  modules  would  be  needed  for  the 
man-machine  Interface,  Interface  with  threat  data 
base,  rule  base  editing,  and  object  edltlnq. 
Ideally  the  system  will  ultimately  automatically 
Interface  with  some  outside  source  for  threat 
uodato  and  will  allow  the  user  full  freedom  to 
revise  the  doctrlne/tactlcs  that  would  be  embedded 
In  the  rule  base. 

The  architecture  has  been  described  above  as 
an  Individual  route  Planner.  As  such,  It  offers 
significant  advantages  over  current  approaches. 
Not  only  would  tho  olanner  provide  a  slnqle 
altitude,  single  soeed  route;  It  would  also  be 
capable  of  suggesting  a  route  with  varylnq 
soeeds/al tltudes  olus  when  to  use  various  tactics 
(JammlnQ,  chaff,  etc.).  This  happens  because  tho 
search  alqorlthm  was  actually  creatlnq  and 
comparing  routes  with  legs  at  various 
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soeeds/artltudes/tactlcs.  The  ultimate  route 
recommended  would  represent  the  best  for  all 
factors  Involved.  More  Importantly,  oerhaos,  is 
the  caoabll  ttv  of  the  architecture  to  90  beyond 
single  sortie  olannlnq. 

Uslnq  the  same  basic  architecture  the  svstem 
could  recommend  corridors  to  saturate  defenses  or 
decent Ion  tactics.  It  also  can  recommend  where  to 
use  scarce  force  assets  such  as  standoff  jammers  or 
threat  suppression  systems.  This  can  be  done  by 
exololtlnq  the  dynamic  representation  of  the 
tnreats  In  the  Planner.  The  system  has  an  Inherent 
caoabll  Itv  to  evaluate  oaths  Involving  multiple 
sorties  with  the  threat  caoabllltles  chanqlnq 
aooroprlateiy.  A  kev  consideration  Is  that  the 
best  force  olan  Is  not  merely  the  sum  of 
Individually  optimum  dans.  Individual'  olannlrq 
precludes  the  synergistic  Impact  between  the 
sorties.  The  object-oriented  threat  representation 
allows  for  this  synerQlstlc  effect  to  be  orooerly 
accounted  for.  Thus  the  ol'anner  penalizes  the 
second  or  third  sortie  oast  a  threat  (due  to  a 
higher  threat  alert  state)  and  rewards  the 
saturation  of  a  threat  (due  to  02  or  munition 
I  Imitations). 

CURRENT  STATUS 

As  described  above.  RADC  developed  the 
Decision  Aid  for  Threat  Penetration  Analysis 
(OATPA)  ns  an  In-house  oroqram  orooramaed  In 
Zetal'iso  on  a  Symbolics  Processor.  OATPA  uses 
simple  heuristics  and  object-oriented  oroqrammlnq 
to  find  a  oath  throuqh  a  series  of  threats.  OATPA 
can  also  Indicate  where  to  best  use  limited 
Herd-kill  capabilities  aqalnst  threats.  However, 
OATPA  was  meant  only  to  demonstrate  the  concents 
and  It  does  not  Include  all  of  the  characteristics 
described  above.  OATPA  also  does  not  use  realistic 
threat  representations,  realistic  aircraft 
polynomials  or  provide  complete,  flveble  routes. 
Thus,  OATPA  shows  tho  value  of  the  basic  conceots. 
but  does  not  orove  tho  total  system  feasibility. 

RADC  Is  In  tho  orocess  of  starting  a  oroqram 
that  will  use  tho  techniques  described  here.  Plus 
realistic  data  to  prove  the  system  feasibility. 
This  oroqram,  Heuristic  Route  Optimization  (HERO), 
will  build  a  system  capable  of  olannlnq  slnqle  and 
multiple  sortie  routes.  The  routes  created  will  be 
a  function  of  all  the  factors  described  above.  In 
particular,  the  routes  will  develoo  routes  that 
apply  the  basic,  historic  principles  of  war. 

RECOWENDAT  IONS 

If  HERO  does  fully  prove  these  techniques,  the 
HERO  architecture  should  be  Included  In  both  unit 
level  olanners  and  In  theater  level  olanners.  It 
would  be  esoeclal ly  heloful  as  an  adjunct  to  a 
system  oerformlnq  Air  Tasking  Order  (ATO) 
generation  such  as  the  Tactical  Expert  Mission 
Planner  (TEMPLAR)  oroqram.  Whereas  TEMP  JAR 
orooerly  applies  the  necessary  constraints  for 
weapon  system  emolument,  HERO  can  provide  the 
I^qo  scale  tactics  fcr  that  employment.  That  Is, 
HERO  can  suqqest  entry/exit  corridors,  where  to  uS9 


EC  assets,  possible  deceotlon  tactics,  etc.  In 
summary  HERO  uses  new  orogrammlnq  concepts  that 
allow  historical  olannlnq  considerations 
(Principles  of  War)  to-be  introduced  into  automated 
systems. 
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ABSTRACT 


GENERIC  MEASURES 


Demonstrating  value  of  command  and 
control  systems  against  weapons  hardware 
has  been  a  particularly  difficult 
challenge  for  combat  modelers.  The 
article  contends  that  the  battlefield  is 
a  nonlinear  environment  which  the 
analytical  community  persists  in 
replicating  using  linear  means.  Even 
when  this  inconsistency  is  realized, 
modelers  often  read  nonlinearity  as 
"impossible  to  model  because  of  the 
scarcity  of  nonlinear  mathematical 
tools". 

In  response  to  this  notion,  the 
article  discusses  the  emerging  science  of 
complex  systems  and  the  potential  it 
offers  in  dealing  with  this  challenge. 
The  goals  are  to  articulate  exactly  what 
we  mean  when  we  describe  command  and 
control  as  a  "force  multiplier"  and  to 
use  this  in  permitting  us  to  choose 
between  the  more  effective  systems  - 
command  and  control  or  weapons  hardware. 

To  this  end,  the  article  explains 
how  to  effectively  simulate  command  and 
control  issues  using  notions  from  complex 
systems  theory  in  an  environment  of  real 
world  measures. 


INTRODUCTION 

How  does  one  measure  force 
multiplication?  The  answer  to  this 
question  is  fundamental  in  evaluating  the 
value  of  C3I  to  force  capability.  With 
it,  we  can  analyze  the  tradeoff  value  of 
C3I  systems  to  weapons  systems  or  address 
the  balance  of  manpower,  weapons  and 
control  within  force  structure.  Without 
it,  the  defense  community  will  continue 
to  depend  on  anecdotes  rather  than 
rigorous  analysis  in  relating  command, 
control,  communications,  and  intelligence 
programs  to  combat  outcomes. 


What  we  need  first  is  an  agreed  upon 
set  ot  measureables  for  command,  control, 
communications  and  intelligence.  The 
literature  is  packed  with  measures  and  we 
could  do  an  exhaustive  survey  of  these 
but  we  will  not.  For  brevity#  we  can 
hypothesize  that  there  are  four  which  are 
shown  in  the  following  figure. 


MEASUREABLES 
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FIGURE  1 

Messages  are  simply  communicated 
facts  which  can  be  measured  by  time  to 
receipt.  Messages  are  roost  relevant  to 
their  operational  need.  Those  without 
operational  need  are  also  relevant  since 
they  may  increase  the  noise  level, 
further  increasing  time  to  receipt  of  the 
former. 

Message  paths  are  routes  of 
information  from  one  node  to  the  next  and 
are  often  the  most  measured  rcisureaole 
since  measures  arc  performance 
specif ications  which  can  be  easily 
observed. 

Decisions  are  most  cortectl* 
measured  by  time  windows  of  opportunity, 
but  these  are  often  not  precisely  known. 
Therefore  we  are  dependent  on  the 
goodness  of  resource  application  a*  in 
observable  measure  of  their  effectiveness. 
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Neb  usage  rate  of  resources  is  the. 
best  overall  measureable,  linking  the 
combined  measures  of  messages,  paths  and 
decisions.  These  are  often  used  without 
linkage  to  information  flow,  causing  them 
to  be  misused. 

SYNERGISM 

Force  multiplication,  is  synonymous 
-to  syner.gism  -  the  idea  that  the  whole  is! 
larger  than  the  sum  of  its  parts.  This 
gives  us  a  "back  door"  key  to  quantify 
force  multiplication.'  We  can  measure 
capability  of  individual  weapons  systems 
by  physical  output.  These  can  "be  added* 
together  to  give  a  "the  sum  of  the  parts" 
measurement  of  force  capability.. 
Mathematically  this  is  the  relationship 
of  linearity. 


NONSYNERGISM 
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FIGURE  2 

Conversely#  it  must  follow  that  "larger 
(or  smaller)  than  the  sum"  is 
nonlinearity. 


SYNERGISM 
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‘Figure  '3  shows  how  we  can  derive  a 
definition  of  nonlinearity  ..where  the 
factor  "6M  defines  mathematical 
parameters  for  a  force  multiplier,  (i.e. 
If  "b"  is  greater  than  "a"  then  the 
measure  of  force  is  greater  than  the  sum 
of  its  parts.)  What  remains  is  first  to 
validate  this  concept  against  other 
notions  of  force  multiplication#*  then  we 
need  methods  to  calculate  It  if  it  is  to 
be  useful. 

OPERATIONAL  IMPERATIVES 

The  issue  of  nonlinearity  in  combat 
is  is  embedded  both  in  our  doctrine  and 
in  our  investment  strategy  each  of  which 
support  the  objective  of  defeating  a 
larger  force.  The  doctrine  is  based  on 
historical  evidence  and  the  investment 
strategy  is  based  on  a  notion  that  our 
nation  has  a  technology  to  manage 
information  on  the  battlefield  in  such  a 
way  that  it  can  make  a  dramatic 
difference. 

Focus  upon  operational  concepts  of 
combat.  Clausewitz  discussed  three  which 
may  interest  us.1  These  are  center  of 
gravity,  lines  of  operation  and 
culminating  points. 

The  center  of  gravity  is  defined  as 
"the  hub  of  all  power  and  movement#  on 
which  everything  depends."2  U  combat 
were  seen  as  a  biological  system#  it 
could  be  characterized  as  the  most  vital 
of  organs  in  a  most  complex  organism.  If 
it  were  damaged#  imbalances  to  the  entire 
structure  would  result  in  a  cascading 
deterioration  in  cohesion  and 
effectiveness  of  the  force  certainly 
leaving  the  force  vulnerable  to  further 
damage  if  not  resulting  in  its  complete 
destruction.  This  is  nonlinearity  and  is 
a  property  we  must  capture  in  combat 
models  if  we  ate  to  adhere  to  doctrine 
which  states  that  our  forces  can  defeat 
numerically  larger  forces.  The  doctrine 
is  supported  by  an  investment  strategy 

which  premises  using  high  technology  to 
create  force  Multifile  re*  a*  the 
tactical  level,  the  center  of  or,»vxty 

could  be  x  cruoi^i  'tec*  of  terrain,  a*- 
the  operational  iev*-l#  it  could  be  the 
boundary  between  two  ~i  it*  -onbat 

formations,  a  vital  command  and  control 
center,  or  perhaps  its  logistical  oase  or 
lines  of  conmnnication.  At  the  strategic 
level,  the  center  of  gravity  could  be  a 
major  economic  resource  locality# 

strategic  lift  or  a  vital  put  of  the 
homeland. 3 


FIGURE  3 
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Lines  of  operation,  connect  the  force 
base  or  bases  of  operation  of  a  fprce 
with  its  operational  objective.  A  force 
is  said  to  be  operating  oh  interior  lines, 
when  its  operation's  diverge  fro©  a' 
central  point  and  on  exterior  lines  when 
its  operations  converge*  on  a  central 
point.  Interior  lines  benefit  a  weaker 
force  by  val lowing  it  to  shift  the  main 
effort  laterally  more  rapidly  than  fhe 
enemy  and  this  is  another  example  of 
nonlinearity. 

Attacking  forces  consume  energy.  * 
Unless  strategically  decisive,  every- 
offensive  operation  therefore  will  sooner 
or  later  reach  a  point  where  the  strength 
of  the  attacker  ho  longer  exceeds  that  of 
the  defender,  and  beyond  which  continued 
offensive  operations  therefore  risk 
overextension,  counterattack,  and 
defeat.  In  operational  theory,,  this 
point  is  called  the  culminating  point. 
The  art  of  attack  at  all  levels  is  to 
achieve  decisive  objectives  before  the 
culminating  point  is  reached. 
Conversely,  the  art  of  defense  is  to 
hasten^  the  culmination  of  attack, 
recognize  its  advent,  and  be  prepared  to 
go  over  to  the  the  offense  when  it 
arrives.4  This  also  is  nonlinearity. 

Use  of  nonlinearity  (particularly 
catastrophic  affects)  as  a  battlefield 
concept  requires  extensive  knowledge  of 
the  enemy's  organizational  makeup,- 
operational  patterns,  and  physical  and 
Psychological  strengths.  It  also 
requires  an  appreciation  for  the  dynamic 
nature  of  the  operational  concept,  to 
include  changes  such  as  a  major  shift  in 
operational  direction,  the  replacement  of 
a  key  commander,  or  the  fielding  of  new 
units  or  weaponry.  Clearly  there  are 
implications  to  be  considered  in  both  the 
art  and  science  of  operational  design. 
Our  interest,  however,  will  be  limited  to 
the  science. 


OPERATIONAL  CONCEPTS 


FIGURE  4 


**  The  idea  of  operational  concepts 
being,  nonlinear  is  all  well  and-  good  but 
eventually,  we  need  to  face  up  to  the 
reality  of  relating  these  concepts  to 
technically  specific  procedures.  Our 
emphasis  will  be  on  the  interaction  of 
information  with  operations.  Indeed, 
this  is  the  essence  of  command  and 
control. 

.  f 

COMBAT  MODELS 

Consider  how  information  is  modeled 
in  most  combat  models  now. 
Sireplistxcally,  they  have  scenarios  which 
provide  pre-scripted  messages  to  a 
weapons  allocations  module  which  drives  a 
combat  effectiveness  module  which 
measures  success  or  failure  in  terms  of 
attrition,  force  ratio,  or  FLOT 
movement.  Such  models  ignore  the  effect 
of  message  processing  to  include  the  role 
of  a  decision  makes.  They  fail  to 
consider  the  degradation  of  weapons 
effectiveness  because  of  maneuver.  There 
is  no  uncertainty  and  fire  fights  are 
treated  as  continuous  functions.  Such 
models  are  adequate  for  the  trench 
warfare  of  World  War  I,  but  unacceptable 
for  modern  warfare. 
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FIGURE  5 

In  order  to  correct  the  paradigm  we 
need  to  insert  a  module  which  converts 
information  from  the  scenario  to  messages 
which  are  processed  into  decisions 
allocating  resources  with  the  intent  of 
providing  these  at  the  right  time  and 
place  for  decisive  outcome  on  the 
battlefield.  it  Is  the  effect  of 
feedback  and  feedforward  loops 
constrained  by  time  opportunities  that 
causes  that  complex  behavior  of  the 
battlefield  which  interests  us. 


05 


FIGURE  6 


One  needs  to  conceive,,  'ot  how 
information  vill  be  used  in  order  to 
envision  any  concept  of  force 
cultiplication.  The  warfighter  has  the 
operational  challenge  of  controlling  the 
battlefield.  He  follows  the  paradigm  of 
seeing  the  environment,  deciding  on  a 
coarse  of  action,  than  ix?  lexer,  ting 
action,  within  each  of  these  processes 
there  cay  fee  sub-processes,  bat  core 
isportantly,  the  paradige  is  repeated  in 
discrete  time  steps,  since  the  user  is  in 
coepetitio^  with  at  least  one'  opponent 
vno  is  following  a  similar  process, 
albeit  perhaps  following  a  different 
strategy.  Therefore,  tine  is  a  critical 
eleaent  of  the  paradign  and  .the 
ccspetiticn  drives  the  dynamics  of  the 
process. 

Replication  of  this  paradiga  on  a 
cocputer  to  gain  a  'competitive  edge  aay 
cause  counterintuitive  results.  .  This 
follows  froo  the  cceplexity  of  the  high 
tech  environcent. 

What  is  cceplex^  One  sea.arccent  of 
complexity  is  the  oaount  of  inforr^tion 
an  observer  requires  to  describe  the 
object  of  complexity  -  the  environment  or 
a  sysjrea.  Since  this  information 
requi resent  may  exceed  what  can  be  put  in 
code  for  a  computer,  discrepancies 
between  the  cocputer *s  and  the  decision 
maker’s  view  the  world  naturally 
exist.  While  the  error  nay  be  snail  in 
discrete  calculations,  continuous 
calculations  which  occur  from  freque  x 
interation,  say  cause  an  explosion  in  the 
size  of  successive  errors.  Other 
measurements  include  predictability 
(probability  ot  selecting  correct  future 
events),  entropy  (a  neasurenent  of 
disorder  created  by  trying  to  order  other 
issues),  3r.d  computability  (the  amount  of 
confutations  or  time  necessary  to  answer 
Kt*e  observer*  questions). 


Another  1  ssce  Vi  complexity  is  the 
importance  sf  perceptions  to,  hsmas 
observers  is  casting  decisiccs.  As  -Jase 
Asstea  csre  sard,  "Sel«*cs,  very  se idem, 
does  complete  tr>t*s  belong  t©  asy  hcaas 
disclose  re;  seldom  can  it  t»pc«n  that 
Kwetfcirg  is  sot  a  little  disgeised,  or  a 
little  mistaken — 

Sever  do  decision  makers  have  perfect 
information.  It  is  always  xm complete 
against  sene  measurement.  Its 

incbcplet  er.ess  always  involves  a  time 
"factor  -  it  is  always  late.  Invariably 
we  try  to  fix  these  deficiencies  by 
providing  core  data  quicker,  only  to  be 
faced  with  the  fusion  dilemma  -  creating 
core  data  bat  less  infornaticn. 

The  solution  to  this  dilescta  cay 
coee  froc  shifting  ff-ecs.  People  who 
design  inf creation  systems  see*  to 
measure  improvement  by  the  somber  of  bits 
acd  bytes  cf  “data  which  can  be 
communicated  or  stored  relative  to  sc ce 
operation.  Operators  focss  on  plans  ar?d 
resources.  Houeye-.  fefe  focus  os  the 
interaction  betVhr?:  operations  and 

information,  J*avjsa  oct  _  the  eleaent  «»£ 
competition  and  the  of  tine  ;s  the 

process.  _ 

Constructs  to  illustrate  the 
dynamics  of  chaos,  Edvard  Loreotz’s 
classical  chaotic  waterwneel9  provides 
ap  excellent  anclcg  of  the  relation 
between  information  znd  operations. 


WHEEL  OF  COW  FUSION 
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In  this  rcdel,  inscription  s 

simlar  to  the  flow  of  water  and 

operations  are  ri-slar  to  the  *r.rk*r,gK  of 
th"  wheel.  The  wheel  ic  des.gnt  J  to  th*at 
backets  fill  up  fee-0  the  flow  'f  w>vr 
and  their  weight  dn/ef  revolutions  or*  a 
descent  to  the  tot * on  of  tfcf  wheel. 

In  order  that  the  drag  of  the 

tuckets  on  their  accent  oo  not  exceed  the 
drive,  they  have  holes  drilled 

bettor  to  to  drajr.  From 

this  design  •**  cm  ot  erve  thrr.  *.*<*<* 
categorize^  t/  th*  flow  T^e  ■'■■f  tte 

waterfall. 


la  the  first  esse,  water  will  drain 
roe  the  backets  faster  than  they  fill, 
consequently  the  wheel  will  aot  revolve  - 
-  it  will  not  be  dynamic,  *  illustrating  a 
decaying  qsality  in 

the  importance  of  infornation  in  oar 
analogy.  In  the  second  case, (there  is 
some  rate  of  wat»c  fall  where  the  flow 
rate  will  ex  et  ‘he  drain  -ate  and 
“normal'  dynaa  6  ’ll  occur.  In  the 
case  of  infornatio  re  need  a  sufficient 
ar.-„-t  for  dy see,  ■  to  nornally  occ-r, 
introducing  a  nee  concept  which  we  n 
call  essentiality.  In  the  final  case,  we 
see  revolution  speeds  so  high  that 
backets  do  not-  drain  fast  enough. 
Consequently',  the  drag  will  exceed  the 
drtve  and  the  wheel  will  ’reverse  itself. 
Further,  the  wheel  will  continue  to 
reverse  itself  in  nonperiodic  ways  (i.e. 
unpredictable).  This  is  nonlinearity. and 
if  ®ay  well  describe  what  we  have  in  mind 
when  we  say  “force  nultiplicity". 
Significant  is  that  while  this 
nonlinearity  defies  intuition,  it  can  be 
sodeled  without  too  nuch  difficulty. 

Linearity  is  nornal  business  for  our 
analytical  culture.  It  suits  our  hunan 
intuition  since  it  eeans  that  we  can 
describe  events  in  terns  of  a  succession 
ot  activities  where  outout  is 
proportional  to  input.  Ke  '  have  a 
tendency  to  believe  that  if  a  problem  is 
not  linear,  it  cannot  be  solved. 

But  linearity  is  often  the  wrong 
approach  in  eodeling  coupler  probleos 
because  it'  involves  a  finite  nuaber  of 
fnoependent  variables  and  interactions. 
Linear  problem  can  be  cub-divided  into-- 
sob-problem  to  be  sub-optiaized  into 
solutions  which  can  be  sunned  to  a  global 
solution.  Further,  these  solutions  are 
tine  reversible, 

Cccplex  probleos  often  involve 
unUnited  infornation  where  interactions 
and  outputs  are  often  disproportions!  to 
inputs.  Such  probleos  are  not  reducible 
in  that  sub-probleci  cannot  be  solved 
within  thesselves.  They  requite  the 
output  of  other  subrprobiess  on  a  -real 
tioe  basis  for  correct  solution. 
Therefore,  sub-optiaal  solutions  cannot 
be  related  to  a  .global  solution.  It 
lccoecs  clear  that  the  issue  evolving  is 
how  to  solve  th,e  nonlinear  description  of 
corsbat*.  % 


««“  simulation 

thri  *  *»**«•  o£  llDk* 

thru  which  we usages  are  passed  and  nodes 

information  t,  processed. 
i|«d«*»*d  information  results  in 
£«  tbe  allocation  of 
resources.  The  tine  value  of  modelioq 

?iZZsI'iT'rCr,  tiae  wrtuni^ 

calT  1]Ltbe  ”loe  of  '*»*  we 

oil  comna  *o &  control.  Scenarios 

th«  script  for  the  initratjc:  cf 

CblJT  thew11***  *'*  *DC*t*d  tht<>  nodes 
***  synthesised  into 
information  which  is  assessed,  decided 

passed  thru  linrs  to  other  nodes  for 
lihw1Ben-»Kf‘rOCe**lD9-  c*rtain  nodes  tie 
(CAS)  I“corc**  ‘'Jose  air  support 

Othfi'  helicopters^  logistics,  artillery, 
TOif-c  f  1Ch  c?"  h*  directed  to 
specif.c  points  on  the  battlefield  to 

°P?rations'  wh’rt  results  ere 
neasured  as  in  current  models.  In  this 
***  smulation,  messages  can  be  lost 
la,e,  resulting  in  wrong  perceptions 
and  consequently  wrong  decisions. 

.  .  *"e  ,  sinulat’iijn  described  above 

-Whei  a®  ,fecitaek  an«3  feedforward  loops. 

/esi9n*d  “ith  sufficient  detail  to 
include  single  sensor  nodes  and  Red  side 
information  flew  ir  tecones a  couolez 
system  in  itself.  The  challenge  of 
exploiting  the  power  of  such  a  node' 
IaJ“nSte«s  des^ibi,:5  "<>»Hr.earity  *„ 


COMMAND  FEEDFORWARD  PLANNING 


CONTROL  FEEDBACK  DECIDE 

_  ACT 


INFORMATION  FLOW  ANALYSIS 

One  way  to  succeed  in  this  endeavor 
is  to  incorporate  infornation  flow 
-analyses  in  conbat  codels. '  Current 
nodels  feature  a  scenario  which  drives 
soco  sort  of  .ennbat  outcome  nodule'  thru 
physical  perfornance  factors  of  weapons 
syhtens,  often  „by  neasuring  succecs  by 
conparing  attrition,  FLOT  noveneht  or 
conbat  ratios,  - 


Nonlinearity  occurs  when  infornation 
is  fedback  or  fedforuard  in  the  systea 
faster  than  a  hunan  who  thinks  he  is 
control  can  process  that  infornation  and 
act  upon  it. 
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Kfcat  information  flow  analysis  does 
£or  us  io  quantifying  force 
•altiolication  is.  give  us  data- points  for  , 
the  value  cf  force  capability  against 
whatever  force  mix  we  wish  to  consider. 
Given  these  data  points  we  need  only 
substitute  then  into  the  relationship 
shewn  in  figure  3  to  calculate  "b  -  the 
force  Bultiplier- 


nohlihear  methods 

While  an  information  flow  analysis 
nay  give  us  a  measurement  of  force 
multiplication  without  dealing  directly 
with  the  computational  challenges  o* 
nonlinearity#  a  word  about  breakthoughs 
in  this  area  is  appropriate. 

In  order  to  correct  the  deficiency 
of  using  Lanchester  first  order  linear 
differential  equations  of  one  variable 
'tine)  to  measure  the  change  of  resources 
on  the  battlefield,  a  new  analytic  ecdel 
based  on  coupled  nonlinear  partial 
differential  equations  has  been  proposed 
to  describe  the  temporal  and  spatial 
evolution  of  opposing  forces  in 
combat.1  These  have  been  generalized 
further  to  include  a  stochastic  term 
permitting  the  value  of  randoo  effects  to 
be  considered. 

The  Joint  Staff  is  currently 
sponsoring  work  to  develop  mathematical 
raodels  using  cellular  automata. *  This 
approach  features  a  modeling  environment 
in  which  complex  phenomena  cab  be 
generated  from  very  simple  and 
computationally  efficient  interaction 
rules.  In  short,  it  is  a  "top-down 
approich  where  the  model  operates  as  a 
system  rather  than  as  a  sura  of  pieces. 

One  area  of  focus  with  cellular 
automata  or  any  nonlinear  system  is  on 
the  set  oi  attractors  which  bound  the 
dynamical  "flow"  of  the  systen.  \ 
particularly  interesting  set  of 
attractors  are  known  as  fractals  for 
"fractionally  dimensioned". 


Fractal*  can  be  thought  ucf  »* 
na  tote's  attractor*,  sine*;  they  •PP*-***0 

fr«g»ntlf  in 

bate  recently  gained  none  publicity  lor 
data  compression  as  a  high 
alternative  for  -facsimile  bat  they  ns.e 
other  Interesting  properties.  Ooe  sacb 
property  is-  selfr«i«ilarity  which  rs 
interesting  to  conaand  aod  control 
resvrarch  sine*'  the  decision  cycle  tends 
to  be  self-sioUar  at  different  level*  of 
organizational  hierarchy.  The  dimension 
of  a  fractal  is  another  property  of 
interest.  The  valu^  oi  this  property  is 
as  an  indicator  of  ^tbe  relative  chaos  of 
the  -  systen  they  describe.  ..  Conversely 
th-y  nay  be  a  good  measure  of  control  in 
a  systai.  Finally#  it  'has  been  ^howsi 
that  data  relating  to  fractals  tends  to 
be  distributed  according  to  the  ?ower 
LafC  -Shi*'*'  is  a  useful  fact  in 
statistically  analyzing  fractal  structure- 
Anotber  interesting  field  of 
nonlinear  stidy  is  catastrophe  theory 
which  by  its  name’  suggests  sort  of  an 
ultimate  view  of-  nonlinearity-  Work  dene 
in  this  area  b?s  led  to  some  rudimentary 
decision  aids  in  the  areas  of  coscand 'and 
control  and  intelligence  analysis- A 
most  usefur  result  of  this  work  is  »n 
reducing  a  nunber  of  local  vatiabi.cs, 
largely  irrelevant  to  a  particular 
problem  to  a  few  global  relevant  ones. 

-  SUMMARY 


In  sumoary,  what  we  have  done  in 
this  article  is  suggest  that  what  we  mean 
when  we  mention  force  multiplication  is 
actually  nonlinearity.  On  one  hand  we 
observed  that  war,  thru  its  cooplexity  is 
nonlinear.  This  observation  is  embedded 
historically  in  concepts  of  operational 
art-  On  the  other  hand,  we  noted  that  we 
traditionally  have  modeled  war  as  a 
linear,  deterministic  forn  and  by  so 
doing  neglect  those  properties  which  are 
cost  relevant  to  the  idea  of  force 
nultiplication.  Finally,  we  introduced 
the  concept  of  information  flow  analysis 
to  simulate  the  role  of  information  and 
decisions  on  the  battlefield  and  showed 
how  results  from  "uch  simulations  would 
permit  us  to  actually  calculate  force 
multiplication  for  specified  force  mx. 

FOOTNOTES: 


1  Clausewitz,  On  War 

2  Clausewitz,  On  ,<ar 

3  FH  100-5,  p  180. 

A  Ibid. ,  pp.  181-182. 

5  Jane  Austen,  Emma  C 1916 J #  Edited  by 
Stephan  H.  Parrish,  p42«),  **■*».  Norton  ?• 
Company  Inc.,  New  York  1972. 


63 


«  Eduard  Lorentx,  "Deterninistic 
nonperiodic  Flow,"  Joornnl  of  A tho spheric 
Sciences  20,  (1903)  pp  130-41. 

7  Protopopescu,  X-T-  Santoro,  i.r 

Dockery,  B.L.  cox  and  J.M.  Barnen, 
Conbat  Modeling  With  Partial  Differential 
Equations;. QgjrL/TM-10436,  Mon  1987; 

8  Dr.  A.E.S.  Woodcock,  Besearch  into? 
the  Applicability  of  Cellular  Automata 
Mathenatits-'  to  the  Modeling  of  '  Conbat 
with  Enfaedded  .-C2,  Interin  Technical 
■eport,  HR-87-TA-00,  22  February  1988. 


9  Dr.  Alexander  E.R.  Woodcock, 
Decision  Aids  Based  on  Catastrophe  Theory 
■Manifolds,  Final  Technical'  Beport, 
W8-80-LP-00,  22-  Sep  1987.  ' 


THE  ELECTRONIC  WORKBENCH:  AN  ENVIRONMENT  FOR 

TESTING  THEORIES  AND  MODELS  OF  COMBAT 


Dr.  Alexander  E.  R.  Woodcock 1--3-4 


Chief  Scientist  Synecucs  Corporation, 
1W00  Eaton  Place.  Fairfax.  Virginia  22030 


abstract 


The  electronic  workbench  is  a  prototype 
computer-based  interactive  graphics  system  which  can  be 
used  by  miliut  /  analysts  and  decision- makrjs  for  £onibat 
modeling,  situation  assessment,  decision-making,  and  battle 
management  rnvoh  ing  the  application  of  tactical  command 
and  control  (C2).  Combat  parameters i  and  decision  threshold 
conditions  arc  selected  by  the  user,  and  time-dependent 
changes  in  adversarial  force  strengths  are  calculated  by  the 
system.  Computed  combat  outcomes  arc  displayed  m 
conjunction  with  the  decision. space,  a  structure  whose 
properties  arc  derived  in  part  from  catastrophe  theory. 

1.  ELECTRONIC  WORKBENCH  FACILITIES 


The  electronic  workbench  is  based  on  research  in 
mathematical  modeling,  cognitive  engineering,  computer 
graphics,  and  data  acqusition  (Figure  1).  It  can  support  a 
wide  range  of  uscr-sclccted  combat  modeling  and  analysis 
activities, aimed  at  determining  combat  outcomes  and 
revealing  those  circumstances  under  which  non-linear  and’or 
cojr.ter*intuitive  behavior  can  occur.  If  not  identified 
prooerly,  such  non-linear  behavior  can  lead  to  highly 
misleading  and  even  totally  incorrect  analyses  of  a  situation 
of  interest,  Tnc  workbench  makes  it  possible  to  undertake  a 
range  of  “thought  experiments"  i?  order  to  explore 
possibilities  and  suggest  new'  approaches  to  solving  a  range 
of  different  types  of  problems  in  a  computer  environment  that 
makes  minimal  mathematical  demands  on  its  users.  The 
workbench  can  also  serve  as  a  testbed  for  developing  and 
testing  theories  and  models  of  combat  and  as  a  prototype  for 
i  fully  operational,  combaf.jclatt  I.  decision-aiding  I  icihty. 


U  MCNU-DRI VE'f  SELECTION 


The  electronic  workbench  system  uses  a  menu  facility 
and  a  series  of  windows  to  permit  access  to  a  selection  of 
combat  models  and  decision  rules  and  thresholds  involving 
combat  termination.  They  also  permit  die  input  of  paramejt  r 
values  representing  specific  combat  attrition  and 
reinforcement  activities  and  processes.  Available  choices 
include: 


2.  The  initial  troop  strengths, 

3.  The  nature  of  the  combat  attrition  process, 
which  can  include  the  following:  aimed  fire¬ 
power,  area  firepower,  and  special  (smart) 
weapons  firepower  (Woodcock  and  Dockery 
10S8>. 

4.  The  kill  uncertainty  of  each  force. 

5.  The  rates  of  reinforcement. 


1 ,  The  names  of  the  adversaries  (such  as  “blue" 
and  “red"  forces). 


6.  The  rcqjircd  durat  n  »*1  the  simulation 
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Force  strength  computations  involving  deterministic, 
stochastic,  and  probabilistic  models  are  made  available  by 
menu-based  selection,  as  described  below.  During  use  of  the 
electronic  workbench,  tune-dependent,  adversarial-force' 
strength  values  are  computed  on  the  basis  of  the  input 
information.  Results  of  this  computation  are  presented  on 
the  decision  space  graphics  display.  Use  of  these  different 
combat  models  and  a  series  of  decision  strategies  can  provide 
an  enhanced  understanding  of  the  nature  of  the  combat 
process  and  tbe  role  played  by  command  and  control  in 
determining  combat  outcomes. 

12  COMBATMODELS 


The  electronic  workbench  permits  selection  of  up  to 
three  Lancbester-typc  attrition  models  (modern  warfare,  area 
fire,  and  smart  weapons  fire)  and  associated  attrition  and 
reinforcement  coefficients  to  compute  adversarial  force 
strengths  as  a  function  of  time  (Lanchestcr,  1914;  Taylor 
1983;  and  Woodcock  and  Dockery,  1938).  Both 
deterministic  and  stochastic  versions  of  the  Lanchestcr-type 
models  are  available  to  the  user  of  the  workbench  and  the 
results  obtained  from  cither  of  these  versions  are  available  on 
demand. 


Modern  Warfare:  Lanchcster-type  modem 
warfare  (or  aimed  firepower)  is  described  by 

equations  (1)  and  (2). 

”  -  Jmw> 

(1) 

dy/dt  =  -  bmwx 

(2) 

where  x  and  y  are  the  strengths  of  the  opposing 
forces  and  amw  and  bmw  are  the  modem 
warfare  attrition  coefficients.  Stochastic  versions , 
of  the  modem  warfare  attrition  equations  can  be 
written  in  the  following  manner 

dx  °  *  amw  y  dt  +  *1  (3) 

dy  *  *  bmwxdt  +  cj  dw2  (4) 

where  (he  terms  (cj  dwj)  and  (c2  dw2)  describe 
the  stochastic  component  of  the  modem  warfare 
attrition  process. 

2.  Area  Fire:  Area  (or  unarmed)  fire  is  represented 
by  equations  (5)  and  (6). 

dx/dt  *  -  aafxy  (5) 

dy/dt  *  -  bafxy  (6) 

where  x  and  y  are  the  strengths  of  the  opposing 
forces  and  aaf  and  baf  are  the  area  fire  attrition 
coefficients.  Stochastic  versions  of  the  area  fire 
attrition  equations  can  be  written  as: 

dx  b  -  a^xydt  +  ci  dwj  (7) 

dy  »  -  bafxydt  +  e2  dw2  (8) 


where  the  terms  (cj  dwj)  and  (c2  dw^  describe 
the  sfochastk;  component  of  the  area  fire  attrition 
process. 

3.  Smart  Weapons  Firepower:  The  model  of  smart 
weapons  (or  special)  firepower  is  based  on  the 
assumption  that  the  rale  of  attrition  for  one  force 
is  proportional  to  the  square  of  the  strength  of  its 
adversary  (Woodcock  and  Dockery  1988). 
Deterministic  smart  weapons  attrition  is 
represented  by  equations  (9)  and  (10): 


dx/dt  **  -  ajWy2 

(9) 

dy/dt  *  -  bswx2 

(10) 

where  x  and  y  arc  the  strengths  of  the  opposing 
forces  and  a^w  and  bsw  are  the  smart  weapons 
attrition  coefficients.  Stochastic  versions  of  the 
smart  weapons  fire  attrition  equations  can  be 
written  as: 

dx  a  -  asw)-2dt  +  c\  dwj  (11) 

dy  a  -  bswx^dt  +  e2  dw2  (12) 

where  the  terms  (cj  dwj)  and  (e2  dw2)  describe 
the  stochastic  component  of  the  smart  weapons 
attrition  process. 


13  THE  DECISION*  SPACE 


The  electronic  workbench  provides  a  framework  to 
support  the  activities  of  analysts  and  decision-makers 
through  the  graphical  display  of  system  inputs  and  outputs  in 
relation  to  a  construct  called  the  decision  space  (Figure  2). 
The  initial  force  ratios  and  changes  in  these  values  caused  by 
attrition  and  reinforcement  described  by  the  selected  combat 
models  arc  displayed  within  the  decision  space  window.  The 
decision  space  also  displays  a  series  of  fines  drawn  to 
represent  the  selected  combat-termination,  decision  rules  and 
thresholds. 

The  pattern  of  movement  on  the  decision  space 
represents  the  /'ebb  and  flow  of  combat”  and  crossing  a 
decision  line  indicates  necessary  conditions  for  combat 
termination.  Visual  inspection  of  the  pattern  of  combat 
provided  by  the  decision  space  can  alert  the  user  to  the  need 
to  modify  force  deployment  strategics  or  to  select  different 
decision  methods  and/or  thresholds,  for  example. 

The  decision  space  is  based  on  a  version  of  the  control 
space  of  catastrophe  theory  (Poston  and  Stewart,  1978; 
Thom,  1975;  Woodcock  and  Davis,  1978;  Woodcock  and 
Poston,  1974;  Zeeman,  1977;  and  Zeeman  and  Trotman, 
1976).  This  space  provides  a  representation  of  the  strength 
of  two  opposing  (blue  and  red)  forces  in  terms  of  a  position 
cn  a  plane  specified  with  reference  to  the  two  conflicting 
factor  axes  of  a  catastrophe  function. 

Catastrophe  theory  has  been  used  to  develop  models  of 
several  military'  systems  and  Us  use  in  the  workbench  is  a 
logical  extension  of  these  activities.  Two-  «md 
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four-conirol-facior  m-xlds  of  military  behavior,  which  an: 
bs^cd  on  the  cusp  and  butterfly  catastrophes,  respectively, 
have  been  developed  by  Woodcock  and  Dockery  (984 
1988).  Follow  :g  ibis  work.  Dockery  and  Chiam  (1986) 
have  used  a'statistical  program  developed  by  Cobb  (U/»> 
1981 . 1983)  to  fit  simulated  combat  data  to  the  suifaceof  the 
cusp  catastrophe  manifold.  Woodcock,  J 82x1 

Cobb  (1988)  and  Langendorf  and  Woodcock  (1988)  have 
developed  a  new  methodology,  based  on  statistical 
catastrophe  theory  (Cobb.  1978, 1981. 198a)toanal>?oand 
interpret  the  perceptions  of  military  threat  by  intelligence 
analysts. 


U  JECISIONT  RULES 

The  electronic  workbench  supports  the  selection  and 
graphical  display  of  different  types  of  ^cision^lcs  and 
thresholds  to  reflect  different  types  of  user-defi ned  combat 
strategics  and  dogmas.  Three  baste  classes  of  ^(called 
absolute,  proportional,  and  catastrophe  decision  rules)  are 
available, 

I  Absolute  decision  rules  specify  that  combat 
termination  will  occur  after  a  given  percentage 
reduction  in  the  strength  of  one  force  (the  blue 
force,  for  example)  without  reference  to  the 
changes  in  the  strength  of  the  opposing  t  red  ) 
force  and  thus  are  "onc-s  Jed  decision  rule' 
(Figure  2a). 


2.  Proportional  decision  rules  specif)  that  combat 

termination  would  take  place  w  hen  the  rauo  of  the 
opposing  (’‘blue"  and  “red”)  forces  reaches  a 
particular  value  and  thus  are  “two- sided  decision 
roles”  (figure  2a).  * 

3.  Catastrophe  decision  rules  capture  features  ofboih 
absolute  and  proportional  decision  roles  and  are 
represented  graphically  by  a  line  which  is 
topologically  equivalent  in  shape  to  the  shape  ot 
the  bifurcation  set  of  the  cusp  catusiroj  te  (1  igurc 
2b). 


Absolute,  proportional,  and  catastrophe  decision 
methods  and  numerical  thresholds  for  combauerm.nat.on  for 
each  of  two  (“blue"  and  “red")  adversarial  forces  can  be 
selected.  Similar  decision  rules  for.both  force  combat 

termination  conditions  (such  as:  eatastropbc-catasirophc 
absolute-absolute,  or  proportional-proportional)  reflect  the 

use  of  similar  combat  strategies  or  dogmas ,  by  the  blue  mid 
“red"  force  decision-makers.  However,  selection  of  different 
rales  (proportional-catastrophe;  absolute-catastrop..e:  or 
catastrophe-absolute,  for  example)  reflects  the  use  of 
different  strategies  by  these  decision-makers. 

Selection  of  particular  sets  of  decision  rales  can  has  c  a 
profound  impact  on  the  nature  of  the  combat  outcome,  as  we 
Sill  nosv  demonstrate.  The  Initial  Forccs-Iypc  of  display 
(sec  below)  represents  the  initial  and  final  combat  conditions 
as  a  point  and  an  ellipse,  respectively.  The  lengths  of  the 
axes  of  the  ellipse  represent  the  degree  of  kill  uncertainly  fo. 
the  two  forces  so  that  the  ellipse  can  be  thought  of  as  a  form 
of  “error  ellipse"  (Figure  3).  We  will  refer  to  the  ellipse :  as 
the  kill  uncertainty  ellipse.  The  likelihood  that  a  red  force 
decision-maker,  for  example,  w  ould  recommend  brcakm„ 
off  an  engagement  is  proportional  to  the  ratio  of  the  areas  A 
and  B  (area  A  /  area  B)  on  cither  side  of  the  re.  force 
d-.-I'ion  line.  Relatively  larger  values  of  ibis  ratio  reflect  a 
higher  likelihood  of  combat  tenr  ration 


In  Figure  4a,  both  dccision-m  hsis  bass  'I  '"fit 
:al.w(y>hc-typc  decision  rules  while  m  .  .guiss  4b  and  4. 
both  of  them  have  chosen  absolute-type  and  proiyrlionah 
type  rules,  respectively  The  information  presented  in  these 
figures  suggests  that  the  choice  of  catastrophe-type  dccisi  n 
rales  by  both  forces,  would  produce  combat  Itamin^ron 

likelihood  values  for  the  red  and  blue  forces  of  aboul Thirty 
and  zero  percem,  respeclively  (Figure  431  By  contrast  with 
absolute-type  rales,  the  likelihood  of  combat  termination  or 
the  red  forces  would  increase  t-  “’me  sesenty  percent  w  hits 
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remaining  ai  zero  percent  for  the  blue  forces  (Figure  4b). 
With  proportional  rales,  the  likelihood  of  combat  termination 
is  some  twenty-  and  zero-percent  for  the  red  and  blue  forces, 
respectively  (Figure  4c). 


F>iKx-i  Similar  Decmoa  Rules 


^  The’  impact  of  selecting  a  mixture  of  combat 
termination  decision  rales  is  shown  in  Figure  5.  Blue  uses  a 
catastrophe  rule  and  red  an  absolute  rale  in  Figure  5a  while 
blue  uses  an  absolute  rule  and  red  a  catastrophe  rale  in 
Figure  5b.  Selection  of  such  mixed  combat  termination  rales 
can  reflect  the  adoption  of  different  combat  termination 
dogmasby  the  blue  and  red  forces  and  it  is  obvious  from  an 
inspection  of  Figure  5  that  such  differences  in 
decision-making  methods  can  lead  to  marked  differences  m 
combat  outcomes. 


2.  USING  THE  ELECTRONIC  WORKBENCH 
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-as  decision-making  activities  involving  absolute, 
proportional,  and  catastrophe-types  of  decision  rules. 
Available  display  options  include  the  following: 
Non-Random  Paths,  Random  Paths,  Initial  Forces, 
Cascading  Paths,  Probability  Flow,  and  Vector  Field 
displays,  and  arc  described  below. 

The  decision  space  displays  the  results  of  the  modeled 
combat  process  in  terms  of  the  position,  of  coordinates 
representing  the  strengths  of  the  opposing  (“red"  and  “blue”) 
forces.  These  coordinates  trace  out  a  path  on  the  decision 
space  as  the  combat  analysis  proceeds.  Monitoring  of  the 
pattern  of  change  reflected  in  the  nature  of  such  paths 
provides  information  on  the  changing  combat  environment 
and  on  the  effectiveness  of  the  opposing  "tcs.  Movement 
of  the  path  towards  one  or  other  of/  S  decision''  lines 
provides  a  warning  of  the  possibility  of  combat  termination 
and  other  types  of  sudden  changes  so  that  the  workbench  can 
serve  as  the  basis  of  an  indications  and  warnings  facitily  for 
military  analysts,. 


2. 1  NON-RANDOM  PATI  IS 


The  Non-Random  Paths  display  presents  the  results  of 
integrating  deterministic  versions  of  the  selected  combat 
equations  with  the  assigned  force  strength  and  attrition 
coefficent  values  for  “red”  and  "blue”  forces.  The  results  of 
this  integration  are  displayed  as  a  curved  line  >n  Figure  6 
which,  in  this  example,  crosses  the  red  force  decision  line. 
Under  such  circumstances,  a  red  force  decision-maker  would 
have  opted  for  a  termination  of  the  simulated  engagement.  If 
such  a  termination  did  not  occur,  the  engagement  would  have 
continued  until  the  red  force  was  totally  destroyed  while 
significant  numbers  of  the  blue  forte  remained. 


The  electronic  workbench  is  a  highly  interactive  device 
which  supports  a  range  of  combat  analyses  involving 
deterministic,  stochastic,  and  probabilistic  processes,  as  well 
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F5jsr"  <'•  Noo-rmdom  Display 


22  RANDOM  PATHS 


The  Random  Paths  display  considers  the  impact  of 
uncertainty  on  the  combat  process.  It  presents  one  hundred 
separate  integrations  of  the  combat  equations  based  on  the 
assumption  of  stochastic  or  random  behavior  related  to  the 
selected  levels  of  kill  uncertainty  for  each  of  the  (“blue”  and 
“red”)  forces  (Figure  7),  Consideration  of  the  impact  of  kill 
uncertainty  can  have  a  profound  effect  on  the  combat 
outcome.  Identical  combat  conditions  to  those  described  in 
Section  2.1,  (in  which  the  only  result  is  a  blue  “victory”) 
with  the  addition  of  the  effect  of  kill  uncertainty  can  lead  to 
results  in  which  the  red  force  can  overcome  the  blue  force  in 
a  significant  number  of  cases.  Such  a  result  was  not 
predicted  from  the  deterministic  models  used  in  the 
Non-Random  Pa»hs  analysis  and  this  Study  reveals  the 
importance  of  developing  combat  models  which  include 
uncertainty  in  order  to  reduce  the  possibility  of  unexpected 
combat  outcomes. 


fijwt?  Random  Duplay 


2,3  INITIAL  FORCES 


In  the  initial  forces  type  of  display  (Figure  3),  the 
initial  and  final  force  strengths  of  the  adversarial  (“blue”  and 
“red”)  forces  arc  represented  by  the  points  a  and  b  on  the 
decision  space  diagram,  for  example.  The  kill  uncertainty 
ellipse  centered  on  the  combat  end-point  (point  b)  is 
constructed  to  represent  the  uncertainty  associated  with  the 
attntion  of  the  “blue  ’’and  “red”  forces  with  the  length  of  the 


axes  of  thercllipse  (uj,  and  unproportional  to,  the  kill 
uncertainties  of  these  two  forces.  The  higher  the  level  of 
uncertainty,  the  greater  the  area  of  the  ellipse.  As  mentioned 
above,  the  kill  uncertainty  ellipse  can  be  used  to  assess  the 
likelihood  of  combat  termination.  Thus,  the  ratio  of  the  areas 
of  this  ellipse  located  on  cither  side  of  a  decision  line  can 
serve  as  an  estimate  of  the  likelihood  that  a  decision-maker 
would  decide  to  terminate  combat. 


2.4  CASCADING  PATHS 


The  Cascading  Paths  display  is  an  extension  of  the 
Initial  Forces  display  described  in  Section  2.3.  It  is 
generated  by  drawing  the  kill  uncertainty  ellipse  for  a  single 
time  step  of  the  integrative  process  and  using  the  positions  of 
the  ends  of  the  axes  of  this  ellipse  as  the  starting  conditions- 
for  a  subsequent  integrations.  In  this  display,  integration  is 
carried  on' for  ten  iterations  (Figure  8)  and  the  tree- like 
structure  that  i$  produced  can  be  considered  to  represent  the 
“flow”  of  uncertainty  associated  with  the  simulated  combat 
environment.  Identical  combat  conditions  to  those  described 
in  Section  2.1  were  used  to  construct  both  the  Initial  Forces 
and  Cascading  Paths  displays  presented  in  this  paper 
Combat  termination  with  the  blue  force  dominating  the  red 
force  is  the  only  outcome  of  deterministic  combat  with  these 
selected  parameters.  The  significant  numbers  of  the  paths 
which  cross  the  blue  force- decision  line  (representing 
conditions  for  possible  blue  force  combat  termination)  in 
Figure  8  is  another  manifestation  of  the  impact  of  kill 
uncertainty  on  combat  outcomes. 


2.5  Vr.CfOR  Fir.LD 


The  Vector  Field  display  (Figure  9)  consists  of  a  senes 
of  line  segments  drawn  to  reflect  the  result  of  combat  attntion 
and  reinforcement  with  initial  force  ratios  represented  by  the 
starting  points  of  these  vectors.  The  magnitude  and  direction 
of  these  vectors  represent  the  pattern  of  combat  activity  with 
these  starting  conditions  This  type  of  display  can  provide  a 
decision-maker  with  an  estimate  of  the  magnitude  of 
changes  in  force  ratio  that  w’ould  be  required  to  achiesc  a 
particular  combat  jutcomc,  for  example 
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26  PROBABILTCY  FLOW 


Probability  Flow  display  (Figure  10)  represents 
the  evolution  of  combat  in  terms  of  the  pattern  of  movement 
ot  a  senes  of  poin  ts  whose  density  represents  the  probability 
of  the  existence  of  a  particular  force  ratio.  A  higher  degreeof 
aggregation  of  the  points  on  the  decision  space  represents  a 
higher  level  of  force  ratio  probability.  At  the  start  of  the 
combat  process,  these  points  are  located  in  a  dense  rectangle 

K  .^'  decision  space  whose  position  is 
determined  by  the  initial  force  strengths.  Combat  attrition 

SeStf?S-nlaCUV,,‘?  kad-'°  chanScs  >"  tflc  force  ratio 
probabilities  which are ;  reflected  in  a  change  in  the  density  of. 
fte  points  on  the  decision  space.  Points  which  cross  the 
wKrh  .  '{!f?  arc  c?n,,dered  to  represent  combat  events 
Tna  m  1!  di  ,e5?,na,ed  due  to  the  selected  decision  rules 
"l!  T?'e  percentage  of  points  (representing 

probability  dismbutions)  attributed  to  the  blue  and  red  forces 
M  the  result  of  crossing  these  decision  lines  can  serve  as  a 

combat  cngagcm«ie't,VC  SUCCCSS  °f  f°rCCS  durinS  lhc 

.  .  Analysis  of  the  Probability  Flow  display  can  be  verv 

Figure  Hta  ?HSVW'',h  lh'.combat  conditions  selected  in 
Figure  10a,  a  red  force  achieves  an  early  advantage  of  . 17 

frV0‘*  °f  lhis/orcc).'°  “»  percent  (in  favor  of  a 
lOh/nM  Ibe  m  0mc  0  01^'™c  unIts  l“ve  elapsed  (Figure 
'„!■? "d  lhc  blu'  fore.e  decision-maker  might  seriously 
sfmn  «bi«e-i,>,na-"8.  ihe  engagement.  However,  if  the 
simulation  is  permuted.to  continue  toward  completion,  it 
becomes  clear  that  the  blue  force  is  much  more  likely  to  be 
victorious  as  it  eventually  achieves  an  advantage  of  77 
£n?'?  Perc'”1  ('a  favor  of  the  red  force)  with  some  6 
n  nee/01!*3*  err^Semcnts  remaining  undecided  after 
Some  0.2554  lime  units  have  elapsed  (Figure  10c) 
Tb5.r'J31 al!.  d?'  blue  force  attrition  appears  to  have  oreurrai 
suW8  '?llia  pa/1  °f  lhe  combat  process  and  all 
example""  “  'r‘"on  lhen  KOTS  10  ">«  r«i  force  in  this 


3.  SUMMARY 


**  electronic  workbench  consists  of  a  computer- 
based  interactive  grapn.es  system  which  can  be  used  by 
military  analysts  and  decision-makers  to  support  such  tasks 
as  situation  assessment,  decision-making,  and  battle 
management  which  involve  the  application  of  tactical  C2, 


i  nc  woixocncn  permits  the  performance  of  a  wide  range  of 
u  ct-sclected  inaihema'r  a  -4  other  processing  operations 
through  the  use  of  a  menu!,-. -itty,  ‘ 

lhe  workbench  permits  the  use  of 
Si  Of  .cch".IIl““ 10  o^plom  lhc  potential  non-linear 
nature  of  situations  in  order  to  reveal  the  possible  occurrence 
of  non-linear  and/or-  counter-intuitive  behavior.  If  not 
hlnb  1/^  ?r0?c?  y’  s.uch  non-linear  behavior  can  lead  to 
situationofinteres,.and  CV'"  '0'a"y  ’"comcl  ana,ys«  of  a 

wortbfn^v,din8van  inIcrac*‘ve  graphics  display  the 
workbench  permits  the  user  to  undertake  a  range  of  “thought 
expenments  in  order  to  explore  possibilities  andsuggest 
10  S0lv"?s  3  of  ditferent  types  of 
f“nheny»™.  lb'  workbench  has  been  designed 
so  that  the  advanced  mathematics  upon  which  it  is  based  is 
transparent  so  that  minimal  mathematical  demands  are  made 
\>n  ns  users. 
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ABSTRACT 

In  this  paper  we  present  a  progress  report  on  our  work  on 
the  dynamic  version  of  the  Weapon  to  Target  Assignment 
(WTA)  problem  and  on  the  static  Version  of  the  WTA  problem 
in  which  vulnerable  C3  nodes  arc  included  in  the  formulation. 

In  the  StatfcWTA  problem,  weapons  must  be  assigned  to 
targets  with  the  objective  of  minimizing  the  total  expected 
number  (or  value)  of.lhe  surviving  targets.  In  the  dynamic 
version,- this  allocation' lssdone  in  time  stages  so  that  the 
outcomcs  of  previous  engagements  can  be  used  in  making 
future  assignments.  Wc  will  show  that,  for  the  simple  cases 
studied,  there  is  a  significant  cost  advantage  in  using  the 
dynamic  strategy.  Wc  believe  that  similar  results  will  hold  for 
the  more  general  problem. 

In  the  static  defense-asset  problem  with  vulnerable  C3 
nodes  the  offense  is  allowed  to  either  attack  the  assets 
themselves  or  to  first  attack  the  command  and  control  system, 
and  then  the  assetsrif  the  C3  nodes  are  destroyed  then  the 
defensive  interceptors  are  assumed  unusable.  Wc  first  consider 
simple  cases  where  assumptions  are  made  as  to  offensive  and 
defensive  states"  of  knowledge  and  kill  probabilities.  Strategies 
are  then  developed  and  optimal  weapon  allocations  identified. 
These  assumptions  arc  then  relaxed,  and  further  examples 
demonstrate  the  ensuing  complexity. 


1.  INTRODUCTION 

Our  long-range  research  objective  is  the  quantitative  study 
of  the  theory  of  distributed  C3  organizations.  Our  present 
research  has  been  concentrated  on  certain  aspects  of  situation 
assessment  and  resource  commitment. 

Situation  assessment  entails  the  use  of  sensors  to  detect 
and  track  the  enemy  and  its  weapons  (i.e  missiles,  tanks  etc.). 
These  sensors  arc  usually  geographically  distributed  so  that 
'distributed' algorithms  are  desirable.  This  problem  can  be 
foimulated  as  a  distributed  hypothesis  testing  problem.  Results 
on  this  research  can  be  found  in  the  paper  by  Papastavrou  and 
Athans  HI  in  these  proceedings. 

The  resource  commitment  problem  deals  with  the  optimal 
assignment  of  the  defense's  resources  against  the  offense’s 
forces  so  as  to  minimize  the  damage  done  to  the  defense’s 
assets.  If  the  battle  is  such  that  the  defense  has  a  single 
opportunity  to  engage  the  enemy  then  the  problem  can  be 
formulated  as  a  static  resource  allocation  problem.  If  multiple 
engagements  are  possible  (as  for  example  in  the  Strategic 
Defense  System  (SDS)  scenario)  then  better  use  can  be  made 
of  the  defense’s  resources  by  assigning  them  dynamically  (i  e. 


observe  the  outcomes  of  some  engagements  before  making 
further  assignments):  This  is  sometimes  called  a  shoot-look- 
shoot  strategy  in  the  literature.  In  this  paper  we  will  provide 
some  results  on  simple  cases  of  the  dynamic  problem  and 
make  comparisons  with  the  corresponding  static  problem. 

The  above  resource  allocation  problem  will  typically  be 
solved  at  a  C3  node  and  the  results  transmitted  to  the  relevant 
resources.  These  C3  *  nodes  will  therefore  be  of  vital 
importance  to  the  defense  since  their  destruction  will  in  effect 
paralyze  the  resources  over  which  they  have  control.  One 
approach,  that  can  be  used  to  increase  the  reliability  of  the 
system,  is  to  replicate  the  C3  nodes.  In  this  way  destruction  of 
the  primary  C3  node  does  not  affect  the  defense’s  system  smcc 
its  function  can  then  be  performed  by  one  of  the  "backup’’  C3 
nodes..  We  have  formulated  a  model  which  includes  these 
replicated  nodes  and  will  provide  results  on  simple  cases  of  the 
problem. 

This  paper  is  in  effect  a  progress  report  of  our  work  on 
the  resource  allocation  problem  and  on  the  survivability  issue  - 
mentioned  in  the  previous  paragraph.  The  models  being  used 
are  rich  enough  to  capture  the  nature  of  the  mission  (c.g, 
defense  of  assets),  enemy  strength  (number  and  effectiveness 
of  the  enemy’s  weapons),  defense  strength  (number  and 
effectiveness  of  the  defense’s  weapons)  and  strategy  and 
tactics  (preferential  defense,  shoot-look-shoot,  etc.)  It  should 
be  noted  that  basic  research  studies  on  these  topics  are  virtually 
non-existent. 

Our  work  is  motivated  by  military  defense  problems,  two 
examples  of  which  are  as  follows.  The  first  example  involves 
the  Anti-Aircraft  Weapon  (A AW)  defense  of  the  Naval  battle 
group  or  battle  force  platforms.  The  assets  being  defended  are 
aircraft  carrier(s),  escort  warships  and  support  ships  each  of 
which  is  of  some  intrinsic  value  to  the  defense.  The  threat  to 
these  assets  are  enemy  missiles  launched  from  submarines, 
surface  ships  and  aircraft.  These  missiles  may  have  different 
damage  probabilities  which  depend  on  the  missile  type,  target 
type,  etc.  The  defense’s  weapons  are  different  types  of  AAW 
interceptors  launched  from  Aegis  and  other  AAW  ships.  The 
kill  probability  of- these  weapons  may  also  depend  on  the 
specific  target-interceptor  pair.  The  objective  of  the  defense  is 
to  maximize  the  expected  surviving  value  of  the  assets.  The 
problem  is  to  find  which  AAW  interceptors  should  be  assigned 
to  each  of  the  enemy  missiles,  when  should  they  be  launched 
and  why.  This  formulation  allows  for  a  preferential  defense 
where,  in  a  heavy  attack,  it  may  be  optimal  for  the  defense  to 
leave  ’‘low"  valued  assets  undefended  and  concentrate  us 
resources  on  saving  the  “high"  valued  assets. 
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The  second  motivating  example  for  our  work  is  the 
midcourse'phase  of  the  Strategic  Defense  System.  In  this  case 
the  assets  are  our  (the  defense's)  Inter-Continental  ^Ballistic 
Missile  (ICBM)  silos,  military  Installations,  C3  nodes, 
populations  centers,  etc.  .The  threat  to  these  assets  are  enemy 
re-entry  vehicles'  (RV's),  surrounded  by." decoys.  The 
defense's  weapons  are  Space-based  kinetic-kill  vehicles 
(SBKKV’s)  and  ERIS  interceptors.  The  objective  of  the' 
defense  is  the  maximization  of  the  expected  surviving  value  of 
the  assets.  The  problem  is  the  determination  of  the  optimal 
weapon-target  assignments  and  the  timing  of  the  interceptor 
launches. 

2.  THE  STATIC  TARGET-BASED  WTA  PROBLEM 

In  this  section  we  will  present  the  static  version  of  the 
target-based  WTA  problem.  In  this  model,  a  number  of 
missiles  (the  targets)  are  launched  by  the  offense.  The  defense 
has  a  number  of  interceptors  (the  weapons)  with  which  to 
destroy  these  missiles.  The  defense  assigns  a  value  to  each  of 
the  targets  based  on.  factors  such' as  .‘target  type,  point  of 
impact,  etc.  Associated  with  each  weapon-target  pair  is  a  kill 
probability  which  is  the  probability  that  the  weapon, will 
destroy  the  target  if  it  is  fired  at  it.  We  will  make  the 
assumption  that  the  action  of  a  weapon  on  a  target  is 
independent  of  all  other  weapons  and  targets.  The  problem 
faced  by  the  defense  is  the  assignment  of  weapons  to  targets 
with  the  objective  of  minimizing  the  total  expected  surviving 
target  value, 

2.1  Mathematical  Statement  of  the  Static  WTA  Problem 

The  following  notation  will  be  used: 

N  *  the  number  of  enemy  targets 

M  »  the  number  of  defense  weapons 

Vj  «  the  value  of  target! 

py  «  probability  that  weapon  j  kills  target  i  if  shot  at  it 
The  solution  will  be  represented  by: 

(1  if  weapon  j  is  assigned  to  target  i 

0  otherwise 

The  optimization  problem  can  now  be  stated  as: 

N  M 

mi"  I.yv.rio-P,/*  (2.1) 

M  T-l 

N 

subject  to:  ^xy  a  1,  j  »  13 . M. 

mi 

The  objective  function  is  the  total  expected  value  of  the 
surviving  targets  while  the  constraint  is  due  to  the  fact  that 
each  weapon  can  attack  only  one  target. 

2.2  Comments  on  the  Solution  of  the  Static  WTA  Problem 

This  problem  has  been  proven,  by  Lloyd  and 
Witsenhausen  (21,  to  be  NP-Complctc  in  general.  This  means 
that  polynomial  time  algorithms  for  obtaining  the  opt.mal 
solution  do  not  exist.  One  must  therefore  resort  to  sub-opumal 
algorithms. 

In  the  special  case  in  which  the  kill  probabilities  are 
independent  of  the  weapons,  denBrocder  ct  al.  |3],  have 
proposed  an  optimal  algorithm  for  the  problem  which  runs  in 
polynomial  time.  This  algorithm,  which  is  usually  called  the 


Maximum  Marginal  Return  algorithm,  works  by  assigning  the 
weapons  sequentially  with  each  weapon  being  assigned  to  the 
target  which  results  in  the  maximum  marginal  return  in  the 
objective  function. 

In  the  special  case  in  which  the  kill  probability  is  the  same 
for  all  weapon-target  pairs  and  all  targets  have  the  same  value, 
the  optimal  assignment  is  obtained  by  dividing  the  weapons  as 
evenly  as  possible  among  the  targets. 


3.  THE  DYNAMIC  WTA  PROBLEM 

The  battle  scenario  for  the  dynamic  problem  is  the  same  as 
for  the  static  problem  exceptthat  the  weapon  assignments  are 
done  in  time  stages  each  of  which  consists  of  the  following 
steps: 

(a)  Determine  which  targets  have  survived  the  last 
engagement,. 

(b)  Assign  and  fire  a  subset  of  the  remaining  weapons  with 
the  objective  of  minimizing  the  total  expected  value  of  the 
surviving  targets  at  the  end  of  the  final  stage. 

We  have  looked  at  some  simple  cases  of  this  problem  to  gain 
insight  into  the  general  problem  and  to  help  bolster  our 
intuition. 

3.1  The  Two-Target  Case 

In  this  case  we  will  assume  that  there  are  two  targets 
(N*2),  the  kill  probability  is  the  same  for  all  weapon-target 
pairs,  the  defense  has  M  weapons  and  there  are  K  time 
stages.With  these  assumptions  we  have  proved  the  following 
theorem: 

.Theorem  3.1  Under  the  assumptions  given  above,  an  optimal 
strategy  for  the  present  stage  can  be  found  as  follows.  Let  T  » 
Tm/kT.  Solve  the  corresponding  static  problem  with  T 
weapons  and  denote  the  solution  by  {xj}  where  Xjfs  the 
optimal  number  of  weapons  to  be  assigned  to  target  i  .The 
optimal  assignment  for  the  present  stage  of  the  dynamic 
problem  is  to  assign  Xj  weapons  to  target  i. 

If  wc  further  assume  that  V,»l  and  that  M  is  divisible  by 
2K  then  it  can  be  shown  that  the  optimal  target  leakage  J(K)  is 
given  by: 

J(K)  =  2K(l-p)  2K  -2(K-  1)(1  -pX  -  (3.1) 

Note  that  if  K  is  large  then  the  optimal  leakage  J(K)  2(l-p)M 
while  the  optimal  leakage  for  the  corresponding  static  problem 
is  2(l-p)M/2.  In  other  words,  roughly  half  as  many  weapons 
are  required  for  the  dynamic  strategy  to  obtain  the  same 
expf  cted  leakage  as  that  of  the  static  strategy.  This  expresses, 
in  a  convenient  form,  the  value  of  the  battlcspace  to  the 
defense. 

In  figure  I  we  have  plotted  the  ratio  of  the  K-stage 
leakage  to  the  static  leakage  versus  the  kill  probability  p  for  the 
case  of  two  targets  and  lo  weapons,  We  have  plotted  the  cases 
K  »  2, 4  and  8.  First  note  that  the  leakage  advantage  of  the 
dynamic  strategy  over  the  static  one  increases  with  the  kill 
probability.  This  is  due  to  the  fact  that  as  the  kill  probability 
increases,  the  information  gained  from  the  first  stage 
increases.  This  implies  that  more  effective  use  will  be  made  of 
(costly)  high  accuracy  weapons  if  the  dynamic  strategy  is 
used.  Next,  note  that  the  leakage  advantage  of  the  dynamic 
strategy  increases  with  the  number  of  stages  This  is  due  to  the 


fact  that  the  information  gained  increases  with  the  number  of 
stages.., Note,: however,  that  most  ..  of  the  improvement  is 
obtained  after  only  a  small  number  of  stages.  In  other  words, 
the  curves  rapidly  converge  as  the  number  of  stages  increases. 
This  implies  that,  even  if  the  number  of  stages  is  small,  the 
dynamic  strategy  offers  a  significant  leakage  advantage. 


K-stage  leakage 


Figure  I :  .T'.k)/J(l)  vs.  p  for  the  case  M»16  and  N-2 


Figure  2  contains  plots  of  the  ratio  of  the  two-stage 
leakage  to  the  static  leakage  versus  the  kill  probability  p  for  the 
case  of  two  targets.  We  have  plotted  the  cases  for  which  M  ■ 
4,8,12,16  and  20.  Note  that  the  leakage  advantage  of  the 
dynamic  .strategy  increases  with  the  number  of  weapons  used. 
Note  also  that  the  same  leakage  advantage  can  be  obtained  by 
either  using  a  few  high  accuracy  weapons  or  m*-v  low 
accuracy  weapons. 


2-stage  leakage 
static  leakage 


Figure  2  :‘J(2)/J(  1)  vs.  p  for  0  case  K=2  and  N*2 


32  The  Two-Stage,  N-Target  Case 

In  this  section  we  will  consider  the  two-stage  dynamic 
problem  , with  N  equally  valued  targets(each  of  value  1),  a 
single  kill  probability,  p  (for  all  stages  and  weapon-target 
pairs),  and  M  weapons;  Unlike  the  two  target  problcm,  we 
were  unable'to  find  an  analytical  solution  to  this  problem  for 
the  case  N>2.  However,  we  were  able  to  derive  useful 
properties  of  the'  optimal  solution.. The  first  property,  which 
holds  for  the  more  general  problem  of  K  stages,  is  given  as 
-theorem  3.2. 

Theorem  3.2  The  optimal  solution  M>  the  problem  given 
above  has  the  property  that  the  weapons  to  be  used  at  each 
stage  are  spread  evenly  among  the  surviving  targets. 

The  above  result  simplifies  the  problem  to  be  solved.  Let 
us  consider  the  two-stage  problem.  Let  M2  denote  the  number 
of  weapons  used  in  the  first  stage  (i.e.  2  stages  to  go).  The 
number  of  weapons  that  will  be  used  in  the  last  stage  will  then 
be  M-M2.  Denote  the  conesponding  cost  of  the  assignment,  in 
which  weapons  are  spread  evenly  at  each  stage,  by  The 
optimal  solution  can  then  be  obtained  by  minimizing  J(M2) 
over  the  set  (0,1,... ,M). 

If  J(M2)  happened  to  have  a  "convex"  shape  (i.e  have  the 
property  that  J(M2+1)  -  J(M2)  £  J(M2)  -  J(M2-1))  then  the 
above  minimization  could  be  done  efficiently.  Unfortunately, 
we  can  show  (by  example)  that  this  is  not  the  case. 

Let  us  now  consider  the  case  of  K  stages,  N  equally 
valued  targets,  a  single  kill  probability  and  M  weapons  with 
the  constraint  that  the  number  of  weapons  is  less  than  the 
number  of  targets.  Our  intuition  tells  us  that  a  dynamic 
allocation  should  not  perform  any  better  than  a  static 
allocation.  This  is  in  fact  the  case.  This  result  is  given  in  the 
following  theorem. 

Theorem  3.3  Under  the  assumptions  given  above,  a 
dynamic  allocation  cannot  perform  any  better  than  a  static 
allocation.  Hence  it  is  optimal  to  assign  all  of  the  weapons  in 
the  first  stage. 

The  above  theorem  is  not  particularly  enlightening  but  it 
allows  us  to  concentrate  on  the  cases  in  which  M>N,  Let  us 
now  consider  the  case  in  which  there  are  two  stages,  N  targets 
each  of  unit  value,  a  single  kill  probability  p  and  M  weapons 
with  M  >  N.  As  before,  let  M2  denote  the  number  of  weapons 
used  in  the  first  stage  of  a  strategy. 

Theorem  3.4  Under  the  assumptions  given  above,  the 
optimal  assignment  has  the  property  that  M2  £  N. 

We  conjecture  that  the  above  theorem  can  be  extended  to  the 
case  of  more  than  two  stages. 

Using  the  properties  given  above  we  computed,  the 
optimal  solution  to  the  two  stage  dynamic  problem  for  various 
numbers  of  weapons  and  targets  using  a  kill  probability  of  p  » 
0.9,  The  optimal  values  of  M2  are  given  in  table  1.  The 
number  of  targets  varies  from  1  to  10  (the  columns)  and  the 
number  of  weapons  varies  from  1  to  25.  (the  rows).  In  the 
cases  where  the  solution  is  non-unique  we  have  chosen  values 
of  M2  which  exemplify  any  patterns.  Note  that  for  the  cases  N 
£M£2N*1  the  optimal  value  of  M2  is  N.  We  conjecture  that 
this  result  holds  in  general  but  have  so  far  failed  to  find  a 
proof. 
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Figure 3  couauts  a  pkx  of  4k  ado  of  the  2xapE  leafage 
to  the  static  Vrakagr  versus  the  kiE  probability  p  with  a  2:1 
veapoa  »  target  ratio  fix.  M  =  2S).  We  have  pkxed  the 
cases  N»2.4j6j*»d  10.  Here  we  see  dot  as  the  size  of  the 
problem  booses  Ac  leakage  advMogeofdK  djnoaic  model 
kciease^  This  impties  that,  for  the  problems  that  concern  us 
(Le.  large  scale  problems),  tie  dynamic  model  has  a 
significant  leakage  advantage  o*cr  the static  modeL 


2-stagg  leakage 
sazac  leakage 


Figure  3 :  J(2)/J{1)  vs.  p  for  the  case  K=2  with  M*2” 

figure  4  contains  a  plot  of  the  ratio  of  tbc2-sugc  leakage 
to  the  static  leakage  versus  the  number  of  weapons  M  with  a 
kill  probability  p  *  0.5.  We  have  plotted  the  cases  N  =  2,4.6, 8 
and  1 0.  Note  that  the  leakage  advantage  of  the  dynamic  model 
increases  rough  lycx  pone  ntially  with  the  number  of  "capons. 
This  implies  that  the  dynamic  model  is  significantly  Utter  even 
for  relatively  small  weapon  to  target  ratios. 
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4.  DBTRlBlJnON  OF  THE  C3  FUNCTION 

41  MroMni 

Akhoogjb  distribution  of  C?  functions  is  generally  regarded 
as  desirable,  hole  qaanriunve  insight  exists  as  to  the  resulting 
gains.  Enhanced  survivability  of  the  BM/C3  system  is 
typically  cited  as  the  reason  for  such  distribution.  Here  we 
develop  a  coocept  of  vulnerability  for  the  WTA  function  and 
consider  its  effect  on  allocation  strategies.  The  underlying 
paradigm  is  the  defense  asset  model,  in  which  the  defense 
defends  a  collection  of  differently  valued  assets  against  attack. 

In  such  an  engagement  the  objective  of  the  offense  is  to 
minimize  expected  surviving  defense  asset  value.  Thiscanbe 
accomplished  by  either  attacking  the  assets  themselves  or  by 
first  attacking  the  defense  system,  and  then  the  assets. 
Although  various  components  of  the  defense  system  arc 
vulnerable  we  assume  here  that  the  objective  is  the  command 
and  control  centers,  the  destruction  of  which  renders. the 
defensive  stockpile  unusable.  A  precursor  attack  increases  the 
likelihood  that  the  assets  will  be  undefended  and  thus  increases 
their  vulnerability,  making  this  a  potentially  attrar've  offensive 
strategy.  Increased  vulnerability,  however,  cbf„  at  the  cost 
of  a  reduction  in  the  offensive  stockpile  availau^  to  attack 
assets. 

The  overall  objective  of  the  defense  is  to  maximize 
expected  surviving  asset  value;  BM/C3  nodes  exist  and  are 
defended  only  insofar  as  they  further  this.  Unless  some 
redundancy  is  planned,  a  destroyed  BM/C3  node  causes  the 
defensive  weapors  it  controls  to  be  useless.  For  the  purposes 
of  initial  analysis,  we  assume  that  command  and  control  is 
centralized,  and  replication  of  function  will  occur  at  this  level. 
The  defense  has  the  potential  to  increase  expected  surviving 
value  by  allocating  some  portion  of  its  stockpile  to  BM/C3 
defense,  but  in  so  doing  reduces  the  number  of  weapons 
available  for  defending  assets. 
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where  Xtt  =  I  if  weapon  /  is  assigned  to  urge t  i  aad  0 
crJxrwisc.  r«*  Ida  proidxSty  foe  istoreepcar/  fired  at  target 
i.pu  =  kill  probability  for  larger  i  against  asset  q  and 
indexes  the  set  of  target  arsed  at.  asset  q.  Tbc  szszplcr 
version  is 

K 

(«) 

i-l 

where  x/  is  the  number  of  defensive  weapons  assigned  to  the 
i-rh  target. 

The  objective  function  used  is 

U  =  ^V+(I^)V4  (4.3) 

where  §  =  probability  that  all  C3  nodes  are  destroyed,  Vw  = 
expected  surviving  asset  value  if  undefended  and  Vj  = 
expected  surviving  asset  value  if  defended.  The  offense;  then, 
seeks  to  minimize  V  and  the  defense  to  maximize  it.  In 
general. 

o  •**«  M 

v£vjGMW»  (4-4) 

q»l  i*l  |*1 

With  the  above  assumptions  about  kill  probabilities,  this 
reduces  to 

o  H. 

V^IvJInW,  (4.5) 

q*l  1*1 

The  expected  number  of  surviving  assets,  if  undefended,  is 

vlxo-/’  (46) 

4-1 
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requires  that  tbc  ssn  cf  targets  directed  at  C3  codes  and  at 
assets  sum  to  the  offensive  stockpile.  The  defense  allocation 
coasaaaa 

xi>.*xijs=M  <4-,o> 

i»l  kl  4*1  i»l 

similarly  requires  that  defensive  weapons  sum  to  the 
interceptor  stockpile  size. 

The  utility  function,  however,  is  nonlinear,  nonconvex  and 
nonconcave.  Minimal  analytical  insight  Jos  been  developed, 
and  initially  we  discuss  small  numerical  examples. 

4.3  Discussion 

The  best  way  to  demonstrate  the  complexity  of  strategies 
for  such  problems  is  to  first  consider  simple  cases.  Assume 
that  the  defense  has  the  last  move,  and  also  that  kill 
probabilities  for  targets  against  BM/C3  nodes  (p)  and 
interceptors  against  targets  (r)  arc  unit);  while  targets  against 
assets  are  less  than  one.  Assets  arc  taken  to  be  of  equal  value 
and  hence  normalized  to  one.  The  offense,  then,  can  cither 
attack  just  the  assets,  or  first  the  BM/C3  nodes  and  then  the 
assets.  If  the  control  nodes  are  attacked  the  defense  will 
defend  just  one  by  matching  each  incoming  missile,  obviously 
choosing  the  most  lightly  attacked.  As  long  as  there  are 
interceptors  left  they  will  be  so  used  in  the  first  stage,  for 
otherwise  they  arc  useless  in  the  second.  If  there  are  any  left 
for  the  second  stage,  they  will  similarly  be  employed  to 
successively  defend  the  least  attacked  targets.  Thus  the 
offense  will  attack  all  C3  nodes  evenly,  as  it  will  also  do  for 
assets  (though  not  necessarily  at  the  same  level  for  both). 
Note  that  this  is  true  only  when  C3  nodes  are  of  equal  value, 
the  same  applies  to  the  asset  attacks.  The  purpose  of  a 
precursor  attack,  with  these  kill  probabilities,  is  to  deplete  the 
defender’s  stockpile  rather  than  to  actually  destroy  the  control 
nodes. 
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abScoofr  to  models^  the  pmbabSiytba:  nodes  2adtsgcts  are 
dssojti  Tte  defease  last-move  case  becomes  a  two-stage 
zlkczikxi  proKem.  wi th  two  diffe rest  defensive  objectives: 
BMC3  aliocadoa  utrzagics  seek  to  maximize  tie  profcabEi^of 
zi  least  oac  node  surviving.  while  asset  defense  tries  to 
maximize  the  expected  smvmsg  vaJoe. 

In  I4fs  example  the  offense  would  coc  anack  the  BMC3 
system  if  there  *vere  mom  than  one  node.  Another  example 
shows  that  this  no  longer  need  hold  when  weapons  are 
imperfect.  For  the  case  of  Q=4.  A'=]2,  p-.9  (bo*  assets 
and  C3  nodes)  and  r  ranging  froar.7  to  1.0.  figures  5*8  show 
optimal  strategics  for  3/=4,  6.  8  and  10.  Note  that  the 
optimal  sraegjcs  were  obtained  by  zn  intelligent  enemeraaon: 
against  candidate  offensive  strategics  the  defense  employs  that 
allocation  which  maximizes  U;  the  offense  then  selects  the 
strategy  corresponding  to  the  minima  of  these  maxima.  Only 
by  simplifications  regarding  p ,  r  and' the  vj  is  such  an 
enumeration  feasible.  In  figure  5  (3/=4)  the  offense  allocates 
4  of  its  12  weapon*  to  attack  the  C3  nodes  when  r  is  low.  but 
increases  to  8  when  r  is  high;  this  corresponds  to  defensive 
allocations  of  at  first  2  and  then  3  interceptors  in  defense  of  the 
C3  nodes.  Not  surprisingly,  the  number  of  expected  survivors 
is  quite  low. 


Figure  5 :  Pc  =  .9,  Pa  =  .9,  Q  =  4,  N  « 12,3/  =  4 
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Figure  6 ;  Pc= .9,  Pa  =  .9,  Q=4,  N  =  12.  Af  =  6 


.  Figure  7 :  Pc  «=  .9.  Pa  » .9.  Q  =  4,  N  =  12,3/  =  5 


figure  8:  Pc  =  -9,P3=.9.Q=4.  N«  12,/./=  /0 

la  figures  9-12  we  present  ihe  results  when  the  C3  codes 
ire  softer  targets  than  the  assets:  pc  =  .95  and  pa  (assets)  = 
.9;  other  parameters  are  Q~2,  N=  12  and  r  from  .5  to  .7. 
When  A/=I2  (figure  9)  the  offense  attacks  the  C?  nodes  with 
6  weapons  for  aU  vilues  of  r.  When  the  defensive  stockpile 
increases  to  1 4,  the  CJ  attack  level  drops  to  4  only  for  r  clos* 
to  1.0  (figure  10).  If  increased  to  16  or  18  (figures  11  and 
12),  however,  the  offensive  C3  allocation  drops  to  as  low  as  2 
for  high  r,  xnd  then  switches  to  4  and  then  6  as  r  drops.  It 
can  be  seen  that  softer  C3  nodes  encourage  attack,  even  for 
rehuvdy  large  defensive  stockpiles. 
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Figure  10 :  Pc= 55.  P,  =  9.  Q  =  2.  N  =  12.  U  =  14 
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Figure  9 :  Pc  » ,95.  Pa  ■  .9,  Q  =  2,  N  *  1 2,  M  =  12 


Figure  1 1 :  Pc  =  .95,  P,  =  .9,  Q  =  4,  N  =  12.  A/=  16 


figure  13  shows  the  gam  that  replication  of  the  command  - 
and  cor.trol  function  provides.  The  ratio  of  the  payoff  for  2  C3 
nodes  to  that  of  1  C3  node  is  plotted  against  values  of  r  that 
range  from  .70  to  1.00  and  for  defensive  stockpiles  of  4,  8 
and  12. 


Pa^txfl  Ratio  for  Defense  with  2  C3  Node* :  1 C3  Node 


For  small  A/  (4).  the  gain  is  quite  marked:  it  climbs  from 
7  to  over  10.  The  plateau  occurs  at  the  point  at  which  the 
offense  switches  from  2  to  4  aid  the  defense  from  2  to  3 
weapons  for  the  2  C3  node  case.  When  A/=8  the  gain  at  first 
drops  and  then  rises  for  increasing  r,  with  the  minima 
cccutring  where  strategies  for  the  one  C3  node  case  change. 
Strategies  remain  the  same  for  all  values  of  r  when  Af«12, 
and  the  gain  decreases  monotonically  -  equalling  one  when  r 
equals  one.  This  is  to  be  expected,  since  when  the  defense  has 
12  perfect  weapons,  it  doesn't  matter  whether  there  arc  1  or  2 
C3  nodes:  all  of  the  offense's  weapons  will  br  successfully 
intercepted  figures  14  and  15  detail  the  strategies  that  lead  to 
this  result,  both  one  and  two  C3  nodes  resulting  in  the  same 
number  of  expected  survivors  when  1,  but  with  two  C3 
nodes  6eing  more  effective  for  lower  values  of  r. 


figure  14 :  P^.9.  Pa=.9.  Q=4.  N*12.  M=12. 1 0  Node 


figure  15 :  Pc=.0.  Pa=.9.  Q=4,  N=!2,  M=12, 2  C3  Nodes 


S.  CONCLUSIONS 


Tbs  Lsrodsctioa  of  feedback,  Lc.  optimal  "sbootdook- 
sboc«-l;x>k-shoo;-._"  szzx&cs,  c an  sigaificanffy  improve 
defease  effcethrncss- Sane  extensions  to  the  present  model, 
which  we  plan  to  consider,  laclcde  cage-<iepend«x  target 
raises  and  Jdfl  probabilities.  as  well  as  consideration  of  tbs 
dynamic  version  of  the  2ssrt-defensc  proctcm.  Ucfcsttraately, 
this  wall  mean  dealing  uitii  ssbgandaiiy  increased  complexity. 

In  con^’ctbg  tbs  stedy  of  the  impact  of  vulne ruble  C3 
nodes,  a  limited  domain  of  control  for  each  node  will  be 
insodoccd.  This  begfcs  to  consider  the  effect  that  a  dissxbotod 
organizational  structure  has  on  the  iz^lcz) cmation  ofAVTA 
strategics,  and  raises  sech  questions  as  bow  many  BM/C3 
nodes  and  of  what  type  there  should  be.  The  issue  of  differing 
values  for  both  C3  nodes  and  assets  must  be  addressed,  since 
valuation  will  better  enable  us  to  quantify  performance,  and 
evaluate  the  tradeoffs  that  occur  as  dissibetion  increases. 
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ABSTRACT 

We  present  in  this  paper  interceptor  assignment 
algorithms  for  space-based  weapon  satellites  conducting 
self-  and  mutual-defense  against  anti-satellite  weapons. 
We  demonstrate  that  the  optimal  solution  to  the  self- 
defense  problem  can  be  readily  obtained  using  a 
coordinate-ascent  algorithm.  We  also  show  that  the 
mutual-defense  problem  is  a  non-convcx  integer 
programming  problem  that  is  at  least  as  complex  as  the 
general  weapon-target  assignment  problem,  which  is 
known  to  be  NT-complete.  While  coordinate-ascent 
algorithms  can  at  best  provide  sub-optimal  solutions,  a 
Dcfcnsc-in-Dcplh  strategy  that  commits  certain  weapons 
to  the  defense  of  other  weapons  consistently  improves  the 
performance  of  a  particular  coordinate-ascent  algorithm. 
Computauonal  results  presented  here  also  demonstrate  that 
mutual  defense  is  consistently  superior  to  self  defense. 

SECTION  L  INTRODUCTION 


U  OBJECTIVE 

In  this  paper,  we  examine  the  problem  of 
defending  space-based  weapons  for  ballistic  missile  defense 
against  an  attack  from  conorbital  and  direct-ascent  anti- 
satellite  (ASAT)  missiles  .  Understandably,  the  role  of 
ASATs  is  to  destroy  the  defense  shield  and  thereby 
enhance  the  success  of  a  subsequent  ICBM  attack.  There 
arc  a  number  of  responses  the  defense  can  use  to  counter 
an  ASAT  attack,  including  deploying  decoys, 
maneuvering  and  firing  back.  We  invcsugatc  the  fire  back 
option  where  the  defense  must  decide  how  to  best  allocate 
us  interceptors  between  ASAT  and  ICBM  defense.  Our 
objective  is  to  present  algorithms  for  the, ASAT  defense 
problem  and  to  examine  critical  issues  attending  this 
special  version  of  the  weapon-target  assignment  problem. 

1.2  OVERVIEW 

We  formulate  the  basic  weapon  allocation 
problem  for  mutual  and  self  defense  against  an  ASAT 
attack  in  Section  2.  Implicit  in  this  formulation  is  the 
assumption  that  the  ASATs  arc  launched  in  a  single  wave 
to  create  'holes’  in  the  defense  prior  to  the  ICBM  launches. 
This  assumption  permits  us  to  treat  the  ASAT  and  ICBM 
problems  as  two  separate  problems  that  arc  loosely 
coupled  through  values  assigned  by  the  defense  to  the 
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interceptors  on  board  every  weapon  surviving  die  ASAT 
attack.  In  practice,  these  values  should  reflect  the 
likelihood  that  the  individual  weapons  surviving  the 
ASAT  attack  will  have  the  opportunity  to  engage  high- 
vaiued  ICBMs  in  the  future. 

We  develop  algorithms  for  both  the  self  defense 
and  mutual  dcfcns~  ASAT  weapon  allocation  problems  in 
Section  3.  The  elf  defense  problem  can  be  solved 
optimally  using  a  maximum  marginal  return  (MMR) 
algorithm.  The  mutual  defense  problem,  on  the  other 
hand,  cannot  be  solved  optimally  using  this  algorithm 
We  present  in  this  paper  arguments  for  solving  the  mutual 
defense  problem  using  a  ’defense  in  depth'  strategy  where 
weapons  arc  grouped  by  value  with  the  lower  valued 
groups  assigned  lead  responsibility  for  defending  the 
higher  value  groups.  We  develop  an  extension  to  the 
MMR  algorithm  employing  the  'defense  in  depth'  concept, 
and  will  demonstrate  that  this  method  offers  significant 
improvements  in  performance  over  the  standard  MMR 
algorithm. 

SECTION  2.  PROBLEM  FORMULATIONS 
2.1  THE  MUTUAL-DEFENSE  ASAT  PROBLEM 

The  obj'cctivc  of  the  mutual-defense  ASAT 
problem  is  to  maximize  the  value  of  interceptors  on 
space-based  weapons  surviving  an  ASAT  attack  We 
assume  that  each  interceptor  on  weapon  platform  j  has 
been  assigned  a  value  V.  by  the  defense.  We  assume  that 
each  weapon  is  under  attack  by  a  set  of  ASATs,  S.,  with 
P, ,  denoting  the  probability  that  an  ASAT  i  in  S. 
surviving  the  defense  will  destroy  weapon  platform  / 
We  further  assume  that  the  defense  has  on  hand  all 
information  needed  to  compute  these  values. 

The  probability  that  a  weapon  j  survives  the 
ASATs  targeted  against  it  is: 


J 


where  the  probability  that  an  ASAT  »  destroys  weapon  j 
is  discounted  by  the  probability  that  it  itself  survives  the 
defense.  The  expected  value  of  a  weapon  following  an 
ASAT  attack  is  the  product  of  the  value  of  the  interceptors 
remaining  on  board  and  the  net  probability  that  it  survives 
the  attack:* 
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Vj(Nj  -  Ex^nO-Pgllo-Plj)  ,J)  (2-2) 


i=l 


ieSi 


j=l  - 


Under  the  mutual-defense  ASAT  problem  the 
objective  of  the  defense  is  to  maximize  the  expected  value 
of  the  interceptors  oh  board  the  weapons  surviving  the 
ASAT  attack,  leading  to  the  following  problem: 


max  f  -  xo  h/u )  p-3> 

*14  J-l  ,'1  ieSj  J-* 


subject  to  the  interceptor  availability  constraints: 


and  to  the  integrality  consraint  as  before. 

While  the  objective  function  for  this  problem  is 
noaconcave,  the  logarithm  (SD)  is  additive  and  concave  in 
Xij: 

MAX  t.ryi)  +  b(Nj-Zxii)+  XfcO-Pi./'-Pi/iJ)<2-7) 

s€  Sj  it  Sj 

subject  to  Eq.  2-6  as  before.  SD*  is  a  concave 
maximization  problem,  and  its  optima]  solution  can  be 
obtained  using  a  coordinate-ascent  algorithm  such  as  the 
Maximum  Marginal  Return  (MMR)  algorithm  (1). 
Furthermore,  we  note  that  the  optimal  solution  to  SD'  is 
also  the  optimal  solution  to  SD  because  SD  =  exp(SD') 
and  exp{-)  is  a  monotonically  increasing  function. 


Y  X  S  N. 

iti  * 


SECTION  3.  SOLUTION  ALCORI FHMS 

^  3.1  OPTIMAL  ALGORITHM FORSELF 

DEFENSE 


and  to  the  constraint  that  the  Xj  js  be  integer.. 

The  mutual-defense  static  problem  (MD-SP)  is  a 
non-con  vex  integer  programming  problem  that  is  at  least 
as  complex  as  the  general  weapon-target  assignment 
problem,  which  is  NP-complcte  [31.  Consequently,  there 
is  not  evidence  that  efficient  polynomial-umc  algorithms 
exist  that  can  locate  optimal  solutions  in  all  problem 
instances. 


2.2  THE  SELF  DEFENSE  ASAT  PROBLEM 


A  special  case  of  the  ASAT  weapon  allocation 
problem  is  where  each  weapon  defends  only  itself.  This 
condition  may  arise  when  individual  battle  managers  arc 
forced  to  operate  independently  without  recourse  to  a 
global  battle  assessment  database.  As  in  the  mutual 
defense  formulation,  we  assume  that  each  interceptor  on 
weapon  platform  j  has  been  assigned  a  value  V:  by  the 
defense.  We  further  assume  that  each  weapon  Is  under 
attack  by  a  set  of  ASATs,  St,  with  Pj :  denoting  the 
probability  that  an  ASAT  i  in  Sj  surviving  the  self- 
defense  system  will  destroy  weapon  platform  j. 
Similarly,  we  let  pj  j  denote  the  probability  that  an 
interceptor  from  weapon  j  will  desttoy  ASAT  i. 

The  objective  of  the  self  defense  (SD)  problem 
for  weapon  j  is  to  maximize  the  expected  value  of  its 
interceptors  surviving  the  ASAT  attack: 

MAX  V,(N)  -  Xxu)n0-PgO-p/iJ)  <2-» 
U  is  Sj  ie  Sj 

subject  to  the  interceptor  inventory  constrainu 


i  e  S, 


(2-6) 


We  now  present  the  MMR  algorithm  for  finding 
the  optimal  self  defense  strategy  for  an  arbitrary  weapon 
j.  We  let  X  represent  a  column  vector  having  length  equal 
to  the  number  of  ASATs  attacking  the  weapon,  and  Cj 
denote  the  column  vector  having  a  1  in  the  i1"  position 
and  zeroes  elsewhere.  Wc  also  use  IQQ  to  denote  the 
value  of  SD*  when  the  intcrtcpior-ASAT  assignments  are 
given  by  the  values  in  X-  The  MMR  algorithm  for  self 
defense  is  presented  in  Figure  I. 


X:=0: 

Optimal_Not_Found  :=  true: 
while  (Optimal_Not_Found)  do 
begin 

Maximum_Bcncfit JFound  :=  0; 
for  i  e  Sj  do 

if  Maximum_Bcncfit Jround  <  JQ£  +  e,)  -  JQQ  then 
begin 


Maximum_Bcncfit_Found  :=  J(X  +  c,)  -  J(X); 
Best.Shot  :=  i; 
aid; 

if  Maximum_BcncfitJround  >  0  then 
begin 


Xij 

Nj: 

'end; 


=  Xij 
Nj- 


+  l; 
1; 


if  (Maximum_BcncfitJ?ound  =  0)  or  (Nj = 0)  then 
Opti  maLNot JFound  :=  false; 
end; 


Figure  1.  The  MMR  Algorithm  for  the  Self  Defense 
Problem 


87 


3.2  HEURISTICS  FOR  THE  MUTUAL  DEFENSE 

PROBLEM 

Tkc  mutual  defense  problem  is  "•nidejably  more 
difficult  than  the  self  defense  problem’  .  the  objective 
function  for  mutual  defense  is  additi:  <*iid  cannot  be 
transformed  into  a  strictly  concave  motion.  This 
problem  does  have  a  particular  structure,  however,  that 
.motivates  a  heuristic  based  on  a  'defense  in  depth’  (DID) 
concept,  where  certain  weapons  take  the  lead 
responsibility  for  defending  other  weapons.  We  need  to 
take  a  moment  to  introduce  an  Important  observation  that 
support  the  DID  concept 

Let  us  suppose  that  a  weapon  k  under  attack 
from  ASAT  a  can  be  defended  by  itself  or  by  another 
weapon  k‘.  Let  us  further  suppose  we  have  partially 
assembled  a  mutual  defense  solution,  and  define  the 
following  terms  given  the  current  partial  solution 
assembled  so  fan 

Ck*  :  the  probability  that  weapon  k*  survives 
the  ASAT  attack; 

Lk(cc) :  the  probability  that  weapon  k  survives 
all  ASATs  attacking  it  other  than  a; 

Sa  :  the  probability  that  ASAT  a  will 
survive  the  defense 

The  cost  of  assigning  an  interceptor  from  weapon  k’  to 
defend  weapon  k  from  ASAT  a  is  simply: 

Vk..Ck.  (3.1) 

while  the  benefit  obtained  by  the  defense  in  sclccung  this 
assignment  is: 

\(v.XxuK(“>pa.k  sa  P„k.  «-J> 


Similarly,  the  cost  of  assigning  an  interceptor  from 
weapon  k  to  defend  itself  from  ASAT  a  is: 

Ma)[l-P,kSa(l-Pak)]  <3-3) 

while  the  benefit  obtained  by  the  defense  in  selecting  this 
assignment  is: 

(3-4) 


Let  us  now  suppose  that  it  is  better  to  use  an 
interceptor  from  weapon  k'  to  defend  weapon  k  from 
ASAT  a  rather  than  have  weapon  k  defend  itself, 
implying  the  following  inequality: 

’ivXOviV'.P.r  ■  W-Ck  > 

1*1 


vk(^-Xxtt)V“)PoisaPak 

1*1 

v«)L*-p  vs  (1-p  j] 

*  *-  aX  a  aX  J 


or,  re-arranging  terms: 

Lk(a)  -  Vjr*  •  Cjr’  > 

vk(v.X\l  +  0  ij«p  sapak 

1  =  1 

-  sa  poi.  (3-6) 

(Note:  this  inequality  docs  not  imply  that  the  defense 
should  commit  an  additional  interceptor  to  the  defense  of 
weapon  k,  only  that  it  prefers  to  do  so  using  an 
interceptor  from  weapon  k'  rather  than  one  from  weapon 
k.)  Suppose  the  defense  docs  indeed  assign  one 
interceptor  from  weapon  k’  to  defend  weapon  k  against 
ASAT  a.  The  probability  of  survival  for  ASAT  oc, 
S„,  is  now  reduced  by  a  factor  of  1  -  pa  j.-,  affecting 
only  the  righthand  side  of  Eq.  3-6  and  leaving  the  direction 
of  the  inequality  the  same  as  before.  This  observauon  can 
be  summarized  as  follows: 

If,  at  some  iteration  :n  the  development  of  the 
mutual  defense  solution,  weapon  k  is  best 
defended  by  weapon  k'  than  by  one  of  its  own  ‘ 
interceptors,  then  this  preference  will  exist 
throughout  the  completion  of  the  solution.  . 

This  observation  is  the  motivation  for  mutual 
defense  ASAT  weapon  allocation  algorithms  based  on  a 
'defense  in  depth'  (DID)  concept,  where  certain  weapons 
comprise  the  first  line  of  defense  against  ASATs.  The 
weapons  comprising  the  first  line  of  defense  arc  assigned 
no  survival  value  (i.c„  the  defense  reaps  no  benefit  if 
those  weapons  themselves  survive  the  ASAT  battle 
intact),  while  the  defended  weapons  engage  in  self  defense 
should  the  ASATs  survive  the  first  line  of  defense.  The 
DID  concept  divides  the  mutual  defense  problem  into  three 
subproblcms:  (1)  finding  the  optimal  partitioning  of 
weapons  into  the  first  and  second  lines  of  defense,  (2) 
finding  the  best  allocation  of  interceptors  to  ASATs  for 
those  weapons  comprising  the  fust  line  of  defense,  and  (3) 
finding  the  best  self-defense  solution  for  the  defended 
weapons  should  the  first  line  of  defense  fail. 

The  first  subproblcm  is  NP-compIcte  when  the 
second  and  third  subproblcms  arc  counted  as  one 
computation,  and  is  therefore  a  nontrivial  problem  in  its 
own  right.  Nevertheless,  special  characteristics  of  space- 
based  weapons  suggest  some  guidclincs.for  partitioning 
weapons  at  the  moment  that  an  ASAT  attack  occurs.  For 
example,  weapons  mos  ing  in  a  positive  ascension  towards 
the  North  Pole  will  not  be  in  position  to  engage  lCBMs 
that  appear  shortly  after  the  ASATs,  and  therefore  should 
be  placed  jn  the  first  line  of  defense.  Similarly,  wcajxms 
moving  in  the  opposite  direction  will  be  in  ideal  positions 
‘to  engage  a  subsequent  ICBM  attack,  and  should  be  placed 
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in  the  second  line  of  defense.  We  are  presently  examining 
several  heuristics  for  solving  this  first  subproMcm,  and 
will  report  on  these  in  a  later  paper. 

The  second  subproblcm  leads  to  the  following 
preferential  defense  o’ptimizau'on  problem: 

max  x  v,  n  [i-Pi j  n  o-pi.t)  p-7) 

jel1  i  e  S,  ten 

where  D  and  P  denote  the  weapons  comprising  the  first 
and  second  lines  of  defense,  respectively.  This  problem  is 
also  nontrivial  to  solve  [2,  4],  suggesting  that 
polynomial-ttme  algorithms  will  yield  sub-optimal 
solutions  at  best.  Our  current  algorithm  for  this  problem 
ts  based  on  the  MMR  algorithm  we  presented  in  Figure  1 
for  the  self-defense  problem;  we  report  on  its  solution 
efficacy  in  the  next  section.  Recently,  Castanon,  et  al.  (4) 
have  developed  several  algorithms  that  are  superior  to 
MMR  for  solving  this  preferential  defense  problem.  We 
plan  to  incorporate  those  algorithms  into  our  analyses  and 
report  our  findings  at  a  later  date. 

3.3  A  SIMPLE  COMPUTATIONAL  EXAMPLE 

We  use  a  simple  example  to  compare  solutions 
yielded  by  self  defense,  mutual  defense  and  Defense-in- 
Depth  mutual  defense  algorithms.  We  consider  the  2 
weapon/3  ASATproblcm  described  in  Table  1;  Weapon  1 
has  5  interceptors  and  is  being  attacked  by  2  ASATs, 
while  Weapon  2  has  2  interceptors  and  is  being  attacked 
by  a  single  AS  AT.  The  DID  mutual  defense  strategy  will 
place  Weapon  2  in  the  first  line  ot  defense,  commit  its 
two  interceptors  to  the  defense  of  Weapon  1,  and  leave 
Weapon  1  to  engage  in  self  defense  against  any  ASAT 
surviving  the  first  lino  of  defense.  This  strategy  yields  an 
expected  interceptor  survival  value  of  3.4. 

The  mutual  defense  strategy  without  DID  will 
conclude  when  it  selects  its  first  interceptor  assignment 
that  Weapon  1  has  less  than  a  10%  probability  of  survival 
if  a  single  interceptor  is  committed  to  us  defense. 
Conversely,  it  will  conclude  that  Weapon  2  has  a  good 
chance  of  surviving  intact  if  a  single  interceptor  from 
Weapon  1  is  used  for  its  defense.  Consequently,  the 
MMR  algorithm  is  thrown  off  the  path  leading  to  the 
opumal  solution  at  the  very  first  iteration,  and  proceeds  to 
•ommit  all  five  interceptors  from  Weapon  1  to  the  defense 
ot  Weapon  2,  yielding  an  expected  interceptor  survival 
value  of  1.922. 

The  self  defense  strategy  results  in  Weapon  I 
assigning  one  interceptor  apiece  to  the  ASATs  threatening 
it,  and  Weapon  2  not,  and  Weapon  2  not  defending  itself 
at  all.  This  strategy  yields  an  expected  interceptor 
survival  value  of  1.6. 

In  short,  the  survival  value  from  the  optimal 
mutual  defense  solution  is  more  than  twice  that  obtained 
by  the  self  defense  solution,  ar.d  77%  larger  than  the 
solution  obtained  by  mutual  defense  without  Defense-in- 
Depth. 


SECTION  4.  COMPUTATIONAL  RESULTS 

We  now  present  performance  results  for  the 
ASAT  weapon  allocau'on  algorithms  (self  defense,  mutual 
defense  and  mutual  defense  with  DID)  described  above. 
These  algorithms  were  tested  on  problem  sets  specially 
constructed  to  evaluate  performance  under  conditions 
whcre.weapons  enjoy  rclauve  advantages  over  ASATs,  and 
vice  versa.  Our  purpose  in  constructing  these  problem 
sets  was  to  determine  whether  or  not  certain  problem 
instances  defeat  any  one  or  all  three  of  these  algorithms. 

The  test  eases  are  divided  into  four  blocks.  The 
objectives  of  Blocks  I  thru  III  are  to  compare  the 
performance  of  the  MMR  algorithm  for  mutual  defense 
without  DID  against  the  performance  obtained  by  the 
MMR  algorithm  when  the  weapons  engage  exclusively  in 
self  defense.  Here,  we  are  comparing  sub-optimal 
solutions  obtained  using  a  superior  problem  formulation 
(MMR  for  mutual  defense)  to  optimal  solutions  obtained 
using  an  inferior  problem  formulation  (MMR  for  self 
defense).  It  is  our  hypothesis  that  the  real  determinant  of 
performance  is  not  the  choice  of  algorithm,  but  the  choice 
of  formulation:  MMR  for  mutual  defense  should 
outperform  MMR  for  self  defense. 


WEAPON  1 

WEAPON  2 

ASAT1 

0.4 

0.9 

0.3 

0.0 

ASAT  2 

0.4 

0.9 

0.8 

0,0 

ASAT  3 

0.4 

0.0 

0.8 

0.5 

INTERCEPTORS 

5 

2 

Table  1.  Parameters  for  the  2  Weapon/3  ASAT  Example 
(wcapon-ASAT  kill  probabilities  appear  in  the  upper 
lefthand  comers,  ASAT-wcapon  kill  probabilities  appear  in 
the  lower  righlhand  corners) 

’.Tie  objective  of  the  Block  IV  test  ease  is  to 
compare  the  performance  of  algorithms  for  mutual  defense 
with  and  without  DID.  The  DID  concept  actually  forces 
the  defense  to  invest  interceptors  to  the  defense  of  high- 
valucd  weapons,  even  when  the  initial  investor  nts  appear 
to  offer  little  payoff.  Given  the  non  concave  nature  of  the 
mutual  defense  problem,  these  initial  investments  can 
place  the  defense  in  a  position  where  subsequent 
interceptor  commitments  reap  very  largo  payoffs  in 
effectiveness.  It  is  ur  hypothesis,  then,  that  the  DID 
concept  should  outperform  mutual  defense  without  DID. 

4.1  PERFORMANCE  RESULTS  FOR  TIIE 
BI.OCKITEST  CASES 


The  Block  I  test  eases  were  conducted  for  both 
the  MMR  mutual  defense  and  MMR  self  defense 
algorithms  for  varying  ASAT-to-weapon  rauos.  The  tests 
cases  involve  10  weapons  with  15  interceptors  apiece, 
weapon-ASAT  probabilities  of  kill  of  0.6,  and  ASAT- 
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weapon  probabilities  of  kill  of  0.7.  The  performance 
results  for  this  block  arc  presented  in  Figure  2.  Mutual 
defense  is  always  superior  to  self  defense,  and  confers  a 
higher  relative.value  to  the  defense  against  ASAT-rich 
attacks.  This  latter  characteristic  is  easily  explained:  no 
one  weapon  has  enough  interceptors  to  successfully  defend 
itself  in  an  ASAT-rich  environment,  but  one  or  more 
weapons  acting  in  concert  can  successfully  defend  a  single 
weapon. 


4.3  PERFORMANCE  RESULTS  FOR  THE 

BLOCK  H  TEST  CASES 

The  objective  in  the  Block  II  test  cases  is  to 
compare  mutual  defense  against  self  defense  under  varying 
weapon-ASAT  probabilities  of  kill.  Like  the  Block  I 
experiments,  these  test  cases  involve  10  weapons  with  15 
interceptors  apiece,  and  ASAT-weapon  probabilities  of 
kill  of  0.7;  the  AS AT-to-wcapon  ratio  is  3:1.  The 
performance  results  for  this  block  are  presented  in  Figure 
3.  As  in  Block  I,  mutual  defense  is  always  superior  to 
self  defense,  and  confers  its  highest  value  to'  the  defense 
when  the  defense  cannot  engage  ASATs  with  a  high 
probability  of  kill.  This  latter  characteristic  follows  for 
the  same  reasons  that  self  defense  is  inferior  to  mutual 
defense  in  an  ASAT-rich  environment. 


Figure  2.  Comparative  Post-AS  AT  Attack  Defense  Value 
Surviving  for  the  Block  I  Tests 
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Figure  3.  Comparative  Post-ASAT  Attack  Defense  Value 
Surviving  for  the  Block  11  Tests 


4.4  PERFORMANCE  RESULTS  FOR  THE 

BLOCK  HI  TEST  CASES 

The  objective  in  the  Block  III  test  cases  is  to 
compare  mutual  defense  against  self  defense  under  varying 
spreads  in  weapon  value.  Intuitively,  the  defense  should 
prefer  mutual  defense  when  there  is  a  clear  distinction  in 
weapon  values,  since  low-valued  weapons  can  be 
committed  to  the  defense  of  high-valued  weapons.  These 
test  cases  involve  30  weapons  with  15  im.rceptors  apiece, 
weapon-ASAT  probabilities  of  kill  of  0.6,  ASAT- 
weapon  probabilities  of  kill  of  0.9,  and  an  ASAT-to- 
weapon  ratio  of  3:1.  The  performance  results  presented  in 
Figure  4  confirm  our  intuition.  While  the  absolute 
performance  of  the  self  defense  strategy  decreased  with 
larger  spreads  in  weapon  value  in  these  experiments,  wo 
believe  this  is  an  artifact  of  the  Monte-Carlo  methods  used 
here.  An  examination  of  Eq.  2-7  reveals  that  weapon 
value  docs  not  influence  the  weapon  allocation  for  self 
defense.  The  weapon  probabilities  of  survival  following 
the  ASAT  attack  should  be  statistically  the  same  for  all 
weapons,  and  thereby  leave  the  overall  expected  surviving 
value  unchanged  if  the  distribution  of  weapon  values  arc 
not  skewed  about  the  mean  value. 


WKAIOS  VALUE  STASOARDCUVlATION 


Figure  4.  Comparative  Post-ASAT  Attack  Defense  Value 
Surviving  for  the  Block  III  Tests 

4.5  PERFORMANCE  RESULTS  FOR  THE 

BLOCK  IV  TEST  CASES 

The  objective  of  the  Block  IV  test  case  is  to 
compare  the  performance  of  algorithms  for  mutual  defense 
with  and  without  DID.  Assuming  a  rationale  offense,  we 
would  expect  to  sec  the  ASAT  attack  concentrated  around 
the  high-valued  weapons,  leaving  these  weapons  with  low 
probabilities  of  survival  if  a  defense  is  not  taken  on  their 
behalf.  This  creates  a  misleading  impression  that  the 
interceptors  on  board  those  weapons  have  a  low  expected 
value  following  the  ASAT  attack.  Consequently,  an 
unsophisticated  mutual  defense  algorithm  may  conclude 
the  defense  has  nothing  to  lose  by  letting  those  high- 
valued  weapons  engage  in  self  defense.  The  DID  concept, 
however,  forces  the  defense  to  invest  interceptors  from  one 
set  of  weapons  to  the  defense  of  high-valued  weapons, 
even  when  the  initial  investments  appear  to  offer  little 
payoff.  Given  the  non-concave  nature  of  the  mutual 
defense  problem,  these  iniua!  investments  can  place  the 
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defense  in  a  position  where  subsequent  interceptor 
commitments  reap  very  large  payoffs'  in  effectiveness. 

The  Block  IV  test  cases  involve  a  set  of  15 
weapons  having  interceptors  worth  10  units  apiece  and  a 
second  set  of  15  weapons  having  interceptors  worth 
nothing;  weapons  in  both  sets  each  have  10  interceptors. 
With  a  value  of  zero,  the  weapons  in  the  second  set 
naturally  comprise  the  first  line  of  defense  under  a  DID 
strategy.  Letting  Pj  and  p£  denote  the  average  weapon- 
ASAT  probability  of  kill  for  the  weapons  in  die  first  and 
second  sets,  respectively,  we  examine  mutual  defense  with 
and  without  DID  for  varying  ratios  of  Pj:  Pj.  DID 
strategics  offer  no  advantage  over  strategies  not  using  DID 
when  this  ratio  is  equal  to  0  since  the  weapons  designated 
for  the  first  line  of  defense  arc  completely  ineffective 
against  the  ASATs.  We  also  expect  DID  strategics  will 
offer  little  relative  advantage  when  this  rauo  is  equal  to  1 
since  the  mutual  defense  strategy  will  not  require  the 
special  constraint  implied  by  DID  to  conclude  that  low- 
valued  weapons  arc  best  used  in  the  defense  of  high-valued 
weapons. 

The  results  presented  in  Figure  5  support  our 
conjectures  Suipnsmgly,  however,  mutual  defense  using 
a  DID  strategy  outperforms  mutual  defense  without  DID 
when  the  Pi;  P2  ratio  is  as  high  as  0.8,  meaning  that  the 
mutual  defense  strategy  unaided  by  the  DID  constraint  will 
fad  to  protect  high-valued  weapons  using  low-valued 
weapons  that  have  favorable  chances  of  intercepting 
ASATs. 


The  allocation  problem  for  the  weapons  comprising  the 
first  line  of  defense  is  quite  a  difficult  problem;  the 
allocation  problem  for  the  defended  weapons  engaging  in 
self-defense  is  trivial  in  view  of  our  comments  above. 

We  presented  a  simple  computational  example 
suggesfing  both  that  self-defense  is  inferior  to  mutual 
defense,  and  that  DID  seems  to  be  a  preferred  strategy  for 
conducting  mutual  defense.  We  then  corroborated  this 
finding  with  additional  computational  results  based  on 
large  scale  problems.  These  results  demonstrate  that 
mutual  defense  is  consistently  superior  to  self  defense  over 
a  wide  range  of  scenarios.  Self  defense  commits 
interceptors  to  too  many  ASATs  to  achieve  an  effective 
defense  for  the  weapons.  Mutual  defense,  on  the  other 
hand,  lets  one  or  more  weapons  act  in  concert  to  assure 
the  survival  of  another  weapon,  and  thereby  focuses  the 
use  of  defense  resources  to  good  effect. 

Our  results  also  demonstrate  that  defense  in  depth 
(DID)  can  be  a  very  effective  concept  for  mutual  defense. 
Just  as  mutual  defense  focuses  the  wcapon-ASAT 
allocations  to  specific  objectives,  DID  does  not  commit 
high-valued  weapons  to  self  defense  before  exhausting  all 
of  the  mutual  defense  opportunities  offered  by  low-valued 
weapons.  We  know  that  the  mutual  defense  problem  is 
nonconvex,  and  has  many  locally  optimal  solution, 
therefore  the  choice  of  an  initial  solution  in  the 
neighborhood  of  good  locally  optimal  solution  is  critical 
to  algorithm  performance.  We  have  demonstrated  that  the 
Defcnsc-In-Dcpth  doctrine  yields  such  a  choice. 
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Figure  5.  Comparative  Post-ASAT  Attack  Defense  Value 
Surviving  for  the  Block  IV  Tests 

SECTION  5  SUMMARY 
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5.1  CONCLUSIONS 


We  presented  three  algorithms  for  the  ASAT 
weapon  allocation  problem  in  this  pape.,  all  algorithms 
arc  based  on  the  principle  of  maximum  marginal  return 
(MMR),  The  self  defense  problem  is  actually  a  trivial 
problem  to  solve,  and  can  be  solved  optimally  using  an 
MMR  algorithm.  The  mutual  defense  problem  is 
considerably  more  difficult,  but  it  has  a  particular  structure 
that  motivates  algorithms  based  on  'defense  in  depth' 
(DID)  concept  where  certain  ycapons  take  lead 
responsibility  for  defending  other  weapons.  The  weapons 
comprising  the  first  line  of  defense  arc  assigned  no 
survival  value  and  the  defended  weapons  engage  in  self 
defense  should  the  ASATs  survive  the  first  line  of  defense. 
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This  ."c?cr  contfrues  the  past  effort  os  the 
part  cf  the  author  in  establishing  aa  approach  to  a 
general  theory  of  C3  processes  and  an  ensuing  de¬ 
cision  gace.  Previous  work  is  corrected,  codified, 
and  extended  here.  An  outline  of  a  general  C3  de¬ 
cision  game  is  first  presented,  utilizing  as  an  in¬ 
tegral  part,  a  forcal  theory  describing  the  evolu¬ 
tion  of  a  typical  C3  node  state  vector.  The  deter- 
aination  of  the  C3  decision  gaze  also  requires  an 
algebraic  logic  description  pair  assigned  to  the 
forcal  theory,  such  as  probability  logic  cr  fuzzy 
logic,  depending  cn  the  type  cf  information  con¬ 
sidered.  In  the  probability  logic  case,  a  general 
result  concerning  uniform  approxicaticn  by  linear- 
gaussian  mixtures  of  distributions  is  presented. 

This  is  shown  to  have  potentially  good  applications 
for  carrying  out  reduced  calculations  of  evolving 
node  state  distributions,  as  functionals  cf  pertin¬ 
ent  distributions  of  various  C3  variables  and  re¬ 
lations. 

1.  IMTPCDUCTIOM 

For  the  past  ten  years  or  so,  C3  as  an  organ¬ 
ized  discipline  has  evolved  greatly  from  the  fledg¬ 
ling  concepts  of  J.  Lawson,  H.  Athans,  and  others, 
as  presented  in  the  Proceedings  of  the  First  MIT/ 
ESL-O'iP.  Workshop  on  Distributed  Corcuni cation  and 
Decision  Problems  [1],  to  the  uuch  core  sophistica¬ 
ted  views  presented  In  the  succeeding  Proceedings 
of  the  1988  Coccand  and  Control  Research  Symposium 
sponsored  by  the  Joint  Directorate  of  Laboratories 
[2]. 

In  addition  lo  the  seainal  work  presented  in 
the  Proceedings  during  the  eight  years  of  the  MIT/ 
C!iR  Workshop  on  C3  Systems  (fran  the  First  to  the 
Ninth)  and  in  the  Proceedings  of  the  past  two  years 
of  the  Ccreand  and  Control  Research  Symposium,  other 
basic  sources  for  unclassified  unlicited  analysis 
of  general  C3  systems  if elude: 

fl)  C3  Handbook  (Joint  Directorate  of  Laboratories) 

(3]  .  where  a  large  nueber  of  abstracts  ard  surraries 
of  C3  published  papers  are  collected  along  with  a 
number  of  critical  reviews,  comparisons,  and  con¬ 
trasts. 

(2)  Proceedings  of  the  British-based  Conference  on 
Corrar.d,  Control,  Communications ,  and  Management  In¬ 
formation  Systems  (4]  ard  related  publications. 


(3)  Special  Is  see  ca  Isfcmtfce  Tecieolcgy  for 
Cssud  Z2&  (totrel ,  IEEE  Transactions  ca  Systems, 
Kao,  z=d  Cybernetics  [51. 

(4)  Science  cf  Ccasaad  izd  Ccctrcl  (;i££A)[£;,  ex¬ 
hibiting  selected  papers  free,  pres 'italics*  at  tit 
teed  and  Ccctrcl  research  Syrjcste.  In  additfee, 
see  t ha  AK£*  magazine  Sircal  for  easy  ocatcchsica* 
papers  cn  Cr. 

(5)  Cccsasd  and  Ccctrcl  Evaleaticm  Workshop  (Pro¬ 
ceed  iegs)  spessar^  by  tie  Military  Operations  re¬ 
search  Society  [7] 

(6)  El  erects  of  C r  Theory  [3], 

(7)  Proceedings  fer  Quantitative  Assessment  of 
utility  cf  Cocoa cd  and  Control  Systems  [$]. 

For  a  brief  cvenrfe*  of  tie  more  important 
papers  free  the  KI7/02  Workshop  cn  C3,  up  to  l?t£, 
see  Goodman  [13].  More  recently.  K.L.  Van  Trees  (in 
this  issue  [11])  has  presented  an  excellent  critical 
analysis  of  the  state-of-the-art  of  C3  work. 

Based  upon  all  of  the  abcve-cecticned  studies 
of  C3  systems,  cne  can  conclude  that  past  ard  cur¬ 
rent  work  in  this  area  can  be  divided  roughly 
into  ike  following  taxonomy: 

A.  C3  systems  -el afire  U  1  rar-e  sf'ate^ies, 

global  and  political  ramifications,  ard  high-level 
planning.  , 

B.  Tactical  cr  mid-level  C*  systems  process¬ 
es,  emphasizing  the  actual  dynamics  cf  C-  events 
during  typical  engagements.  Kcte.  Throughout  this 
paper,  lit'-le  or  no  distinction  is  cade  tetweer  tie 
use  of  the  teres  "systems'  ard  'processes',  nor  be¬ 
tween  'ceasures-of-effectiveress  (MC£"s)  ard  ’rea;- 
ures-ef-perforcance*'  (ItP's).  However,  for  a  differ 
er.t  viewpoint,  see  e.g.,  Ketersky  [Kj. 

1.  Qualitative  studies,  emphasizing  the  use  of 
graphs,  flcw-cbarts,  awl  verbal  descriptions. 

2.  Quantitative,  emphasizing  numerical  reasures 
or  algebraic  relations,  usually  centered 
about  the  stochastic  state  space  approach. 

a.  Aspect-oriented  quantitative  vorl,  where 
o.je,  cr  possibly  core,  particular  facets 
of  tactical  C3  processes  are  considered. 
Typical  examples  of  this  are.  surveil¬ 
lance  and  track! rg/correla tier,  tactics 
for  a  particular  class  cf  scenarios;  de¬ 
ployment  for  air-to-ground  ccnfl:cli , 
determination  cf  KCf*s  for  O'*  systems; 
resource  allocation  cf  treops  or  weeper, 
studies;  cccronfcaticr.i  ar  a  lysis,  C  d*- 
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Scfffce  ft  to  52j,  tie  rest  a^rity  of  es*«- 
er  is  Cr  2£i1jsis  bis  beta  directed  to  Z\£2z,  zed 
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2=d  22i.  Certaicly,  cpalitatire  s todies  are  still 
very  useful  d=e,ect  cdj  to  tie  feierestly  great 
complexity  of  C3  systems^  tat  also  slate  fcesrlstlc 
axalysfs  cast  always  precede  2x7  quantitative, 
firrtierar?,  ipestiutitc  ii^ct-criested  wri:  Is 
also  of  price  lopcrtaace,  sioce  tie  varices  parts 
cf  tie  wtole  C3  pfctcre  are  themselves  cfcallesgfcs 
aad  coplexjTCileas.  CaJerstacdfcg  of  tie  bits  acd 
pieces  of  C3  camcot  tot  ccatrficte  to  tie  eat  ire 
viev.  Kerertieless,  It  is  tie  comtesiica  tore  tiat 
cere  efforts  cost  be  cade  to  discern  tie  general  pat¬ 
ters  of  C3  djsarfcs,  before  C"  work  is  to  gain  the 
stator*  of  other  scientific  disciplirxs- 

Fcr  sice  attempts  at  cccsidericg  C r  tactical 
processes  as  a. stole  entity,  see  e.g.,  tie  indepen¬ 
dent  work  of  Icgber  £12]  and  &b1n  aniKayk  [13J,  as 
well  as  follcv-u?  papers  by  these  authors  in  the 
Proceedings  of  the  HIT/0X2  Workshop  ca  C3  Systems 
and  these  Proceedings.  Ingtor's  approach  to  the 
gobies  is  a  mesoscopic-macroscopic  one,  considering 
Cr  systems  analogous  to  systems  of  interacting  mole¬ 
cules  or  neurons,  suitably  codified  and  analyzable 
from  a  statistical  cechanics  viewport*  0*1  the  other 
band,  Kubin  and  Kayk's  approach  is  cere  nicrosccpfc 
in  nature,  also  utilizing  a  purely  stochastic  tech¬ 
nique,  originally  centering  abcut  ncserical  supply 
and  attrition  levels-  generalizing  the  well-known 
lanchester  equations  for  cutual  growth  and  dicay  of 
interacting  populations.  Although  the  thrust  of 
their  work  has  greatli-expanded,  modeling  of  the 
internal  behavior  of  C*  rode  completes  of  decision- 
cakers  is  not  explicitly  taken  into  account,  as 
Levis  and  others  have  dene  £14], [15].  There,  the  be¬ 
havior  of  individual  decision-makers  and  their  con¬ 
straints  and  interactions  with  others  are  rodeled 
froa  an  organizational  vicwpoi.it,  utilizing  in  one 
key  part  tenant's  decomposition  of  entropy,  as  well 
as  other  criteria.  [Set  also  the  subsequent  papers 
ty  Levis  and  his  students  at  the  Laboratory  for  In- 
fereatfon  and  Decision  Systems  (LIDS),  MIT  in  these 
Proceedings  ard  those  of  the,  KIT/GNR  Workshop  on 
C-  Systems.) 

With  relatively  codtst  chances,  one  can  attempt 
to  model  the  entire  tactical  C3  process,  using  indi¬ 
vidual  node  structures  and  states  as  the  basic  build- 
ing  blocks,  without  necessarily  caking  stochastic 
assumptions.  1°  particular,  the  author  has  proposed 
such  an  approach  116],  with  a  follow-up  paper  £17] 
elaborating  upon  the  use  of  non-prcbabflistlc  models 
in  C3  analysis.  Much  of  this  was  based  on  previous 
work  concerning  the  modeling  and  cosbinfng  of  un¬ 
certainties  arriving  froc  possibly  disparate  sources, 
stochastic  or  linguistic  [18].  (See  also  £13]  for  a 


practical  izcltxecUtisz  cf  soi  2a  approach  for 
tozckleg  zed  csrreletfca  cf  cata.) 

2 .  SCCSz.  CF  7 ?££S£K7  1CSZ 


As  stated  earlier,  tbe  cartel  task  Is  aa  i> 
provercat  zed  esla^geseat  cf  tbt  peerless  efforts 
is  establish! eg  aa  ever*!!  model  for  C3  fades 

m.vn. 

7be  basic  9 cal  of  tils  «per  is  twofold: 

(1)  To  shew  tactical  C3  processes  caa  te  react¬ 
ed  within  a  52x2  theory  settle,  esfeg  a  feral  sys¬ 
tem  cf  axioms,  capturing  a  ciaiallj  required  carter 
cf  relations  azeeg  Cr  variables  aad  eperaters. 

(2)  To  provide  aa  outline  for  a  feasible  icple- 
ceatatica  cf  this  pregrar,  as  aa  aid  fa  designing 
acd  predlcticg  global  behavior  cf  C3  systems. 

Xa  cede ling  cf  C"  processes,  cce  cast  alleys 
te  aware  that  fidelity  cf  a  theory  cost  be  traded- 
off  with  complexity  cf  resulting  computations  re- 
cp i red  for  implementation.  With  this  in  dad,  it  is 
the  thesis  here  that  cue  should  still  attempt  to 
first  model  C3  processes  as  a  whole-  despite  the 
complexities-  ard  then  seek  reasonable  reductions 
cf  cccpGtaticcs.  - 

la  section  3,  the  basic  Cr  model  is  developed 
as  a  decision  game.  This  requires  five  stops: 

(i)  Choice  of  a  set  of  axioms  involving  rele¬ 
vant  C3  variables  ard  operators,  so  that  a  formal 
description  of  dynamically  evolving  code  states  can 
be  obtained. 

(ii)  Choice  of  an  algebraic  logic  description 
pair  for  evaluating  numerically  the  formal  theory 
developed  in  step  (i). 

(Hi)  Specification  of  an  averagirc  p*xcedcre 
relative  to  all  C3  node  state  evaluations  in  (ii). 

(iv)  Use  outputs  of  (iii)  to  deteraine  the  over¬ 
all  ■health"  state,  i.e.,  tendency  for  winning,  of 
each  C3  system. 

(v)  Use  the  figures-of-nerit  In  (iv)  to  define 
the  overall  loss  function,  and  hence,  C3  decision 
gace. 

As  in  previous  work,  C3  processes  here  are 
viewed  as  interacting  networks  of  node  complexes  of 
decision-rakers.  Relevant  Cr  variable;  are  first 
identified,  including  nodal  ones  such  is  equations 
of  notion,  attrition  level,  detection  state,  algo¬ 
rithm  selection,  and  hypotheses  evaluations.  Other 
C3  variables  treated  Involve  the  reception  of  sig¬ 
nals  or  inccoing  exploding  weapons,  and  toe  response 
following  data  processing.  In  addition,  logical  cp 
orators,  such  as  conjunction,  disjunction,  and  nega¬ 
tion,  and  conditioning  operators  among  l  variables 
are  also  taken  Into  account.  To  implement  step  (i), 
a  collection  of  axioms  is  presented  in  section  i, 
formally  reproducing  the  essential  relations  among 
C3  variables  and  operators.  These  axioms  codify  and 
extend  analogous  ones  presented  fn  [16].  These  ax¬ 
ioms  reflect  the  typical  time  cycle-  somewhat  sim¬ 
plified-  of  a  node,  beginning  with  the  reception  of 
arriving  "signals*,  i.e.,  information,  weapons,  or 
any  other  incoefng  entity  or  entities  which  can  pro¬ 
voke  change  in  the  node  state,  followed  by  infonn- 
ation  processing  and  related  activity,  ending 
with  the  time  of  output  response  by  the  node  to 
other  nodes,  friendly  or  adversary.  With  the  formal 
language  established  through  the  axioms,  using  the 


s Usdard  rales  cf  dcdccifca,  a  basic  t Ucrtx  is  der¬ 
ived  (TUcree  4-1),  sivieg  a  feral  decriftfce  cf 
tie  dyxarfc  erclcticc  cf  a  typical  code  state  vector 
at  tie  ted  cf  tfce  icpet-ostpwt  cycle  as  a  fmretlcsal 
of  the  lire  cede  state  at  tie  beginning  of  tie  cycle 
just  pricr  to  the  receptiw  of  tie  'signal"  and  of 
all  otter  pert  fact  C*  variables.  This  leads  icmedi- 
ately  to  a  recursive  fera  for  each  rode  state's  evo¬ 
lution,  beginning  with  tte  original  initialization 
cf  tte  C3  systes. 

Is  step  (ii)  an  algebraic  logic  descrfpticapafr 
(AIX7)  is  chosen,  compatible  with  the  above  fomal 
descriptions,  in  order  to  obtain  the  full  quantitz- 
tive  evaluation.  Typically,  probability  logic  can 
play  this  role,  tot  in  order  to  utilize  linguistic- 
based  and  other  types  of  information,  other  logics 
can  he  used  jest  as  veil,  such  as  Zadeh's  fuzzy 
logic  or  Dcpster-Shafer  belief  logic.  A  scheme  is 
presented  for  utilizing  these  evaluations  in  a  seb- 
optical  cr  cardinal  sense  as  inputs  to  an  overall 
two  'person*  (actually,  friendly,  vs  adversary  Cr 
processes)  decision  care.  For  rcre  details  cn  steps 
(iii)-(v),  see  the  concluding  part  of  section  3. 

By  choosing  probability  logic  for  irolerer.ta- 
ticn,  3  fundamental  result  (Corollary  5:2)  can  be 
invoked  which  is  of  potentially  good  use  in  evalu¬ 
ating  the  overall  dyraric  evolution  cf  C3.  node 
states.  Section  5  presents  the  details  of  this, 
where  essentially,  a  uni  fora  close  approximation 
by  finite  lir.ear-gaussfen  mixtures  cf  distributions 
can  be  used  to  represent  distributions  of  C3  vari¬ 
ables  and  in  turn  the  evolving  node  states. 

Finally,  section  6  presents  a  brief  discussion 
for  application  of  the  model  'r.  nigral  sr<*  to  a 
simplified  inner-outer  air  battle  scenario,  in  par¬ 
ticular. 

3.  THE  C3  CECISIOKCRKE 

In  all  that  follows,  for  slcplicfty,  suppost 
that  only  two  C3  processes  are  being  considered: 
one  friendly  and  one  adversary. 

There  are  three  types  of  variables  describing 
a  C3  process: 

II,  rode  complex  variables,  representing  the 
decision-takers,  huran  or  automated,  and  their  im¬ 
mediate  environment, 

S,  input  "slcnaV*  variables,  where,  as  explain¬ 
ed  before ,  *^1 gnat ^  need  not  refer  to  just  an  ordin¬ 
ary  array  of  incceing  information,  but  cay,  as  well, 
dcrote  Incoming  activated  weapons  or  ether  disturb¬ 
ances  to  the  initial  node  conplex, 

R,  rode  outcut  re*  torses immediately  follo-'i-'j* 
t!c  cccplete  "signal'  processing. 

Symbol ical!y,*cne  can  represent  the  temporal 
relation  among  K,s,R,  as 

•  -Rh-S-K-R-'S-K-R-S  —  "  ,  (3.1) 

regardless  of  the  particular  rodes  Interacting  with 
other  nodes  and  the  KulttpUcity  of  "si seals"  and 
responses.  In  seneral,  an  arriving  "signal*,  orig¬ 
inates-  possibly  free  several-nodes  K  as  Intlal  re¬ 
sponses  R,  but  due  to  interceulate  redia  oistcrtlon 
•  and  change  becores  S.  See  Figure  1  for  a  typical  ex¬ 
ample  of  a  process,  showing  how  one  can  scope 
out  the  roles  of  "signals",  responses,  and  nodes. 


Qualitative  Aspects 


SrtpMf'OajiMntoj 


A4*nxyaSkit 


Figure  1.  External  Dynamics  of  C*  Processes:  SimplSed 


Variables  K,S,R  can  be  indexed  -  s."-  or  su.cr- 
to  indicate  the  particular  C3  process,  friendly  or 
adversary,  the  s;ccific  rode  involved,  and  the  tiee. 
Kode  variables  can  be  decccposed  into  first, two 
parts,  with  sisilar  recarks  bolding  for  indexing  of 
these  and  all  subsequent  decompositions  of  the  main 
variables  into  subvariables: 

K  *  (K  ,  7  )  (3.2) 

where  N  represents  the  node  state,  while  T  repre¬ 
sents  the  internal  node  structure.  See  Figure  2  fer 
an  illustration  cf  r.  typical  node  structure  (rel¬ 
ative  to  the  processing  of  inccning  'signals").  Sec 
Figure  3  for  the  basic  evolution  cycle  due  to  the 
processings  a  "signal"  as  in  Figure  2.  Cote  i*e 
superscripts  ()",()  to  indicate  relative  tines 
and  (5 j P” )  to  indicate  conditioning.  For  sfoplicliy, 
changes  are  only  roted  at  times  of  respcr.se  ard 
times  of  reception,  following  ccdiix  distorticr  of 
re»pcrffs. 


Figure  2.  Internal  Dynamics  ol  C*  Processes.  Simplified 


Typically,  node  states  1nvoive;threet  KveH, 
numbers  of  treeps;  rurters  of  weepers  or  different 
types;  supply  levels;  equations  of  totien  cf  ttt 
node,  if  it  is  not  stationary,  sucb  as  a  tarl  cr  a 
formation  of  airplanes,  *•  '  U  is  s  .v  . 
its  Hpvf-*  V  *  '.«w  .  .11  *s  *.  "1  >lt 

v  <Kl  '  's  wf  "  i-  /  .  \*ie* 
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adversary.  See  Table  I  for  a  simple  example.  Symbol¬ 
ically,  ose  can  write  E  acd  T  in  subvariable  fora 
such  as 

H  -  (ftPj  ,«?2,ft?3,IT?0Cf ,E(?O,ISF0).  (3.3) 

T  »  {KT.ALG.HTP.FUS.CC.VS.DEC),  (3.4) 

where  the  above  symbols  are  essentially  self-explan¬ 
atory,  such  as:fW*  *  rasher  of  weapons  cn-fccard  of 
tyjje  2;  EQ«9  *  equations  of  motion  (of  entire  node); 
IKrO  ■  kr-cwledge  or  estimates  of  other  rode  states; 
CE7  *  detection  state  (usually  0  or  1,  for  proba¬ 
bilistic  interpretations);  ALG  ■  algorithms  chosen 
for  possible  response;  FUS  ■  data  fusion  variables, 
further  decomposable  into  appropriate  subvariables, 
when  required,  such  as  in  correlation  of  data  In 
multi-target  tracking;  and  DEC  ■  decision  variables 
representing  actual  decisions  to  be  cade  based  upen 
arriving  "signals". 
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Figure  3.  Basic  Evolution  Cycle  of  a  Node  Due  to 
"Signer  Processing  and  Response. 

Quantitative  Aspects 
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Figure  4.  Knowledge  Flow  In  Describing  Situations 


Table).  Components  of  C*  Node  Slates 
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Consider  new  the  basic  C3  structure  indicated 
in  (3.1)-(3.4),  as  well  as  Use  shift  markers  (  )', 

(  )  ,  (  )0*  conditioning  operator  (  |  ).  "Iso,  note 
logical  connectors  t  (ccn juncticn/a nd/in tersecticn), 
v  (dfsjticction/or/cnion),  (  )"  ( nega  1 1 cn/ro  t/compl e- 
cer.t)  ard  set/event  relations  DCK  (  domain  of  pos¬ 
sible  values  of  the  associated  variable),  c  (set 
membership  relation),  a  (universal  set  of  discourse) 
and  0  (null  or  empty  set).  It  is  clear  that  any 
qualitative  cr  quantitative  description  of  a  C3  pro¬ 
cess  ^s  a  whole  entity  cost  entail  descriptions  of 
the  nodes  constituting  the  process  utilizing  in  seme 
sense  the  above  concepts.  3 

With. all  of  the  above  C  variables  and  opera* 
ters  noted  and  interpreted,. the  fundamental .steps  in 
establishing  an  overall  model  of  tactical  C*  process¬ 
es  can  row  be  attempted: 

(i)  Obtain  a  formal  theory  for  the -dynamic  evolu¬ 
tion  cf  a  typical  node  state  K  by  use  of  an  approp¬ 
riate  set  AX  of  axioms  involving  (r  variables  and 
operators.  In  this  case,  N  can  be  expressed  as  some 
functional  of  appropriate  C5  variables  and  operators 
symbolically  described  as  - 

N«tf(AX).  (3.5) 


Details  of  these  relations  are  given  in  Table  II, 
section  4.  -  ' 

(11)  Evaluate/quantify  typical  C3  node  states  as 
given  in  (3.5)  by  choice  of  some  algebraic  logic 
description  pair  (ALDP).  Such  a  pair  consists  of  a 
syntax  space  vltb  algebraic  structure  and  a  compat¬ 
ible  seasantic  evaluation/logic  function  with  rangeln 
the  positive  real  line.  Examples  Include: 

Cl(classica1  logic) “(boolean  algebra, 0-1  truth 

function),(3.6) 

PL(probabil1ty  logic)«(boolean  algebra .probability 

measure) »{3.7) 

FL(2adeh's  fuzzy  logtc)»(browerian  lattice, possi¬ 
bility  function), (3.8) 

DSBL(De=pster-Shafer  belief  logic)-(boolean  alg., 
belief  function). (3. 2) 

(See  [17], [18]  for  further  details.) 

Indeed,  one  can  view  the  ALDP  evaluation  as  the 
final  part  of  knowledge  flow  in  describing  not  only 
O'5  processes,  but  situations  in  general,  beginning 
with  cognition.  (See  Figure  4  for  a  brief  outline  of 
this.) 

Denote  the  numerical  evaluation  of  each  formal 
node  state  description  symbolically  as 

pAiDP<m>c3>-I(m,c3)|alop,  (3.10) 


where  paldp  or  J  l^Dp  *nd)cates  the  logic  function 
associated  with  chosen  ALDP.  Thus,  for  PL,  PALOp 


means  a  probability  ireasure  (or  function,  etc.),  or 
If  one  chooses  ALDP*FL»  Pr,  °  poss,  a  possibility 
function,  etc.  For  an  ALCPuin  general  call  p  ... 
a  dispersion,  unless  otherwise  specified.  AL 

Utilizing  (3.5)  in  (3.10)  and  applying  the  com¬ 
patibility  property  of  ALDP’s  yields  the  relation 


Paiop«h*c  >  “  Wx(W«-c  »’  <3-"> 


where  N  is  a  given  node  state  of  a  C3  process,  deno¬ 
ted  simply  as  C  ,  p  ^  is  a  functional  and 

PALnp(AX,C* ),  extending  somewhat  the  rotation  in 
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(3.10),  represents  the  collection  cf  all  dlspers- 
ions  Involved  in  evaluating  the  RKS(rigtt  hand  side) 
of  (3.10)  for  given  C3  process  (friendly  or  advers¬ 
ary)  and  choice  of  Alt?.  Rote  that  in  a  real -world 
situation,  for  gives  AX  and  ALEP,  the  set  of  dis¬ 
persions  p L|gpfM,Cr)  in  general  is  highly  depen¬ 
dent  in  fors  upon  just  what  C3  is,  or  equivalently, 
any  allowable  collection  of  disper<ior.s_represeflted 
by  P^pp(^»^3)  determines  completely  Cr  and  thus 

ray  be  identified  with  -f  Us  oriel tisc  set  cf 
dlscersicr.s  determining  all  of  Cr . 

In  the  approach  outlined  in  steps  (i)  and  (ii), 
in  effect,  each  node  is  considered  separately  or 
cargi rally,  taking  into  account,  however,  all  of 
the  nodes  that  interact  with  it  as  well  as  all  rel¬ 
evant  Cr  variables,  friendly  or  adversary.  This  is 
assured  at  the  cutset  in  order  to  obtain  a  core 
simplified  codel  than  if  all  possible  joint  inter¬ 
actions  at  a  given  time  were  taken  into  account, 
analogous  to  the  suboptical  determination  of  indi¬ 
vidual  carginal  distributions  of  a<the  such  core 
(exponentially)  cocplex  joint  distribution  fros 
which  the  rarginals  arise. 

(iii)  In  turn,  combine  the  results  of  step. (ii)  - 
individual  updated  carginal  node  state  descriptions 
-  back  into  a  relatively  simple  global  description 
of  the  C3  process  at  hand.  As  mentioned  above,  this 
is  dene  in  the  spirit  of  considering  the  very  real 
tradeoff  of  rodel  fidelity  vs.  cbeplexity  of  calcu¬ 
lations,  in  place  of  attecptfng  to  carry  out  the 
optical,  full  joint  description  of  C3  behavior.  A 
reasonable  combination  operator  A V  here  can  be 
simple  arithmetic,  or  more  generally,  weighted 
sua,averaging  of  corresponding  node  state  entry 
dispersions .representing  thus  an  updated  overall 

C3  process  behavior.  If  arithcetic  averaging  is  not 
desired,  other  suitable  measures  of  central  tendency 
can  be  used,  such  as  codes  or  cedians,  aoong  others. 
The  basic  output  at  this  stage  can  be  symbolized  as 

palcp<c3)  ’  av<paldp{i(>c3)*  *u  " c  °3>-  (3-'2) 

where  as  usual  C?  represents  the  particular  C3 
process  of  interest. 

(iv)  Next,  deternine  a  functional  ^'».rp  which  di¬ 
rectly  relates  the  updated  averaged  dispersions 
of  a  given  C3  process  with  a  single  or  cultiple 
attribute  vector  describing  the  overall  •health* 
state  of  C3: 

HLTHAtDP<c3>  '^AIDP^AIDP*1"  *3'13* 
For  exaeole, ^ALDp  could  be  a  certain  weighted  oean 

*  or  perhaps  involve  set  thresholds  -  of  a  number  of 
HOE's  (  ceasures-of-effectivenes$),and/or  KOP's 
(ceasures-of-perforrance)  of  the  Cv  access  at  a  A 
whole,  each  of  which,  in  turn,  depends  upon 

;; maples  of  such  HOE'S  and  HOP'S  can  include  overall 
supply/attriticn  level,  overall  entropy  level  .vari¬ 
ous  system  perforr-ance  criteria,  including  tidiness, 
damage  levels,  kills,  destruction  of  eneay  level, 
etc.  (For  a  good  systematic  exposition  on  FOE'S  and 
KCP's  and  related  iteMure*.  see  Sweet  (21]  or  Rubin 
and  Kayk's  discussion  In  [13],  pp.  15,16.) 

Utilizing  (3.11)  and  (3.12)  in  (3.13)  yields 

HLTiWc3>  ■-WWm-c3»-  (3-14) 


for  sc «e  functional  9  deper/ding  in  part  cr. 

(v)  Finally,  cr.e  can  establish  the  desired  two 
person  zero  sue  ^_dsi?a  game  T  as  shown  schema  t’c- 
ally  in  Figure  5  below: _ 


Cecislcn-s^ker®  feature  *■  Advi 


[Friendly  CT  Process | 
CFr 


'  C  Process 


Typical  Kove: 
Choice  of 

PaLCP^^-* 


Adversary  < 

*Ctd 

Typical  Kove:  Choice  cf 

£icp(«4> 


?  )— I - As: 


loss  is  determined  through  a  functional 
^ALDP  -(3£e  **  (3‘13)-) 

Figure  5.  Scbesatlc  tor  C3  Decision  Gace  r. 


The  loss  function  in  Figure  5  resulting  from 
the  coves  of  each  player  can  be  excressed  as 

loss  -;;iDp(«LIHAiCP«-3r) .HITH.. ) 

*ALDP<WM4>-‘’ALCPtA’!-CAd»’  <315> 

where  K  is  detercined  through  (3.11)-(3.14). 

Thus,  one  can  inquire  whether  T  has  a  game 
value,  what  are  the  bayes  strategics  for  each  side, 
what  is  the  least  favcral^  me  cr  strategy  for 
the  adversary  vs.  the  friendly  side  ,  what  is  the 
friendly  aide's  minima*  strategy,  what  is  the  class 
of  admissible- strategies  for  each  side,  etc,  noting 
all  answers  must  depend  upon  the  allowable  classes 
of  choices  for  the  prlcltive  relations  P/>jj)pW"»r  )• 

Such  a  game  can  be  of  great  use  in  the  design 
erd  study  of  sensitivity  of  outcomes  for  C-  process 
es,  provided  that  these  questions  car  be  addressed 
using  feasible  computations.  This  of  course  deperds 
on  whether  (3.5)  and  hence  (3.11)  can  be  effective¬ 
ly  limited  in  complexity. 

A  summary  of  steps  (1)-(v)  is  given  below  in 
Figure  6:  _ 


Cane  r. 
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In  the  next  section,. a  key  part  of  the  develop¬ 
ment  of  r  Is  given;  the  choice  of  axicss  AX  and  the 
resulting  forcal  structure  for  rode  state  evaluation 
as  in  ctep  (i). 

4.  FOWL  THEORY. fAD  EV41UATI0H . fck  TVF  EVOLUTION 

CF  A  TYPICALS  KQr?  STftTF 

In  the  past,  a  nusber  of  attempts  have  been 
cads  to  develop  formal  theories, for  various  scien¬ 
tific  and  Social  disciplines  which  traditionally 
had  not  been  analyzed  free  such  viewpoints'.  See, 
e.g.,  Voodqer  [22  j  for  biological  systems  and  , 
Carnap  [23],  Part  Two,  for  other  applications  In¬ 
cluding  legal  and  social  considerations.  In  this 
paper,  a  rather  sicplified  list'of  axioms  in  non¬ 
quantifier  prepositional  fora  is  proposed,  char¬ 
acterizing  the  essential  features  required  to 
evaluate  dynanically  evolving  C3  node  states.  In 
turn/  as  outlined  in  section  3,  these  can  be  of 
use  in  developing  a  decision  gace.  These  axiccs 
are  of  dree  kinds:  logical  connections,  properties 
of  conditioning,  and  reduction  of  relations  arong 
C3  variables,  or  sufficiency  conditions.  The  axioa 
collection  AX  is  sunsarized  in  Table  II  as  follows: 

Table  II  .  Formal  Language  Description 
of  a  C3  Node  Evolution: 

Equality  Symbol:  » 

Constants:  ft,<£ 

Dummy  Variables:  a,P,  y 

Specific  Variables:  N,  R,  S,  T 

N  and  T  can  be  partitioned  into  subvectors,  e.g., 

N  *  (tWPt.  «Wf>r  iWPr  *TROOP,  EQMO.  INFO) 

T  *  (DET,  ALG.  HYP.  FUS.  CONS.  OEC) 

Operators:  ( )\  ( )“,  ( )Q,  ( | ),  a,  v,  DOM,  c 
General  Axioms;  For  all  or,/ 5,  y,  and  for  *  »  &,v: 

Ring  structure  for  &,r. 
a*p*p+a, 

fliO“aaov^,  cvn*Ot 
a&(/3vy)  *  (a&/3)v(a&y). 

General  Axioms!  For  all  a,  p,  y,  and  for  *  »  4,v: 

Imptlcatlve/CondlUonal  structure  for  &,v, 

(alO)  *  a,  ia)0)»{aS.0\P), 

(a&/J|y)«  (a|/3&y)&(0|y), 

{a*Plr)«WY)*Wy)> 
va  o  0. 
atDOM(a) 

putflctencv  Axioms:  For  (N4N’"  ..  &N0): 

(N"|n*‘&riN*ssa.R'»N)  *  (N**in** & nv), 
(R"|T‘&  N*  S  S  &  R-  8  N)  =  (R"|DEC*  8  N’(. 
(T*|n*8S8R-8N)  =  (Y*|  N*) 

(N*|S8R'SN)  »  (N*|S8N), 

(S|R-4N)  >  (S|R'), 

(R’l  'N)  6  (R*  I  N) 


The  ringjslructure  axiccs  are  the  oinical  ones 
necessary  to  characterize  conjunction  and  disjunct¬ 
ion.  (Kote,  as  tonal,  no  inverses  are  postulated.) 
The  dcs  for  conditioning,  while  reflecting  well- 
fcnoi.  -operties.  such  as  for  probability  inter¬ 
pretations.,  are  new  in  that  they  refer  to  ceasure- 
free  conditioning  {see  dtscussice  liter  in  tKTssect- 
Ton;.  The  sufficiency  axiccs  shew  the  basic  rela¬ 
tions  aveng  the  (r-variables  of  interest,  cased  on 
seqoenca  of  event;  as  outlined  in  Figures  2  and  3. 

The  axico  ?et  in  Table  II  leads  to  a  particulci 
-ferw  of  eg. (3. 5)  describing  recursively  node  state 
evolution: 

Thcjrea  4.1. 

Under  the  assisptions  in  Table  II: 


II: 


“  v  I  R<+  H*  1  II4  1  s  H‘  8  S)8 

tl*  S  M*  8  s  1  R'  |  u)) 
j  T+cDOM[T^) ,  SeOcit{sI> 

[  I!4cDDM(H+),  R'eHSHfR"),) 

V^DOKti!)  /  (<  ,} 

-  V  ((N++|  R++  8  H+)S(R++|DEC+  S  li')!, 

/*  Vr4|  tl*)&(W*|S  8  H)8(S|  R‘)8(R'|N)Slj) 

p" eDOH(R”),  t'cMMIt'), - 

{tJ+cCOH(H+),  ScDOJi(S),  R'cCCK(R"),NcDOH(N)^, 

Regrouping  tems  above,  compatible  with  Table 
II 


(4.2) 


<»*>) 


where 


-  V  {(R++iH)S  III  , 

KeOOH(N)  ’ 

^(N^lR^SN’lSlR^ls’jStN*^) 


|R  c  DOH(R  )\ 
\s+  c  DOH(H+) j 


(4.3) 

(4.4) 


<lf|N)  •  ■  V  ((H  |R~8N)8(R~|N))» 

R  cOOM(R') 

(r”|«V  tV  '  (R**|DEC*8  Nr)8(T+|N+)),(4.5) 

T  cDOH(T  ) 

(N+iR*8N)  ■  V  ((H+|S8S)8(S|R’))  ,  (4.6) 

ScOCH(S) 

(T+|S*)  •  (DEC+|C0NS',8FUS+8HYP+BA!.G+S0ETW) 
8(C0NS+|FGS+8HYP+8AIG+8DET+8N+) 

8( FUS+ |HYP*8AIG+SDET+8N*) 
8(HYP*|AIG*8DET*8N+) 
t(ALG+|DEi+8N*)8(DETt|Ht)  .  (4.7) 


Proof:  Details  oaitted,  but  straightforward  appli¬ 
cation  of  the  usual  rules  of  substitution  and  the 
axioms  in  Table  II. 

B 


Table  III  presents  interpretations  of  the  form¬ 
al  language  used  in  Table  II  for  presenting  the 
axioms  and  consequent  structure  of  node  state  evo¬ 
lution  in  Theorem  4.1; 
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Table  111.  Interpretations  ot  the  Formal  Language  J 
tor  O’  Node  Evolution 

„  ,  Node  T  *  Node  shvcnre 

p  *  Response  vtctof.  S  *  -SigEuTTtck* 

^  y*  •  potiSt*  Un>e>Wt  fc>  new  phase 

v  j  j-  t  fcgsintt  time  thtf  to  oW  phase 
(  )0  a  tvlia£«iion  o'  state  (umt-vHe) 
i\\  «  tops caSSonorconcCUo«fl9 

s  »  and,  *  -  on.  ()•  -  NOT(e*pWned «**•) 

DOM  *  Domain  ol  possiCte^ak** 

c  .  Sfl  membership  retthon  »»  used 6,!o'* 

e  -  toll  set 

fl  *  Universal  set 

Thus,  using  the  interpretation  In  Table  IKcso- 
patfble  with  Figure  3, 

•  respor.se  following -processing,  v*«t> 

(U++1r++SH+J  -  new  node  state  due  to  Its  sending.. 

out  response  .  v  ' 

(T4|H4)  ’  processing  data,  (4.10 

.  full  cycle  of  node  change  due  to 

'  -signals'  received,  over  all  poss- 

ihl»  processing,  and  response,  14.  >1 ) 

IP*  gl«n TnVeo?«  4.1  through  choice  of  a  suit¬ 
able  A10P. 

Recark  4.1 

Tt  should  be  noted  that  one  can  verify  readily 
that  all  Solean  algebras-  and  core  generally,  all 
brovterian  lattices-  satisfy 

ft ™  S1 

J  Plf If 


Cne  could  also  ctcose  cosbiratlcns  of  Pi  ar.d  a  or 
‘te5Si^ S&fc  A~  a.  -can  eval¬ 
uate  In  turn 

p(h+|h)*./  p{k!1r-.k)-p(R*I««'  (<-16) 

P«t4v>  * w >">  (4-n) 


o(K+)R-.H)  *  /  ptH+|S.H)-p(S|R-)& 

StDCX(S) 

p(S|R*)  a  p(vsS  -f(R"))»  *4"19' 

when .the  nonllrear  additive  regression  relation 

holds  „  „  (4  20) 

$  «  f(R  )+V,  v  *  1 

where  v  is  a  randen  vector  representing add tive 
adiun  error  betweeb  responses.and  'signalsand 
MS  1  known  function  representing  eediua  distort 

...  “"."I.’KTES’.ScilS' £'.  S"' 

AL0P'V  -.-Hcular  for  FI,  it  follcvS,froa  Theorem 

4i^^s?s^iiWIV&&^r« 
relations.  Thus,  one  can  write. 

p(H  |R  .#  ). 

p(R44jDEC4,tO 
p'DEC^iCO-S4  ,F«S4  ,HYP\aIg\oET4,N4> 
c r  f Ci  :+l  FMS  .KIP  ,ALG  .DET  .N  ), 
p(fus+|hyp4.aig<.oet/n  ), 

p(HYP+|fl'  .DET  .N  )i  .  p  rAX.C3) 
plAIG  |CET  ,N  ), 

p(det4|n4), 

p(N*|S,»y 

p{S|R"). 

P(R"I«). 


yielding,  in  turn,  the  counterpart  of  (4.2) 

p(li44)  .  /  p(n44|N)-p(H)0N  .  (4-'3) 

NeCCK(H) 

Or,  if  a  were  chosen  as  the  ALCP.  by  assuming 
only  fuzzy  relations  should  he  used,  then  (4.3) 

\N£00K(N4>  ) 

yielding,  in  turn,  the  counterpart  of  (4.2) 

oossdl44)  *  uax(nln(poss(HtK).poss(N))). 

Y  IStfWMfffl  l . 


Of  course,  tt  is  understooo  in  (^-21)  tfcaj 

rforaSStto  5&Tf  rode'proccsslng  4u?%(  * 
to  output  response. 

s-sstssil? 

<<*+efr)  a  (<*hMelv) 

to  the  case 
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(4.27) 


(a*3|p)  *  (a|r)*(3jn)»  (4.23) 

wh ere  now  n  and  y  need  not  be  the  same  end  where 
p  is  soce  coRputeble  function  (another  event  or  set) 
of  o,6,y*^»  for.*  *  4,v  •  For  example,  one  cay  wish 
to  determine  Q,  and  by  choosing  PL,  p(Q),  for  some 
appropriate  Joint  probability  ceasure  p,  tffc ere 

q  •  (UIM  &  (e|d))  »  (e|f).  (4.20 

where 

a  >  a(x]  ■  enemy  will  cave  up  about  x  troops  to¬ 
morrow;  x«0, 50,100,150. 

b  ■  b(y)  *  it  will  y  tomorrow;  y«fce  clear,  snow.rain. 
c  ■  c(z)  ■  enemy  will  use  Pass  z  to  approach  us; 

Z»1 ,11, 111, IV. 

d  »  d(r,s)*  corale  of  enemy  node  17  is  at  level  r 
and  number  of  their  troops  left  is  s  ; 
r-very  low,  low,  cediua.high,  very  high, 
s-0, 100,200,300. 

e  ■  e(w)  ■  entay  will  w  tocorrow;  w»$urrender,not 
surrender.  '• 

f  ■  f(q)  ■  enemy  overall  damage  level  is  q  ; 

4-9,1 .2. ...10. 


of  course,  it'  tne  antecedents  in  eg.  (4.2?) 
were  all  the  saxe,  then  no  real  problem  would  ailse, 
since  for  exaaple  it  is  readily  justified  that  for  any 
choice  of  AlCP  -  certainly  for  PL  !  -  that 
Q  ■  ((a|d)  4  (c|d))  v  (e|d) 

■  Wa4c)v^Jd)  ,  (4.25) 

even  though  normally  one  does  not  talk  about  such 
mature- free  entities  (Vp to  new).  Indeed,  since  the  goal 
is  the  evaluation  of  Q,  for  PL,  choosing  a  probability 
measure  p  over  all  the  relevant  events,  one  would  us¬ 
ually  evaluate  Q  as  simply 

P(Q)  -  P(((a|d)  4  (eld))  v  (e|d)) 

:5Saic!Vve!,|dSl,/p(d).  (4.26) 

etc. ,  assuming  p(d)>0. 

But  the  point  of  the  above  example  given 
In  (4.24)  <s  that  the  antecedents  in  the  conditional 
forms  are  not.  in  general  identical!  What  to  do? 

Contrary  to  popular  belief  (author's  note:  this 
author  and  his  colleague  Prof.  H.T.  Nguyen,  Hath.  Dept. 
New  Mexico  State  University,  las  Cruces,  have  undertake 
en  an  extensive  informal  survey  of  the  probability 
community-  both  applied  and  theoretical -resulting  In 
the  following  conclusions  -  see  (241(25]];  there  is 
no  systematic  and  mathematically  sound  procedure  for 
cooputing  p(Q)  (or  Q,  for  that  natter)  in  (4.C4)  or, 
in  fact,  for  any  similar  probleal 

Indeed,  there  do  exist  "folk*  remedies  to  tMs 
situation  which  roughly  speaking  reduce  to  olthcr 
,’dcntifyii.g  conditioning  with  material  implication, 
forcing  conditioning  to  be  a  closed  operation  over 
the  boolean  algebra  of  events ,  or  identifying  con¬ 
ditional  events  as  marginal  to  a  universal  Joint 
event  having  a  fixed  antecedent  common  to  these 
marginal  ones.  In  either  case,  serious  difficulties 
arise  -  either  mathematically  or  computationally. 
For  a  satisfactory  solution  to  this  problem,  see 
(24], (25 ],  where  a  sound  and  complete  ALOP  (among 
other  properties)  is  developed,  compatible  with, 
and  extending.classical  PL,  called  CPL  (conditional 
probability  logic). 

One  consequence  of  the  calculus  of  operations 
in  CPL  is  that  the  evaluation  of  0  in  (4,24)  be¬ 


comes 

Q  *  (o|9)  , 
resulting  in  the  value 

p(Q)  -  p(a)/p(B),  (4.28) 

where  . 

a  2  (a4b4c4d)v(e4f),  (4.29) 

t  -  a  v  (((a,tb)*(c'*d)»(b8d))Jf),  (4.30) 
differing  considerably  froa  the  'folk-  approaches. 

Returning  to  the  construction  of  the  C3  decis¬ 
ion  game,  again  note  that  by  utilizing  the  evalua¬ 
tions  as  in  (4.12),(4,13),(4.16)-(4.19)  for  PL,  or 
(4. 14), (4. 15),  and  analogous  calculations  for  FL, 
etc.,  one  can  then- fully  evaluate  the  dispersion  of 
H+  fn  (4.1)  recursively.  However,  as  gleaned  froa 
Figure  7  below,  regardless  of  the  ALOP  chosen,  even 
tne  basic  scheme  for  evaluating  a  typical  single 
no de  processing. cycle  fron  input  to  output-  without 
further  decomposition  of  the  C3  variables  and  sub- 
variables,  especially  that  of  T*  and  N+,  still  re¬ 
quires  on  the  order  of  catrlx/vectcr  addition  or 
multiplication  operations,  when, for  sicplicity,  the 
domains  of  possible  values  for  N,R,S,T  have  the 
sace  cardinality  q.  llnder-thc  same  assumptions,  one 
must  also  store  about  2^  domain  values  in  order  to 
accomplish  all  the  computations. 


Teulf ;  f(lr1tf«T  St«rrf  Ttlues}  •  nVr+t)  ♦  t* 

!(«'()  •  ♦  Sr  ♦  tr*)  ♦ 

<  )  Conti  ti  I  Opinion  (W> 

(  )•(  )  Count*  U  Z  OhmUom  (W’l),  «« 

,ICir<J{KH(N)l  r$Crd(CCN{*)X  S^C*rW( OOMtS)) .  t^rO(DOM[T)) 

fljvr*  7  C0fip«t*ti06  )C*  tulroment*  for  Hfpfe.Uvtl  Procmlnj  of  4 
Typ-ff«l  Notft  Jofut.Ootpat  7r«mlB1  Cydt, 


Needless  to  say,  the  evaluation  procedure  can 
become  extremely  tedious  due  to  the  multiplicative 
forms  of  the  terms  involved  compounded  with  the 
lengthy  iterative  disjunction  operations  over  the 
domains  of  the  variables.  In  the  next  section,  a 
possible  solution  to  this  problem  Is  offered  for 
the  case  of  PL. 
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5.  UTILIZATION  OF  LIHEAR-SAUSSIAH  HIXTIRE 
APPROXIMATION 

As  stated,  be  fore,  all  modeling  of  C3  processes 
in  general  cast  take  into  account  the  very  real  prcb- 
lee  of  accuracy  of  code!  vs.  complexity  of  calcula¬ 
tions.  One  possible  resonable  solution  to  this  dif¬ 
ficulty  -  at  least  for  the  choice  of  ALDP  *  PL  - 
involves  the  use  of  some  fundamental  approximation 
and  representation  theorems,  which  are  useful  in 
their  own  right. 

First,  before  considering  a  theorem  based  in 
part  on  caterial  in  [26],  the  following  definitions 
and  notational  conventions  will  be  introduced: 

Letting. r  be  any  positive  integer  and  2r  the 
real  r-dicensional  euclidean  space,  with  [0,1]  being 
the  real  unit  interval,  call  any  cumulative  probabil¬ 
ity  distribution  function  (cdf)  F:£r-*[0,lj  well- 
behaved  iff  in  its  Oordan-lebesgue  decor position 
(see,  e.g.  Feller  [27],  pp.  135-140)  no  singular 
coaponent;appears,  the. discrete  coaponent  distrib¬ 
ution,  if  present  is  at  cost  finite,  and  the  abso¬ 
lutely  continuous  component  admits  a  probability 
density  function  (pdf)  which  is  bounded  and  uni¬ 
formly  continuous  over  tr.  Thus, 

F  *  A-F*1}  +  (1-A)*Ft2\  (5.1) 

where  F^:Xr-*-[0;l]  corresponds  to  a  finitely  dis¬ 
crete  probability  ceasure'for  j-1  and  an  absolutely 
continuous  probability  measure  for  j»2,  with  pdf 
f'z'  being  bounded  and  uniformly  continuous  over  fcr. 

Clearly,  large  classes  of- cocrnon  probability 
measures  have  cdf1  $  satisfying  these  criteria. 

For  notational  purposes,  also  let 

F(1)  -  I  P.-H-V.)  ,  (5.2) 

JeO  3  3 

where  pj  e  2r  Is  a  mass  point  for  fM,  j  is  the 
dirac  delta  function,  p,  represents  the  probability 
of  occurrence  relative  td  Ft11  at  \iy  Osp^sl,  jeJ, 

■!,  0  being  finite  or  even  vacuous.  By  conven- 

jc  J 

tion,  ff  0*0,  F^  is  vacuous  and  F  reduces  to  the 
purely  absolutely  continuous  cdf  F*w. 

Depending  on  the  context  used,  denote  g^.  to 

mean  either  the  pdf,  cdf,  or  probability  distribu¬ 
tion, corresponding  to  an  r-dicensional  gaussian 
distribution  with  cean  Orand  positive  definite  co- 
variance  matrix  £.  Next,  for  any  sequences 

r(T,,..,ts),  u.(u,,...un).  2S(L,,...2b),  (5.3) 

0Sx.il  ,T^*-+taBl»  noting  the  pdf  for  g£  is 

9j(x)  ■  ((2w)r-detem(I))'’i-e'(!i)xT'2'1-\  (5.4) 
for  all  x  c  nr,  so  that  corresponds  to  an 

r-dicensional  gaussian  distribution  with  cean  v 
and  covariance  matrix  Z»  let  the  finite  gaussian 
mixture  n 

(5-5) 

which  can  represent  a  pdf,  cdf,  cr  probability  dis¬ 
tribution,  depending  on  the  context. 

Kith  all  of  the  above  established,  a  uniform 
approximation  theorem  can  now  be  stated. 


Theoreo  5.1. 

Let  F :£*"■♦  [9 ,1  ]  be  any  given  well-behaved  cdf' 
with  possibly  vacuous  J  containing  cass  points  p., 
jeJ,  In  accordance  with' the  above  notation.  J 
Then,  F  can  be  arbltarfly  uniformly  closely 
approxicated  over  trf  except  at  all  of  F’s  mass 
points  jeJ,  by  a  sequence  of  cdfs  which  are 
finite  gaussian  mixtures.  Denote  this  relation  as 


r- 


(5.6) 


Proof :First  consider  separately  the  truth  of  the 
theorem  for  the  purely  finitely  discrete  case  F=FUI 
Clearly  in  this  case,  the  sequence 

£,Sru,.£i>,X-.  (5‘7) 


obviously  uniformly  approaches  F  *  as  a  cdf,  ex¬ 
cept  over  j£, . 

Next,  Consider  the  validity  of  the  theorem  for 
the  purely  absolutely  continuous  case  F^Ft*)  Now, 
froa  [26],  Theorem  1,  there  exists  a  sequence  of 
finite  gaussian  mixtures 

2?  “  ^9-r  u  j  )noi  7  •  v5.9) 

which  approaches  In  l^-noro.  But  using  the 
basic  absolute  inequality  relation  for  all  Agy. 
(measurable) 


^cA92-2n'>V~2n 

/  r  I3r. 


M.i,  -  /  fC2,(x)dx|  s- 
xcf.  __ 

(x)  -  f(7)(x)|  dx,  (5.10) 


and  letting  A  •  As^{x:xerr  and  xss),  for  any  sc£r, 
It  follows  that  as  cdf's,  j2  apFroichcs  F^2'  uni- 
fcrr.ly  ever  tr. 

FlralJ^j  since  F  Is  a  linear  cocblnation  of 


F<» 


and 


it  follows  that  one  can  let  in  (5.6) 

9l.U.£  i  X'3l  M,-X>-22  •  (5-n> 


which  is  again  a  legitimate  finite  gaussian  mixture. 

I 

remark  5.1. 

It  shci.V  be  noted  that  ir  orstnetmn  ' 
•u  -s.bove?  the  «.  :»y  a^.r  .ch  z erw,  a  -ot  necessar¬ 
ily  desirable  prope-ty  d.e  to  the  resulting  fluctua¬ 
tions  of  form  of  the  pdfs.  However,  in  [26]  and  in 
[29]  alternative  forms  can  be  utilized,  of  course, 
in  the  case  of  g.,  this  cannot  be  avoided.  ( 


The  next  theorem  establishes  a  unique  linear 
regression  relation  accng  any;  given  pair  of  random 
vectors,  provided  sufficient  joint  second  moments 
exist.  Although  this  is  a  basic  result,  appearing 
in  canv  olaces  in  one  form  or  another  (see,  e.g. 
(28J,  sections  3. 3, 3. 4),^  surprising!)  not  often 
in  the  full  form  to  be  given  here  with  direct  appli¬ 
cation  to  reducing  nonlinear  relations  to  '•exact” 
linear  ones,  without  employing  approximating  expan¬ 
sions. 

Theorem  5.2.  * 

T.et  0M,p)  be  a  probability  space  and 

and  ViO*!*3  be  random  vectors  such  that  Cov(y)  ex- 


XOD 


ists^and  Cov(X)  is  positive  definite. 

Then,  there  exists  constant  a  by  k  (real)  ca- 
trix  Bs  called  the  regression  transition  eatrix  free 
Y  to  X,  and  randoa  vector  WriHxa  such  that  the. lin¬ 
ear  regression  relation  holds 

Y  =  B-X  +  W  ,  (5.12) 

such  that  X  and  W  are  uncorrelated.  K  and  B  are 
uniquely  deternined  with 

K  *  Y  -  B-X  ,  B  •  Cov(Y,X)Cov",(X),  (5.13) 
Cov(W)  »  Cov(Y)-Cov(Y,X)-Cov'\'X)-CovT(Y,X),(5.14) 

and  a  constant  A=E(K)*E(Y)-B*E(X),  etc.  can  be  added 
to  the  RHS  of  (5.12),  provided  W  is  replaced  by  the 
zero  mean  random  vector  W-E(W). 

Proof :The  result  is  self  evident,  once  equation 
T57TS)  is  noted,  using  the  calculus  of  multivariate 
moments  and  catrfccs.  _ 


Remark  5.2. 

Note  that  Theorem  5.2  can  be  applied  to  pro¬ 
duce  an  "exact"  linearization  of  nonlinear  relations 
such  as  given  below  where  X  and  v  are  uncorrelated 
randoa  vectors  with  E(v)*Or  so  that 

Y  *  f ( X )  +  v  ,  (5.15) 

where  f  .8+*°  is  some  fixed  (measurable)  function. 
The  result  lecediately  follows  that  (5.12)  becomes 
here 

Y  «  B-X  +  W  , 


but  where 


B  -  Cov(f(X),X)*Cov  (X).  (5.16) 


zation  approach  to  the  mode 
zing  f(X), 

where 


f(X)  =  A0*Bo.(X.X0)  , 

A  •  f(x  )  .  B  4  (df(X)/dX). 


ply  a  st 
1  In  (5.15).  by  lineari- 

(5.17) 


X*x_ 


(5.18) 


for  sore  constant  x0  c  £  such  as  E(X) .  Substituting 
(5.17)  into  (5.15)  yields  the  approximation 

YSA,  *B0.(X-x0)  +V.  (5.19) 

Next,  if  or.e  defines  the  true  error  In  (5.19)  as 

7  3  Y  -  A0  -  e0-(x-xo) 

*  W  ♦  (8-B J-X  *  c  ,  (5.20) 


where 


c8V*o*Ao 


(5.21) 


then  by  the  above  equations  and  standard  matrix 
manipulations  of  covariances  and  means 

E(2-2T)  •  Cov(W)  t  (B-B0)-Cov(X)*(e-B0>1  t  0-0T 

>  Cov(H) 

«  Cov(V)  t  H 

>  Cov(V),  (5.22) 

where  a 

0  S!  E(H)  t  (B-B0)-E(X)  t  C  ,  (5.23) 

H  »  Cov(f(X))-Cov(f(X).X)-Cov'’(X)-CovT(f(X).X). 

(5.24) 

>  indicates  positive  seaideffnite  partial  ordering 


among  all  o  by  o  matrices,  where  one  has  K.>K?  iff 
is  a  positive  sesidefiqite  matrix.  r 

Thus,. (5.22)  shews  in  a  quantitative  manner 
that,thougH  ore  pays  a~perialty?(H)  for  using  the 
exactly  linearized  fora  in  (5.12),  (5.16),  in 
place  of -the  original  nonlinear  additive'fora  in 
(5.15),  the  forcer  is  Still  a  core  accurate  approach 
than  use  of  the  standard  linearization. (without  re¬ 
iteration,  of  courscS!in  (5.1$). 

Finally*  it  should  fce  noted  that  the  above  re¬ 
carte  are  valid  for  the  exact  linearization  of  the 
conditional  ^signal"  relation  in  (4.1  S), (4. 20). 


Corollary  5.1. 


Suppose  (U/Jt p)  is  a  probability  space  and 
X:^***,  Y are  randoa  vectors  .such  that(-J-)  has 
a  well-behaved  cdf  over  s13  K  ar.d  Coy(-£}  exists  with 
Cov(X)  positive  definite. 

Then: 

(i)  An  exact  linear  regression  relation  holds  as 
in  eq.(5.12):between  X  and  Y. 

(ii)  For  conditional  random  vector  (YjX),  for  all 
outcomes  y  of  Y  and  x  of  X,  for  some 


Sr  „  r<y-B‘x>  S  WviX’x). 


(5.25) 


(iii)  For  unconditional  random  vector  X  at  any  pos¬ 
sible  outcome  x,  for  some 

g(x)  2  F(X*x).~  (5.26) 

I2.«2.E2 

(iv)  For  the  carginal  integrated-out  cdf  of  Y,  at 
any  outcome  y 

g.(y)r  2  Fly)  *  /  ,  F(Y.y|X.x)dF(X»x),  (5.27) 
xe?. 

where  letting 

Xi'<VjcV  V(,,y).JtV  -i^y’itJ,'15-285 

1—1 .2. 

* 

iTOlTi'  1*1.2  -i  i,(  j!^)  *”1.2 

foyT 4  .  «.»> 

ijUpig)  *“'.2 

Proof:  Note  that  all  linear  transforms  on  (y;  pre,* 
serve  the  well-behaved  property.  Then,applylng 
Theorems  5.1  and  5.2  yields  (i)-(lii),  with  (iv) 
obtained  by  multiplying  out  all  mixture  terns 
and  using  the  well-known  convolution  of  gaussian 
pdf's  which  here  takes  the  fora',,  for  any  typical 
tern 

%U,J2><7-v(V2))»x/^ex.p,Ji)9jx.uy2)dx 


(5J0) 

I 

Before  establishing  the  main  result,  actually 
a  corollary  of  the  above  two  theorems,  the  follow¬ 
ing  additional  notation  will  te  useful: 

As  before,  suppose  Y  and  X  are  random  vectors 
with  Y:t>-£re  and  X:s-a‘  but  now  where  X  is  par¬ 
titioned  into  y  3  /? t\  v  ».  i=l....S. 

*  (0  •  >  ’  ’  (5.31) 


i 
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where  necessarily  k.  *-•+  k  »  k.  Partition,  siai- 
larly>any  xes*  into  .  .  s  — 


and  let  for  any  i»  i=l,..,s. 


}U 

./over  all  poSsitJl£\  1  Z  l 
'/paths  0<i,<*:<i*<i,\ 
lt*l,2„.  1  v  / 


so  that  one  notes 

x(l)  .  x  (  x(s).  x^  (5.34) 

Also,  extend  the  notation,, where 

*0  *  V  ,  X$+1  i  0  ,  X(s+1>  i  0  ,  '  (5.35) 

etc.,  with  sfcilar  renarks  holding  for  x. 

Corollary  5.2. 

Suppose  the  hypotheses  of  Corollary  5.1  hold. 
With  the  rotation  introduced  in  (5.31)-(5.35)  valid. 
Then: 

For  each  1,  i»0,l,..,s,  the  exact  linear  re¬ 
gression  relation  holds 

X,  *  B.-X(,+"  +  W,  ,  (5.36) 

/f+1)  *  '  i 

where  Xv  '  and  V.  are  uncorrelated  random  vectors 
andLeach  8^  is  a  constant  k^  by  rc* 

qresston  transition  matrix,  obtained  analogous  to 
B  in  (5.13).  Denote  the  partitioning  of  each 

Bt  ■  ■  B(,’W,,(5.37) 

b(M«)  i  fl,..,s-t.(5.38) 

(it)  In  turn,  there  exists  finite  gausslan  mixtures, 

where  for  all  posslble/outcoees  xi  of  .fy  . 

where  t,,  u. ,  E.  are  all  formally  the  saire  as  tlie 
correspJndTAg  vitues  In  (5.28),  except  here,  t  *  0, 
1.2. ...s,  noting  for  t*s,  RHS  of  (5.36)  Is  Identic¬ 
al  to  X,  *  Xs  and, In  effect,  B£  is  0. 

(ili)  flrally,  the  rarginal,  integrated-out  cdf  of 
V,  compatible  with  (i)  and  (il).is  enifottfly 
approxioated  as,  for  any  outcome  y  of  Y, 

9.  u  r(y)  8  f<y)'  / 1  ^t'f'ylx-x)-nr(x,«x.)>f1+,X=>*<flb 

xcr  til  1  1  dx, 

(5.40) 

where  s 

^(T0,5„""'s.j  cd  .  A  l  c<l)*l',  ><  c0 

u.lp  *‘Js.3rV  .1.0  jut-.  Jlc f 

it!i)  i'O.'-.s  i-O.-.s 

£“(JobU)^.vb<,,V..  • 

i"0,..,s 

and  where 

B(0i^I  ,  a  8  .B 

"0,1*  v  Bo,2  Bo,i  Bi,a  * 

B  3}‘B0,34  B0,2*B2,3  *  B0,\*B1 ,3  *  B0,rBl,2‘82,3» 
and  more  generally. 


Proof:  (i)  and  (11) -follow, from  Corollary  5.1.  For 
'(rTF)',  consider 

f(y)-  /  ((I  f;x  'x  |y.(i4l)«x(H!i)dx 
xe£  1*0  - 

£f-  t(l9.  ,  j  (x,-B  •x(U,)))dx 

•  I  (  h(x0;i)),  (5.43) 

icd0*»xJs  0,1 

where  ,  ,  ,  s  ,,,,, 

h(x6:'i-)*x^k(iB0s2i  j(xi"Bi  '*  "“i  ,jj^X 

•  bs(xo;i>x<S+^>*  (5-44) 

where  recursively  is  defined-  as  follows: 

ho(x0U;x(1))*g;.  (x0-80-x(,).p0  ,  ).  (5.45) 

°»’S0  0 

and  for  1*1, ..,s, 

x/CIki(hi-i(x°:A:x<,))'%(  <xrVx<H1)'lli,j(1)iY 

1  ’  1  (5.46) 

Then,  beginning  with  1*1,  one  applies  the  iden¬ 
tity  in  (5.30)  to  obtain  h. ,  followed  in  turn  by  a 

similar  procedure  for  1*2,  using  (5.46) .  until 

step  i*s  is  reached.  B 

Remark  5.3. 

Note  that  the  results  in  Corollary  5.2(111) 
are  equivalent  to  specifying  a  finite  gausslan  ma¬ 
ture,  where  for  each  mixing  index  jcO^****^,  thfc 
corresponding  component  distribution  t$  gausslan 
determining  a  random  vc^toi  say  u  ,  which  has 
E(Uj)m^,  values  given  In  (5.41). 

In  turn,  from  the  forms  in  (5.41),  each  Is  seen 

to  be  a  linear  combination  of  statistically  inde¬ 
pendent  gaussian  random  vectors,  say  t*^a  ,  where 

«i  =  B(0)-Uji0  Gts,Mlj>s  ,  (5.47) 

and  each  U,  ,  has  distribution  g  (--p,  .  ). 
i.t  i,J, 

Each  coefficient  catrix  B^f'  in  the  linear  coebira- 
tion  via  (6.42)  represents  the  overall  regression 
transition  tatrix  from  Y  aultiplicatively  up  to 
Xj  via  all  possible  distinct  path  combinations  of 

individual  regression  transition  catrices  acong 
pairs  of  rar.don  vectors  fron  (Y,X.,..,X.)  connect¬ 
ing  Y  to  Xj.  Possible  connections Vay  exist  also 

with  lngber's  oesoscopic-siacroscopic  approach  to 
C3  eodeling,  where  tbe  path-integral  representation 


relative  to  nonlinear  nonequilibriua  gsussian-car- 
kovian  statistical  mechanics  is  used.  This  avenue 
remains  to  he  explored. (Again,  see  [12].)  ^ 

Regark  5.4. 

In  applying  Corollary  5.2,  the  philosophy  of 
approach  is  as  follows:  One  does  not  know  a  priori 
the  distribution  of  Y,  the  desired  goal,  but  one 
does  know  -  or  has  control  in  assigning  -  all  of 
the  intermediate  or  auxiliary  conditional  distri-,.,. 
butions,  conditioning  Y  qd«X,  X.  on  X'  ;  ,  on  X'’5' 
...,  and  finally  X  (Xls  beijg  triviali2§d  to 
make  X  an  unconditional  random  vector). ’further 
help  in  reducing  calculations  in  (5. 41), (5. 42)  will 
occur  if  sufficiency  or  jearkovian-like  assumptions 
can  be  made,  thereby  causing  in  effect  a  nunber  of 
individual  transition  matrices  8j  5  to  be  zero. 

In  particular,  consider  nowJpp?ying  Corollary 
5.2  to  the  evolution  of  node  states  as  in  steps  (i) 
and(it),  sections  7  and  4.  where  AIDP*PL: 

V*Xc^’t.(fHp,+,fkT2,,#l,'P3+,#rf!OOP+1E(!HOV,INFO+)> 

/X  V  <5'48> 

XfJ*S-21-  <5'49) 

where, replacing  directly  N,  and  hence  N+,  as  well  as 
T*  by  their  component  subvariables,  as -given  in 
(3.3), (3.4), 

X,  •  R+t  ,  (5.50) 

X2^tC*,X^C05St.X4iFUS+.X5iHY?+1X^RLG+1X7*0ET*1 

(5.51) 

him\-  h  i,wz- 

Xn3ITRCCP+,X)23EQM<(*,  Xu3INFO+.  (5.52) 
X,4  3  S  ,  (5.53) 

X]5  3  R'  (5.54) 

hciiWV  X17S#MP2*  X18i,WP3; 

X,s3TOOOP,  X203EQMO,  X2)31NF0  .  (5.55) 

In  turn,  due  to  the  assumptions  in  Table  II, 
a  nusber  of  transition  matrices  can  be  set  equal  to 


2ero,  as  mentioned 

earlier 

: 

B0.i’ 

1-2... , 

7,14,,,, 

,21,  ' 

*!..• 

1-3..., 

7,14,.., 

,21, 

B,1 *'2 

::  V2' 

...7,  I. 

i 

,•14,.., 21, 

0  .  (5.56) 

Ci,15' 

1-8,.. 

,13, 

B14,( 

,  1-16, 

...21 

> 

Thus,  the  calctUticns  ir  {*.  12), (4. 13), 
(4. 16). (4. 19)  can  all  be  replaced,  using  (5.48)- 
(5.56)  in  Corollary  5.2  (iii). 

If  one  considers  the  number  of  operations  re¬ 
quired  in  (4. 12), (4. 13), (4. 16)- (4. 19)  directly  to 
compute  p{N**),  assuming  equally  sized  domains  of 
values,  say  q  (as  noted  at  the  end  of  section  4), 


one  obtains  here  on  the  order  of  q21 ,  21  being  the 
nunber  of  variables  being  integrated  out  in  (4.1). 

On  the  other  hand,  the  linear-gaussian  mixture  ap¬ 
proximation  of  Corollary  5.2{1ii)  requires  about 
cardCd-)4*  nixing  coefficients,  when  card(J>)  * 
card(J-),  for  all  i.  In  addition,  for  each  mixture 
d-.strioution,  corresponding- to' a  mixing  term,  there 
are  2x22  ♦  3x22  entire  matrix  multiplication  and 
addition  operations  for  obtaining  the  characterizing 
gaussian  parameters:  the  mean  and.covariance  matrix. 
There  is  also  an  upper  bound  of  -  reduced  by  use 
of  (5.56)  -  number  of  matrix  additions  matrix 
multiplication  required  to  obtain  re¬ 

cursively,  as  in  (5.42).  Hence  for  the  linear-gauss^ 
fan  approach,  a  multiplicative  value  cf  (2c*rd(Jfi))a 
could  be  required  for  implementation.  u 

Thus,  if  the  average  number  of  mixing  coeffici¬ 
ents  can  be  reduced  so  that 

card(d0)  «  q/2,  (5.57) 

then  the  linear  gaussian  mixture  approach  can  be  of 
real  use.  This  will  occur  especially  when  the  number 
of  C3  variables  describable  by  single  gaussian  dis¬ 
tributions  or  by  some  absolutely  continuous  distrib¬ 
utions  which  are  bimodal  or  at  least  relatively  min¬ 
imum  in  nunber  of  modes.  This  is  opposite  in  kind  to 
the  situation  where  most  variables  are  discrete 
with  the  only  good  gaussian  mixture  approximations 
being  essentially  the  same  as  the  original  discrete 
distributions,  but  with  each  corresponding  dirac 
delta  function  replaced  by  a  gaussian  distribution 
of  sufficiently  small  cavartance  matrix,  as  in  the 
proof  of  Theorem  5,1.  In  the  latter  case,  (5.57) 
will  be  violated  and  the  better  approach  is  to  stay 
with  the  original  integrals,  pOStiL’.y  discretizing 
them.  I 


One  desirable  property  of  gaussian  mixtures  Is 
the  ease  in  computing  means  and  covariance  matrices, 
once  the  nixing  rdra»ctcr$  arc  ?ll  determined.  Thus, 
it  follows  easily  that  for  Y  in  Corollary  5.2 


(5.58) 


E(Y)  S  l 

Cov(Y)s  X  _  ,!i>.(£<i>,(,li>.c( y))<uU>.c(Y))^ 


(5.59) 


Finally,  mention  must  be  made  of  another  pos¬ 
sible  source  of  difficulty  in  implementing  the  lin¬ 
ear  gaussian  mixture  method.  This  involves  the  act¬ 
ual  construction  of  the  gauuslan  mixtures,  mention¬ 
ed  previously. (Again,  Sit  [26]  and  [25]  for  tech¬ 
niques.) 


6.  CONCLUDING  REMARKS 

In  order  to  implement  the  proposed  general  C3 
decision  game,  as  outlined  in  the  .revious  sections, 
for  a  given  simulated  scenario,  one  must  be  careful 
in  defining  the  boundaries  for  what  constitutes  the 
relevant  C3  variables.  This  is  a  relative  concept. 

In  a  given  situation,  a  node  may  represent  sinply  a 
single  person  or  machine,  such  as  a  tank  crew,  or 
it  cay  represent  an  entire  group  of  tanks,  depend¬ 
ing  on  the  desired  aggregation  or  hierarchical  level 
considered.  In  addition,  before  implementing  the 
model  proposed  here,  one  must  scope  out  what  con¬ 
stitutes  a  "signal1  input-output  node  cycle  and 
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Table  IV,  Categorization  of  Events  Occurring  Curing  Inner-Outer  Air  Battle. 


NODE 

TYPE 

INPUT-OUTPUT  NODE  CYCLES OCCUR  AT  PHASE  CHANGES  WHICH  ARE  BY 

DOCTRINE  AND  GAME  DESIGN 

I: ENEMY  BOMBERS 

Initial 

8FA"  by  III 
BFA”  by  IV 
BFA"  bv  V 

BFA  by  III 
BFA  by  IV 
BFA  by  V 

BFA*  by  III 
BFA*  by  IV 
BFA  by  V 

BOMB"  IV 
cose"  V 

BOMB  IV 
BGKB  V 

BOMB*IV 

BOMB 

nd 

II:FRIEND;Sv!RV. 

\mg 

SPOT"  I 

SPOT  I 

SPOT*! 

End 

> 

Ill: FRIEND  FIGHT' 

Initial 

Essm 

RINF 
from  II 

EEXuH 

£ 

R-at  I 

FIR  a 

.1 

jjjjg 

m 

End 

IV : FRIEND  SHIP 

Initial 

RINF" 
from  II 

RINF 
from  II 

FIR" 
at  I 

FIR 
at  I 

FIR+ 
at  I 

9 

BBOM 
by  I 

End 

V : FRIEKD  SHIP 

Initial 

H23IH 

RINF 
from  II 

m 

FIR 
at  I 

FIR* 
at  1 

■ 

BBOM 
by  I 

■ 

End 

SYMBOLS:  BFA  •  BEING  FIRED  AT,  SPOT-  SPOTTING,  SINF  ■  SENDING  INFORMATION  j 

RINf  -  RECEIVING  INFORMATION,  FIR  ■  FIRING  ,  BBOM  ■  BEING  BOMBED  ,  j 

BOH  •  BOMBING,  (  )'  ■  OUST  BEFORE,  (  )*  «  OUST'AFTER  1 

EACH  ROH  LISTS  EVENTS  IN  SILENCE  OF  OCCURRENCE.  COLUMNS  ARE  NOT  RELATED  TO  SUCH  OCCURRENCES.  ' 


over  what  Line  periods  does  it  occur. 

Consider,  for  example,  the  following  possible 
simplified  Inner-Outer  Air  Battle: 

(1)  Enemy  bombers(I)  arrive  in  formation  towards 
grouping  of  friendly  ships  of  two  types  (IV, Y). 

(2)  Friendly  scout  airplanes  (II)  detect/surveil 

I  and  pass  Information  to  friendly  fighter  airplanes 
(III)  as  well  as  to  IV.V. 

(3)  III  ceet  I  and  attack,  I  being  passive. 

(4)  Remaining  I  continue  toward  IV,Y,  with  III  now 
ceasing  attacks. 

(5)  I Y,V  send  missiles  against  remaining  I,  before 
themselves  are  bombed  by  I. 

(6)  Remaining  I,  following  now  above  missile  attack, 
bomb  IV, V. 

(7)  End  of  scenario  as  I  turns  away. 

For  an  outline  of  approach,  the  aggregation 
level  here  Is  to  take  each  individual  combatant 
a  distinct  node.  Thus,  there  are  five  types  of  nodes 
here:  enemy  bombers  (I),  friendly  surveillance  air¬ 
planes  (II),  friendly  fighter  planes  (III),  friend¬ 
ly  ships  of  type  { IV)  and  (V).  Hlthin  each  type,  one 
can  designate  particular  individual  nodes  bv  suit¬ 
able  Indexing.  In  addition,  one  must  determine  for 
each  side,  friendly  or  adversary,  all  of  the  rela¬ 
tive  primitive  relations  such  as  given  in  (4.21)  In 
probability  form.  All  of  this  will  also  depend  on 
what  constitutes  node  cycles.  Cased  on  this  scenar¬ 
io,  Table  IV  presents  a  tentative  collection  of 
epochs  of  node  interaction  which  can  be  identified 
as  node  input-output  processing  cycles. 

Future  efforts  will  be  directed  toward  further 
Implementation  of  the  C3  decision  game  relative  to 
particular  scenarios  such  as  the  Inner-Outer  Air 
Battle. 
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AX  APPLICATION  OlJCATASTROfflE  THEORY  TO  C3I 
PROBLESIS 
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ABSTRACT 


Mathematical  and  starisrieal  tools  based  oa  camssopie 
theory  have  been  developed  to  pencil  individuals  midi  z 
minimal  mathematical  background  to  ca&rtafcs  z  rigorous 
analysis  of  non-linear  indications  and  wzmmg 
phenomena.  These  tools  lave  beeaaediae^eaaeg^wS& 
experienced  intelligence  analyse  that  ovo!ttd  (be  ssauSccd 
detection  of  Soviet  Operational  Mann  Groups  (OMG$X 
one  of  the  iom  difficult  problems  of  tactical  aalj-o.  The 
analysts  a  ho  served  as  subjects  had  no  cathaaccal 
background,  yet  were  enthusiastic  about  the  technology. 
They  were  particularly  m: crested  in  a  perceived  /apability  io 
analyze  themselves  and  to  identify  and  axrcct  meoesaamt 
and  ambiguous  responses. 


1.  NEW  I&W  AND  C2  MODELING 
TECHNOLOGIES  ARE  NEEDED 


There  is  evidence  that  sudden  perceptual  changes  often 
occur  m  the  indications  and  warning  (I&W)  and  command 
and  control  <C~>  a  la  ids  and  (hat  different  analysis  can  have 
different,  ambiguous,  perceptions  of  the  same  military 
situation  Such  bchjv  ior  is  obviously  non-iinear  and  must  be 
investigated  with  the  aid  of  non-linear  teamiques  and 
models.  Linear  models  tend  to  mask  rather  than  highlight 
sudden  changes  and  therefore  may  be  highly  misleading  to 
their  users  when  applied  to  the  analysis  of  ambiguous 
situations. 

The  fitting  of  a  series  of  data  points  to  a  straight  line  by 
linear  regression,  for  example,  will  indeed  provide  a 
mathematical  model  of  these  data.  However,  such  a  process 
is  not  aimed  at  detecting,  and  therefore  would  not  reveal,  the 
existence  of  discontinuities  where  a  small  change  m  (he  value 
of  an  independent  variable  can  produce  large  (step- 
funciion-hke)  changes  in  the  value  of  an  associated 
dependent  variable,  for  example.  Normally,  such  changes 


mioeJd  be  idezifk d  nih  23  increase  la  the  croc  seems 
assorted  wsh  the  regressSoo  procedures.  and  therefore 
world  scad  to  he  ovsrfooked  during  the  process  of  dra 

232!ys~s. 

Lises;  combs:  models  cd  oocmal  oc  oi  sodtl 
caateso)  b\t  been  siepr;  aed.ee  ca  the 

past.  However,  the  iucrodnrekxa  cf  fc=gi>}  compurs.  irespocs 
systoms  mad  ochei  ahzxd  tslcsy  tdsyjbyps*  to  the 
modem  b sslefidd  has  led  to  cadeple  uxemeacc*  2nd  highly 
noa-linem  combat  beisvsoe.  Such  advances  a  coqtaity 
have  s^rssed  the  arMaj  fabnc  of  ceievsxl3jolca?la. 
to  2  poiet  where  h  is  clear  that  Doa-lmcar,  multi-modal, 
modelmg  approaches  are  c^em’y  Deeded  io  seppea  those 
iedividesls  involved  a  dm  modeling  aed  analysis  of  such 
combat-relared  2rcss  as  indications  and  warning  zed 
command  aad  cocrroL 

During  a  recent  investig2ticorof  the  impact  of 
ambiguity  on  I&W  analyst  pereeprioos.  2  set  of  unclassified 
notional  indicators  predicting  the  development  of  a  Soviet 
OMG  w-as  produced.  Tea  specific  seoiags  of  these  indicators 
wrre  presented  to  intelligence  analysts  who  were  asked  to 
assess  the  probability  of  OMG  development.  Tbc  resulting 
assessments  were  captured  zr~'  analyzed.  This  analysis 
revealed  the  existence  of  perceptual  ambiguity  as  well  as  the 
potential  for  sudden  and  gradual  perceptual  changes, 
pcrccpmal  hystoresis,  and  percepaial  impping  associated  with 
the  analyst  responses.  This  research  has  also  provided 
evidence  that  I&W  indicators  are  neither  linear  nor 
cnconclated  in  the  mind  of  experienced  intelligence  analysts, 
a  finding  which  is  itself  of  value.  The  technology  is  also 
directly  applicable  io  wnunumcating  analyst  understanding  io 
battlefield  commanders,  and  to  capturing  ambiguities  in  a 
battlefield  commander's  perception  of  the  vombat 
environment 


2.  OPERATIONAL  MANEUVER  GROUP 
IDENTIFICATION: 

AN  IMPORTANT  AND  UNSOLVED  PROBLEM 


The  identification  vf  an  Operational  Maneuver  Group 
(OMG)  is  an  important  and  unsolved  problem  which  has 
been  (he  subject  of  a  recently  completed  investigation  inicd. 
T&W  Applications  of  Catastrophe  Theory  tlWCATf  /or  (he 
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Thus  gaper  agpccy 
As  OMG  »  a 

£^zxi&cs^i^dn^£cu6;S7nfiM^u: 
G^^S^iZttiJksr^oeici^tydss; 
V«dd  V«  n  (see  DccrsrZj.  1922;  DSci,  1923.  foe 
arr^:>.  Tee  (Mi  » a  oprrrr  brmed  Nai 
A^ssS:  Tscry  Ofpanaa  (SATO)  Ess  »  fcesEsas  a 
qd£k  Swis-WEsrr  Psa  tiaacr  by  epmmj  2  tested  fixes 
rd dsscjrjfeXATO d^totc^T.  lHs{os!s» 
ieaefaned  by  esefe^aa  OMG  cs»  cce&as  as  weak  peers 
nti:XATOd«^Ew»r^i^a^tt^&»y 
oc  fisst.  tie  sarrezr  cxpibCky  ci  SATO,  disrupt 
gjaSccpasasa  tqyiy  fees,  rd  safeass  close  pamriy 
«8ft  NATO  coops  n  erderto  grrrsas  fees  fees  £=aaire==s 
tic5sd  ccrto  me^txsL 


As  OMG  zdaeves  z  b=£i  level  of  saobsggr  aed 

cegmeer*.  5ft  capacity,  srged  tmops  (to  jtorifc  keg  rzzp: 
- - :— ' — \  £x!  ircs2Kd  asoca  of  fed  a ad 


asssasgog.  OMGt  a!so  d^cd  t^oc  ocas  e£2iry  esa 
fixRjjwL  SxS  sqpoci  would  generally  fccbfe  er 
s^^haiyc^ptqsrjoaw^fcb^^ 
lie  ear  of  jemmer*  (to  disrspc  XATO  dr  2nd  fire  support 
nett  2=d  corsrd  rd  ccccol  is  the  sector  zt  uhxh  the 
fccrax  is  expected  to  ccecr),  2nd  traffic  corirol  zrd  has 
bearing  (to  pcxmix  tic  rapid  transit  of  tic  OMG  to  is 
feesded  tsrrct),  Tbr  t»x>  major  arrilleiy  mats  esed  to 
support  2a  OMG  are  tbr  Droico  ArtDcnr  Gmcp  (DAG)  and 
tic  Rrgimema!  Artillery  Group  (RAG),  Both  groeps  2re 
usually  reinforced  with  DKvdi\inos]  zraEexy  ladliocs. 
Air  defense  for  the  OMG  is  provided  by  imegratod  systoms 
of  2mi-aircraft  zsiSSay,  ss^zc&uyzz  missiles  (SAMs),  and 
fixed  zed  rrcary  uisg  aircraft. 


Figure  1.  Catastrophe  Theesy-Bassd  LS.W  Assss=c« 
Activities 


2.1  KNOWLEDGE  DEVELOPMENT  ACTTVTTIHS 


Knowledge  development  activities  deed  21  obtaining 
2a  understanding  of  the  activities  zavc*ved  in  IuAV  threat 
perception  were  undertaken  during  the  IWCAT  project.  A 
set  of  ten  notional  2nd  unclassified  indicators  predicting  the 
development  of  a  Soviet  OMG  was  dcs  eloped  for  the 
investigation  (figure  1).  Settings  of  these  indicators  zad  a 
group  of  context  variables  describing  time  of  day,  weather 
conditions,  as  assumed  politico- military  background 
(including  conditions  characterized  asr  “Treaty  Obligation,” 
“friendly  Ally  ”  and  “Third  P2ny  Hostilities”),  as  well  2S  an 
assessment  of  the  degree  of  indicator  reliability  (or  “level  of 
confidence”),  were  presented  to  intolligence  analysts-  These 
analysts  were  asked  to  describe  their  perception  of  the  level 
of  OMG  threat  as  reflected  in  these  data  and  record  this 
information  in  an  OMG  threat  assessment  data  base,  as 
shown  in  figure  Z 

Analyst  OMG  threat  assessments  were  captured  and 
analyzed  with  the  aid  of  statistical  procedures  based  both  on 
linear  techniques  and  on  catastrophe  theory  (Cobb,  1978, 
1983).  This  analysis  has  demonstrated  the  existence  of 
ambiguous  perceptions  and  has  provided  an  understanding  of 
perceptual  divergence  2nd  hysteresis  and  of  a  phenomena  that 
Woodcock  has  called  “perceptual  trapping,”  (where  an 
analyst  would  not  withdraw  an  issued  OMG  warning  despite 
a  subsequent  large  reduction  in  the  number  of  active 
indicators,  for  example)  as  described  in  more  detail  below. 


figure  Z  The  IWCAT  Intelligence  Analyst  Computer 
Display 
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(3) 


3.  CATASTROPHE  THEORY  CAN  PROVIDE 
NEW  TOOLS 
FOR  THE  I&W  ANALYST 


C2i2stxopbe  theory  has  been  used  to  develop 

medrmascanytrrsparomtocJsfocthesmdyancimaljiisof 
I&W-rtb^d  problems.  The  theocy  provides  a  framework 
for  analyzing  2srf  modeling  systems  winch  possess  some  or 
a3cf  the  foxing  chamaeiis&s: 

1-  Gradual  and  sudden  changes,  divergence, 
2xb:gctfy.  bimodah'ty,  2nd  hysteresis  that  arc 
charactrristicof  the  behavior  exhibited  by  the 
efemuctuy  cslassophes. 

2.  Situations  where  small  changes  in  inpets  can 
give  rise  to  either  small  or  large  changes  in 
outcome  under  the  same  conditions,  and 
where  small  biases  in  input  can  give  rise  to 
dmaurically  different  outcomes. 

The  elementary  catastrophes  provide  the  simplest 
models  that  are  topologically  equivalent  of  the  behavior  of 
systems  with  up  to  four  key,  independent,  variables  (called, 
control  or  conflicting  factors)  and  up  to  two  key, 
depeodendent,  variables  (called  behavior  variables)  (Thom, 
1975;  Poston  and  Stewart,  1978;  Woodcock  and  Davis, 
1973;  Woodcock  and  Poston,  1974;  Gilmore,  1981;  Isnard 
and  Zeeman,  1976;  and  Zeeman,  1977).  Catastrophe  theory 
has  been  used  in  a  number  of  different  applications,  including 
military  applications  (Dockery  and  Chizui,  19S6;  Dockery 
and  Woodcock.  1988;  Holt,  Job,  and  Marcus,  1978; 
Woodcock,  1988a,  b.  1987a.  b,  1986;  Woodcock  and 
Dockery,  1988.  1987.  1986,  1984;  and  Woodcock, 
Langendorf,  2nd  Cobb,  1988,  for  example). 


3.1  CATASTROPHE  LANDSCAPES  CAN  ILLUSTRATE 
NON-LINEAR  SYSTEM  BEHAVIOR 


The  cusp  catastrophe  has  two  control f  jetors  and  one 
behavior  variable  and  a  catastrophe  function  (Vc(x))  of  the 
form: 

Vc(x)  a  x4/4  +  ax“/2  +  bx  (1) 

where  a  and  b  are  the  control  factors  and  x  is  the  behavior 
variable  (Figure  3).  Stationary  states  of  this  function  occur 
when: 

dVc{x)/dx  «  x^  +  ax  +  b  *  0  (2) 

This  equation  describes  a  three-dimensional  (x,  a,  b)  curved 
surface  (techiically  called  the  catastrophe  manifold)  that 
Woodcock  and  Dockery  have  called  the  catastrophe 
landscape.  The  catastrophe  manifold  surface  has  either  one 
or  three  layers  corresponding  to  the  number  of  real  solutions 
of  equation  (2)  The  single  solution  is  a  single  minimum 
value  of  the  function  in  equation  (1)  while  the  triple  solution 
consists  of  two  minima  separated  by  a  maximum  value.  The 
bifurcation  set  of  the  catastrophe  represents  the  set  of  control 
factor '  alues  at  which  one  or  other  of  the  minima  of  equation 
(1)  is  destroyed  in  response  to  control  factor  changes.  It  is 
described  by  equation  (3): 


4p*27b2  =  0 

Sudden  or  catastrophic  changes  of  system  behavior 
can  occur  ai  the  bifurcation  set  in  response  to  changes  in  the 
values  of  the  control  factors  as  one  or  other  of  the  two 
minima  of  the  catastrophe  function  (equation  (1))  becomes  a 
point  of  inflexion  and  then  disappears!  Non-catas trophic 
changes  :n  behavior  can  also  occur  when  one  minimum  of 
equation  (1)  is  smoothly  transformed  into  the  ether  minimum 
by  2n  appropriate  set  of  control  factor  changes.  Both  types 
of  changes  in  system  behavior  can  be  illustrated  by  the 
pa  Kern  of  movement  of  a  point  called  the  state  point  on  the 
surface  of  the  catastrophe  landscape  in  response  to  changes  in 
control  factor  values  (Figure  3).  Thus,  the  path  (p,  q,  r) 
represents  2/. sudden  or  catastrophic  change  in  system 
behavior  while  the  path  (s,  t,  u)  represents  control  factor 
changes  that  cause  gradual  changes  in  system  behavior. 


Hgurc  3:  The  Cusp  Catastrophe  Mi  nifold  and  Con .«»!  Plane 


3  2  CUSP  SURFACE  AN  ALYSIS  USES  BIMODAL 
STATISTICS 


The  data  produced  by  the  analyst  assessments  of  the 
OMG  threat  performed  dunng  the  project  was  analyzed  with 
the  aid  of  cusp  surface  analysis  procedures  based  on 
catastrophe  theory  that  have  been  developed  by  Cobb  (1978, 
1980,  1983).  These  procedures  permit  the  construction  of 
statistical  models  involving  one  dependent  variable  and  an 
arbitrary  number  of  independent  variables 


108 


3.2.1  THE  STATISTICAL  CUSP  MODEL 


In  the  ccsp  surface  analysis  program,  the  original 
control  variables  and  the  original  behavior  variable  arc 
transformed  by  a  mathematical  process  that  adjusts  the 
coordinate  system  so  that  the  shape  o i  the  original  response 
surface  matches  the  statistically-derived  cusp  catastrophe 
surface  near  the  cusp  point  or  ongin  of  the  pleat  (Figure  2). 
This  results  in  the  behavior  variable  for  the  statistical  model 
becoming  a  function  of  both  the  original  behavior  variable 
and  the  original  control  variables.  This  is  the  principal 
difference  between  the  statistical  and  canonical  (or  elementary 
catastrophe)  cusp  models. 

•The  statistical  cusp  catastrophe  model  is  a 
transformation  of  the  original  system  response  surface  which 
is  itself  generated  from  analyst-derived  data.  A  series  of 
statistical  cusp  control  factors  A(X),  B(X),  and  C(X)  that 
are  functions  of  a  sector  of  independent  variables,  X,  are 


defined  as  a  follows: 

A(X)  c  Aq  +  AjXj  +«.+  A jXj. 

(4) 

B(X)  «  Bq  +  BjXj  +™+  BfXj. 

(SI 

C(X)  *  c0  +  qx,  +...+  qxr 

(6) 

These  values  arc  used  to  determine  the  value  of  the  dependent 
or  output  variable,  Y,  where  the  predicted  values  of  this 
variable  are  solutions  of  the  equation: 

A(X)  +  B(X)IY  -  C(X))  -  DIY  -  C(X)13  =  0  (7) 
This  equation  can  be  written  in  the  following  form: 

a  +  by  -dy^  o  0  (8) 

Equation  (8)  is  similar  to  the  cusp  manifold  equation  (2)  if  the 
coefficient  (d)  in  equation  (8)  is  set  equal  to  the  value  (-1)  and 
the  dependent  variable  (y)  of  the  statistical,  cusp  surface, 
model  is  identified  with  the  dependent  variable  (x)  of  the 
canonical  model. 


3.2.2  ESTIMATING  PARAMETERS 


The  cusp  surface  analysis  program  uses  the  method  of 
maximum  likelihood  to  estimate  the  parameters  of  the  cusp 
model  The  process  begins  with  the  estimation  of  the 
coefficients  of  a  linear  regression  model.  These  coefficients 
are  then  used  as  a  starting  point  for  an  iterative  process  which 
employs  a  modified  Ncwton-Raphson  method  to  construct  a 
statistical  model  This  process  uses  a  set  of  input  data 
elementsand  computes  the  values  of  a  set  of  parameter  values 
that  maximize  the  likelihood  of  the  cusp  model  based  on  these 
data.  If  the  very  first  iteration  performed  by  this  process 
yields  a  decrease  in  the  likelihood  function,  or  no  cubic  term 
is  detected  in  the  data,  the  program  indicates  that  a  linear 
model  is  preferable  to  a  non-linear  (or  cusp)  model  and  the 
analysis  is  halted  (Figure  1). 

When  cubic  terms  are  detected  in  the  data,  the  cusp 
analysis  program  continues  to  compute  logarithmic  likelihood 
values  of  this  model  until  convergence  is  achieved.  The 
analysis  is  halted  if  convergence  is  not  possible,  or  if  the 
value  of  the  estimated  likelihood  value  fails  to  increase. 


When  successful  convergence  to  parameter  values  :tbat 
maximize  the  likelihood  function  is  achieved,  the  cusp 
surface  analysis  program  presents-the  estimated  coefficients 
of  each  factor.  The  program  also  computes  the  most  likely 
dependent  variable  values  2nd  presents  these  data  in  tabular 
form.  This  variable  may  have  either  one  value 
(corresponding  to  a  single  mode  of  an  associated  conditional 
probability  density  function  (PDF))  or  three  values 
(corresponding  to  two  modes  and  a  single  anti-mode  of  the 
PDF).  Graphical  displays  oF  “slices”  of  the  estimated 
catastrophe  surface  model  for  sets  of  fixed  and  variable 
parameter  values  are  also  presented. 


3.2.3  MAKING  PREDICTIONS 


There  is  no  single  definitive  statistical  test  for  the 
acceptability  of  a  catastrophe  model  because  these  models 
generally  offer  more  than  one  predicted  value  for  the 
dependent  (or  behavior)  variable  given  a  set  of  values  of 
independent  (or  control)  variables.  Under  such 
circumstances,  it  is  difficult  to  find  a  suitable  definition  for 
prediction  error.  Another  difficulty  arises  because  the 
statistical  model  is  not  linear  in  its  parameters.  In  spite  of 
these  difficulties,  several  methods  (involving  the  chi-square 
and  other  statistical  tests)  exist  to  validate  a  catastrophe  model 
and  some  of  these  methods  are  used  by  the  cusp  surface 
analysis  program  (Figure  4).  The  cusp  catastrophe  model 
provides  a  suitable  description  of  the  relationship  between  a 
scries  of  independent  variables  and  a  dependent  variable 
when  the  following  conditions  arc  satisfied: 


1 .  The  chi-square  test  shows  that  the  likelihood  of 
the  cusp  model  is  significantly  higher  than  that 
of  the  linear  model. 

2.  The  coefficient  for  the  cubic  term  and  a*  least 
one  of  the  coefficients  of  the  factors  A  and  B 
are  significantly  different  from  zero. 

3.  At  least  10%  of  the  data  points  in  the  estimated 
model  fall  in  the  bimodal  or  ambiguous  zone. 

In  applications  of  catastrophe  theory,  there  arc  two 
distinct  ways,  called  Maxwell  and  delay  transition 
conventions,  for  calculating  predicted  values  from  a 
catastrophe  model.  The  cusp  surface  analysis  program 
provides  estimates  of  which  of  these  conventions  is  most 
appropriate  for  describing  transitions  of  system  behavior 
The  Maxwell  convention  considers  the  position  of  the 
highest  mode  of  the  probability  density  function  to  be  the 
predicted  value.  The  delay  convention  defines  the  predicted 
value  as  the  equilibrium  point  towards  which  the  equivalent 
dynamical  system  would  have  “moved.” 


4.  OMG  THREAT  ASSESSMENT.  MAPPING 
DATA  TO  THE 
CATASTROPHE  SURFACE 


Test  data  sets  each  with  a  different  number  of  active 
indicators  and  level  of  confidence,  tune  of  day,  weather 
conditions,  and  politico- mi luaiy  properties  chosen  to  reflect 
indications  of  different  adversarial  status  conditions  were 
presented  to  experienced  intelligence  analysts.  These 
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from  transformed  versions  of  the  control  factors  (which  are 
oaHed  the  bifurcation  (or  splitting)  and  asymmetry  'or 
normal)  factors).  In  the  sample  case  reported  in  the  tigure, 
j*?PCR'P,5t  °f  ^  points  are  located  within  the 
v-shaped  bimodal  region.  Under  such  circumstances,  a  linear 
mwel  of  these  data  would  provide  an  incorrect  data  fit  in 
over  four  out  of  ten  cases. 


•**  •  •  »  •"  *•" 


*  *  TT 

1  ■  ••»»»»»««(»» 


•  ♦  ♦  ♦ 

#440(> 


Rgure  <  OMO  Assessments  Displayed  on  the 
usp  Control  Plane 


Figure  4:  Cusp  Surface  Analysis 

analysts  were  then  asked  to  assess  the  level  of  OMG  threat 
that  they  perceived  to  be  reflected  in  these  data  (Figure  2). 


During  these  threat  assessment  activities,  the  analyst 
formed  a  judgment  as  to  his  or  her  own  relative  degree  of 
certainty  that  the  display  of  data  elements  indicated  that  OMG 
formation  would  appear  to  be  in  progress.  This  information 
was  then  entered  into  the  OMG  threat  assessment  data  base 
with  the  aid  of  the  scale  displayed  on  the  computer  screen. 
Fo  lowing  th.s  ta$K,  the  analyst  was  asked  to  designate  which 
or  the  indicators  were  of  primary  importance  and  which  were 
^ndary  importance  in  determining  the  level  of  perceived 
OMG  threat.  Information  generated  during  these  activities 
was  then  analyzed  with  the  cusp  surface  analysis  program 
which  attempted  to  construct  a  mathematical  model  of  the 
analyst-denved  assessment  data,  as  described  above. 


,  u  a”a,ys*s  ^  model-building  activities  were  ther 
followed  by  the  production  of  a  series  of  diagrams  which 
display  the  major  features  of  the  statistical  catastrophe  model 
In  one  display  (see  Figure  5,  for  example),  the  transformed 
data  are  presented  as  locations  on  the  control  plane  formed 


The  cusp  surface  analysis  program  constructs  a  cusp 
catastrophe  model  of  the  I&W  analyst-denved  data  by  a 
process  that  is  illustrated  in  Figure  6  The  transformed  data 
is  located  within  the  circle  drawn  on  the  comic*  plane  formed 
from  transformations  of  the  number  of  active  lmhcators  and 
level  of  confidence  control  factors.  Some  of  thesv.  data  he 
inside,  and  the  remainder  lie  outside,  the  region  of  bimodality 
or  ambiguity  on  the  control  pi  ane. 


4,1  CATASTROPHE  MODELS 


When  a  catastrophe  model  can  be  constructed  from  the 
analyst’s  threat  assessment  data,  it  is  possible  to  describe  a 
range  of  different  I&W  analyst  response  behaviors,  such  as 
sudden  and  gradual  perceptual  changes,  divergence, 
ambiguity,  hysteresis,  perceptual  “trapping,”  and 
counter-intuitive  or  paradoxical  behavior.  One  particularly 
interesting  discovery  provides  statistical  evidence  that 
suggests  that  I&W  analysts  with  different  types  of  training 
and  previous  mission  responsibilities  appear  to  respond  to 
different  features  of  the  overall  OMG  indicator  data  set. 


no 
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Figure  6:  Mapping  OMG  Data  to  the  Catastrophe  Manifold 


Figure  7:  Sudden  and  Gradual  Change  in  Perception 


OMG  threat.  By  contrast,  the  sequence  (e,  f, 
g,  and  h),  could  result  in  the  analyst  issuing 
an  OMG  warning.  Thus,  while  positions  (d) 
C  no  perceived  OMG  threat”)  and  (h)  (“issue 
art  OMG  warning”)  can  represent  exactly 
similar  level  of  confidence  and  number  of 
active  indicator  inputs,  these  inputs  can 

fe^of  OMGSlana,yS, 


>■  SaMraapd  Gradual  Pcrn-pnnl  rhanor.  •n.c 
catastrophe  model  describes  conditions  under 
which  sudden  and  gradual  changes  in  analyst 
perceptions  can  occur  in  response  to  changes 
m  the  number  of  active  indicator,  and  the  level 
of  confidence  attributed  to  these  indicators. 
An  increase  in  the  number  of  active  indicators 
with  high  confidence  values  can  cause  a 
sudden  increase  in  the  perceived  level  of  OMG 
threat  and  may  lead  to  the  issuing  of  an  OMG 
warning  (Figure  7,  path  (a-b*c),  for  example). 
By  contrast,  a  similar  increase  in  the  number 
of  active  indicators  with  a  low  level  of 
confidence  may  not  lead  to  the  issuing  of  on 
OMG  warning  (Figure  7,  path  (d-c).  for 
example), 

2*  Divci SCHCS,  Perceptual  divergence  occurs 
when  relatively  small  differences  in  the  initial 
number  of  active  indicators  presented  to  an 
I&W  analyst  can  have  a  profound  impact  on 
their  future  perception  of  OMG  threat.  Path 
(a*b)  (Figure  8)  represent  changing 
conditions,  caused  by  an  increase  in  the  level 
of  confidence,  which  would  lead  to  the 
issuing  of  an  OMG  warning,  while  path  (c-d) 
would  lead  to  the  perception  that  a  very  low 
level  of  OMG  threat  existed. 

3.  Amhig-Uily,  Perceptual  ambiguities  can  be 
caused  by  “pre-conditioning”  (Figure  9).  The 
sequence  of  data  sets  represented  by  positions 
(a,  b,  c,  and  d),  for  example,  could  lead  an 
analyst  to  the  perception  of  a  low  level  of 


f  igure  8  Divergent  Perceptions 

4-  ^ltCinc  ’  Tire  Catastrophe  Snrftr^  Slices  <t 
the  catastrophe  surface  formed  by  maintaining 
a  fixed  level  of  confidence  and  varying  the 
number  of  active  indicators,  for  example, 
produces  a  continuous  curve  resembling  an 
oveifolded  “S”  (Figure  10).  The  shapes  of 
such  slices  can  illustrate  such  phenomena  as 
perceptual  hysteresis  and  perceptual 
“trapping”  as  described  below, 

5  Efifla3m.aUiYMCrcw  Perceptual  hystcresu 
can  be  illustrated  with  the  aid  of  the 
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catastrophe  model  (Figure  1 1).  Beginning 
with  a  small  number  of  active  indicators  and  a 
low  level  of  perceived  OMG  threat,  an 
increase  in  the  number  of  these  indicators 
presented  to  the  analyst  can  lead  to  a  sudden 
increase  in  perceived  threat  By  contrast, 
beginning  with  a  large  number  of  active 
indicators  and  a  high  level  of  OMG  threat,  a 
decrease  in  this  number  of  indicators  can  lead 
to  conditions  under  which  a  sudden  decrease 
in  perceived  OMG  threat  can  take  place. 
These  sudden  changes  in  perceived  OMG 
threat  generally  take  place  at  different  numbers 
of  active  indicatorsjor  example 


Figure  9:  Perceptual  Ambiguity 


Figure  10:  “Slicing”  the  Cusp  Surface 


6.  Perceptual  •‘Trapping**  Perceptual  trapping 
occurs  because  an  individuals  perceptions 
appear  to  be  restricted  to  a  particular  portion  of 
the  catastrophe  landscape  so  that  no  “return 


path”  exists  to  permit  a  transition  to  another 
region  of  this  surface  (Figure  12).  Under 
partial  trapping  conditions,  for  example,  an 
increase  in  the  number  of  active  indicators 
presented  to  the  analyst  can  set  the  scene  for  a 
sudden  and  irreversible  increase  in  perceived 
OMG  threat.  This  observation  reflects  the 
reluctance  of  some  analysts  to  withdraw  an 
OMG  warning  once  it  has  been  issued  as 
revealed  in  comments  -  made  during  the 
debriefing  performed  after  the  experiments 
had  been  completed.  Complete* perceptual 
trapping  can  occur  when  no  patfrexists  for 
transitions  between  the  low  OMG  and  high 
OMG  threat  perception  states.  Under  such 
circumstances,  the  analyst’s  perception  of 
OMG  threat  would  remain  at  either  a  Jow  or  a 
high  level  despite  very  large  changes  in 
number  of  active  indicators  or  level  of 
confidence,  for  example. 


five*  0*  Nu*£*r  or  Aav* 

t*v*1  cT  G&M*ha  V  mSM  « ti  v*C* 

Figure  11:  Perceptual  Hysteresis 


7.  Counttr-imuinvf  or  Paradoxical  Eehaviw 
Catastrophe  models  based  on  analysts' 
perceptions  of  OMG  threat  suggest  that  these 
perceptions  may  exhibit  patterns  of 
counter-intuitive  or  paradoxical  behavior 
(Figure  13).  Beginning  with  a  high  level  of 
perceived  OMG  threat,  with  a  small  number  of 
active  indicators,  and  with  the  level  of 
confi icnce  maintained  at  its  mean  value,  a 
subsequent  increase  in  the  number  of  active 
indicators  presented  to  the  analyst  can  lead  to  a 
sudden  decrease  m  the  level  of  perceived 
OMG  threat,  for  example.  Subsequent 
increases  in  the  number  of  active  indicators 
can  now  cause  a  gradual  increase  in  the  level 
of  perceived  threat,  but  the  analyst’s 
perceptions  now  appear  to  be  “trapped*’  to  a 
particular  S- shaped  slice  of  the  catastrophe 
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surface.  Under  these  circumstances,  a  return 
to  the  initial  conditions  would  appear  to  be 
impossible  without  changes  in  the' level  of 
confidence  or  the  presentation  of  additional 
sets  of  data  elements  to  the  analyst,  for 
example. 


R*v*  «  aval**  Numtartf  Aav*  WJc*K/» 
U*WolCtorf«3*n£>»Vaf tefetnJM  **«•«»*• 


Figure  12:  Perceptual  Trapping 
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I  UkMpiac*oA*»\>«<*  part  cftoautfiwi*  o^ae* 
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Figure  13:  Counter-Intuitive  or  Paradoxical  Behavior 


^f,lhl,I:,Sp0nse  of  jhc  diffcent  analysts  to  the  OMG  threat 
10  ?cpcnd  upoa  lhe  Aground  and 
actm  d£?v  L.raf  analysls.-  7hus  analysts  with  extensive 
aerrve  duty  mihtary  experience  appeared  to  pay  almost 
exe  lustve  attention  to  the  number  of  £tfye  indicators  while 
another  analyst  with  much  more  strategic-level  experience 
f  7°a!.excl“sive  attention  to  the  paoems  (or 
sequence  type)  of  the  displayed  indicators,  for  example. 

following  is  a  brief  review  of  the  analysis  of  the 
OMG  threat  data  collected  from  an  experienced  intelligence 
S  ps‘*h'ch  d“cnbes  *0  impact  of  thfnumberof  primary 
indicators,  sequence  type  (or  pattern  of  indicators),  aid  level 

^rawftodf ‘  “a  ySt  S  perc'p,ioa  of  0MG  'hma'  level 

of  Iho  Hi!  tM5rol  pI5ae  p.,?t  (Figure  14a)  shows  that  54.8% 
of  the  data  are  located  within  the  bimodal  zone  and  represent 
analyst  assessment  conditions  which  arc  subiect  to 
am  igm*  A  slice  of  the  cusp  model  surface  for  Sgc  of 
ofiUeSrv  he  pj?m?>'  “dreatois  and  sequence  type  and  level 
Uiblttl  ntt.”0?  fixed  31  dJclr  mcaa  va,ul:s  reveals  situations  in 
percep‘ual  •reppmg  can  occur  (Figure  14b).  A 
i  Su?a?  31  a  fi«d  lcvcl  of  confidence  and 
IttHtti  f. P  ma7  “dreators  and  with  variable  sequence- 
type  values  reveals  situations  in  which  perceptual  trapping 
tt".?fdur.»,lh  l^e  analyst’s  OMG  {htcat  pcrccpK 
restneted  after  to  a  high  value  range  or  a  low  value  range  for 
^1  ranges  of  sequence-type  values  (Figure  14c)  A  slice  of 
the  cusp  model  surface  for  a  range  of  values  of  the  level  of 

WCor»0IPl^»p10, 


4.2  SPECIFIC  ANALYST  ASSESSMENTS 


Figure  14a;  Analysis  of  OMG  Threat  Assessment  Data 


}ntclhgence  analysts  have  tested  t 
IWCAT  systein.  It  is  a  suggestive  finding  of  the  statistic 
analyses  performed  dunng  this  investigation  that  the  natu 


These  Imowledge  development  activities  involving  the 
generation  of  OMG  indicator  test  data  sets,  their  presentation 
to  I&W  analysts,  the  construction  of  an  OMG  threat 
assessment  data  base,  and  its  statistical  analysis  have 
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Hgurc  14b;  Analysis  of  OMG  Threat  Assessment  Data 


(c)  VfcTJt**  S«qu*nce  Typ*.  fu*j  Pnrrwy  Wowi 


figure  14  Analysis  of  OMG  Threat  Asscssmen-  SV.» 

provided  new  insights  to  the  perception  of  threat, 
particularly  m  the  area  of  the  OMG.  It  is  now  possible  to 
identify  conditions  under  which  sudden  and  gradual  changes, 
divergence,  ambiguities,  paradoxical  reversals,  hysteresis, 
and  perceptual  “trapping”  can  take  place  and  provide  an 
assessment  of  their  impact  on  the  interpretation  of  intelligence 
data  by  intelligence  analysts  and  others  These  findings  have 
significant  implications  in  many  combat-related  areas. 


particularly  in  the  communication  of  intelligence  analyst 
perceptions  to  battlefield  commanders,  a  subject  that  is  under 
investigation. 


44  Vart*^l*vrt0»CcrfW*nc»«F«*epftfr»fytoieatof» 
and  Typ* 

Figure  14d:  Analysis  of  OMG  Threat  Assessment  Data 


5.  CONCLUSIONS 


The  research  described  in  this  paper  has  produced  a 
successful  demonstration  of  the  use  of  catastrophe  theory 
mathematics  to  analyze  indications  and  wamings-related  data 
associated  with  a  Soviet  OMG.  The  effort  has  also  produced 
a  prototype  computerised  system  that  can  be  used  to 
support  analysts  and  decision-makers.  The  system  is  able  to 
capture  and  use  small,  and  apparently  insignificant,  changes 
in  information  that  are  the  precursors  of  dramatic  changes  in 
overall  system  behavior.  The  work  has  clearly  demonstrated 
that  I&w-related  data  can  be  generated  and  fitted  to 
non-lmcar  models  in  a  rigorous  extension  of  the  ways  that 
data  arc  generated  and  fitted  to  linear  models  in  the  process  of 
liner  regression.  The  activity  has  gone  far  beyond  simple 
qualitative  model  building  by  constructing  quantitative, 
statistically-verified,  models  which  can  be  used  for  analysis 
and  prediction. 

Several  experienced  intelligence  analysts  have  tested 
the  IwCAT  system  and  the  information  generated  by  this 
process  was  subjected  to  non-linear  statistical  analysis  using 
the  cusp  surface  analysis  program.  It  is  a  suggestive  finding 
of  this  analysis  that  the  nature  of  the  response  of  the  different 
analysts  to  the  OMG  threat  test  data  appeared  to  depend  upon 
their  background  and  experience.  While  the  observation  that 
analyst  background  and  experience  lead  to  a  specifity  of 
analyst-response  is  a  tentative  finding  due  to  the  small  sample 
size  of  analysts  that  were  used  in  the  experiment,  such  a 
suggestion  can  have  profound  implications  on  the  way  that 
I&W  and  other  forms  of  intelligence  analyses  are  interpreted 
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and  used.  These  possibilities  should  be  the  subject  of  further 
analytic  activities  and  investigations  with  the  aid  of  the 
IWCAT  system. 

This  research  has  provided’ evidence  that  I&W 
indicators  are  neither  linear  nor  uncorrelated  in  the  mind  of 
experienced  intelligence  analysts,  a  finding  which  is  itself  of 
value.  The  technology  developed  to  mvestigate  I&W  analyst 
responses  is  direcjly  applicable  fo  communicating  analyst- 
understanding  to  battlefield  commanders,  and  to  captunng 
ambiguities  in  battlefield  commanders'  perception  of  the 
combat  environment  The  technology  also  appears  to  be  of 
value  as  an  aid  to  analysts  and  decision-makers  byi 

1  Alerting  individuals  to  conditions  where  small 
changes  in  indicator  input  can  give  rise  to 
either  gradual  or  sudden  changes  of  perception 
in  the  same  situation  under  different 
conditions. 

2.  Providing  an  analytic  capability  that  can  give 
rational  interpretations  of  non-linear  and 
apparently  counter-intuitive  behavior  and 
clarifying  the  causes  and  effects  of  ambiguous 
peccptions  of  the  same  situation. 

3  Identifying  and  characterizing  the  different 
types  of  responses  of  I&W  analysts  and 
others  to  features  of  I&W-rclatcd  data  sets. 

4.  Providing  methods  that  can  be  used  to  support 
the  training  of  such  analysts  and  the 
interpretation  of  their  assessments  of  particular 
sets  of  indicators. 

The  catastrophe' the ory-based  technology  provides  a 
method  for  developing  a  new  understanding  of  the  non-linear 
aspects  of  the  military  in  iclligence-analy tic  process.  Such  an 
understanding  can  thin  be  extended  from  intelligence 
analysis  to  command  and  control  by  providing  new  methods 
for  identifying  and  selecting  particular  responses  from  a  list 
or  response  options  available  to  the  commander.  The 
development  of  this  type  of  facility  is  of  obvious  importance 
in  the  C£  arena,  and  is  being  investigated 
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Abstract 

The  modeling  of  C*  systems  suffers  from  many  of  the  same 
problems  encountered  in  modeling  other  large,  complicated  sys¬ 
tems,  Because  (7s  systems  have  many  attributes,  and  compli¬ 
cated  interactions,  the  state  spaces  of  detailed  models  are  so 
large  that  standard  solution  methods  are  computationally  in¬ 
tractable.  To  combat  this  problem,  we  have  developed  high- 
level,  aggregated  C5  models  with  reduced  state  spaces  and  an 
hierarchical  structure.  These  models  are  easily  programmed 
and  run,  and  can  be  easily  modified.  Parameters  of  the  high- 
level  models  are  estimated  using  detailed  simulation  runs  and 
other  data. 

For  definiteness,  we  consider  a  specific  battle  scenario. 
However,  we  use  a  modular  approach,  and  the  model  can  easily 
be  extended  to  other  scenarios. 

Introduction 

In  (l],  we  have  presented  a  stochastic  C3  model  for  a  multi¬ 
stage  and  multi-phase  C3  battle  system.  In  our  model,  the 
battle  is  described  as  a  serial  succession  of  battle  stages. 
During  each  stage,  the  forces  engage  In  a  certain  type  of 
battle.  Following  the  termination  of  a  stage,  a  new  battle 
stage  is  initiated,  so  that  the  currently  available  forces  now 
engage  in  a  different  battle  type.  The  state  of  the  system 
at  the  start  of  a  battle  stage  depends  upon  the  state  at  the 
termination  of  the  previous  battle  stage. 

Each  stage  is  further  divided  into  a  serial  succession  of 
phases.  During  a  phase,  a  battle  takes  place  in  accordance 
with  the  underlying  system  state  conditions.  The  state  of 
the  system  at  the  termination  of  a  battle  phase  provides 
a  key  input  for  the  determination  of  the  related  state  of 
the  f,jstcm  at  the  start  of  the  next  phase,  within  the  same 
stage.  The  stage  phases  involve  similar  battle  types  en¬ 
gaged  under  varying  system  and  force  state  conditions. 

Performance  equations  are  derived  to  describe  the 
state  distribution  at  the  termination  of  each  battle  phase 
and  st'.ge,  as  well  as  to  compute  mission  win  probabilities, 
asset  losses  and  battle  durations. 

Our  multi-stage  (73  models  have  been  applied  to  var¬ 
ious  Army,  Air  Force,  and  Navy  scenarios.  For  example, 
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in  [ij  an  Army-based  model  is  presented;  in  addition,  ex¬ 
tensive  applications,  tests  and  simulations  have  been  car¬ 
ried  out  at  NOSC  in  providing  key  modeling  and  perfor¬ 
mance  evaluation  and  design  tools  for  Outer-Air-Battle 
(OAB)  and  Inner-Air-Battle  (IAB)  air-defense  scenarios, 
as  employed  by  the  U.S.  naval  forces  in  protecting  a  naval 
battle  group. 

To  model  the  hierarchical  integration  of  multiple  levels 
of  command  structures,  we  need  to  hierarchically  combine 
basic  single-battle  single  and  multi-phase  models  (see  (2, 
3,  4,  5,  6,  7,  1,  8}).  It  is  essential  to  model  the  special 
hierarchical  command,  control  and  decision  structure  of 
the  C3  system,  so  that  qualitative,  as  well  as  quantitative 
system  understanding,  modeling,  evaluation,  analysis  and 
optimization  functions  can  be  accomplished. 

Our  Multi-Stage,  Multi-Battle  models  describo  hierar¬ 
chically  structured  command  organizations  which  arc  in¬ 
volved  in  managing  and  controlling  the  conduct  of  multiple 
battles.  Each  battle  consists  of  multiple  stages  and  phases, 
as  described  above.  Once  allocations  of  resources  and  as¬ 
signments  of  tasks  are  made  by  the  decision  maker  (com¬ 
mand)  at  a  certain  level  of  the  licrarchy,  the  affected  lower 
level  battle  systems  proceed  to  operate  independently  un¬ 
til  the  next  decision  point.  At  this  latter  time,  information 
is  aggregated  and  dis-aggregated  as  it  moves  up  and  down 
through  the  C3  hierarchy. 

Overview  of  the  Multi-Stage, 
Multi-Battle  MSMB-1  Model 

For  definiteness,  we  consider  a  specific  battle  scenario. 
However,  we  use  a  modular  approach,  and  the  model  can 
easily  bo  extended  to  other  scenarios. 

We  consider  a  battle  between  two  forces:  the  F-forcc 
and  the  A-force.  Each  force  has,  for  example,  tanks  and 
aircraft.  The  tanks  fight  each  other  on  a  battlefield.  Air¬ 
craft  can  be  allocated  to  attack  either  tanks  or  aircraft 
from  the  opposing  side.  Thus,  two  battles  are  observed 
the  tank  battle,  that  may  involve  aircraft  attacks  as  well, 
and  the  air-to-air  aircraft  combat  battle. 

Each  force  has  a  two-level  hierarchical  command 
structure.  At  the  top  level  of  the  hierarchy,  the  comman¬ 
der  for  each  side  allocates  aircraft  either  to  the  air-to-air 
battle,  or  to  the  tank  attack  mission.  This  decision  is  based 
upon  summary  statistics  describing  the  state  of  the  battles. 
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Figure  1:  Command  Hierarchy 


y 


Figure  2:  Thnk  Battle  Grid 


For  instance,  we  assume  that  the  commander  knows  the 
number  of  surviving  tanks  under  his  command,  and  their 
average  fuel  level,  but  does  not  know  their  exact  position. 
The  second  level  of  the  hierarchy  consists  of  the  individual 
commonads  of  the  air-to-air  battles  on  one  hand,  and  of 
the  tank  (and  air  attack)  battles,  on  the  other  hand. 

The  battle  proceeds  in  stages,  which  correspond  to  de¬ 
cision  points  for  the  commanders.  At  the  start  of  a  stage, 
each  commander  decides  how  to  allocate  the  aircraft  un¬ 
der  his  control:'  some  are  allocated  to  the  air  battle,  and 
the  rest  are  allocated  to  the  tank  battle.  During  a  stage, 
the  battles  proceed  independently.  Both  of  the  battles  are 
modeled  as  phased  battles.  A  stage  consists  of  a  fixed 
number  of  phases  (these  numbers  can  be  different  for  the 
tank  battle  and  air  battle.)  Each  phase  of  the  tank  battle 
consists  of  three  subphases:  tank  movement,  tank  vs.  tank 
attrition,  and  aircraft  vs.  tank  attrition.  The  tank  groups 
move  on  a  2  x  3  grid  (sec  figure  2.)  All  members  of  a  tank 
group  occupy  the  same  grid  square.  Grid  locations  affect 
tank  vs.  tank  detection  and  kill  probabilities,  ar  1  aircraft 
vs.  tank  detection  and  kill  probabilities.  A  tank  group  has 
either  high  or  low  fuel  status.  When  a  tank  group  with  high 
fuel  status  moves,  with  some  probability  it  changes  to  low 
fuel  status.  A  tank  group  with  low  fuel  status  has  limited 
movement  options.  (Rather  than  modeling  a  fuel  limited 
battle,  we  could  easily  model  an  ammunition  limited  bat¬ 
tle  in  the  same  manner.  As  the  model  undergoes  further 
development,  we  will  explore  this  option.) 

Each  phase  of  the  air  battle  consists  of  a  pairing  of 
adversary  aircraft,  followed  by  the  firing  of  a  number  of  air- 
to-air  missiles.  The  number  of  missiles  fired  per  subphase  is 
an  input  parameter.  Unpaired  aircraft  wait  for  subsequent 


phases.  Alternative  air  battle  models  could  easily  be  used 
in  place  of  this  model. 

At  the  end  of  each  stage  of  the  battle,  the  comman¬ 
ders  reallocate  aircraft  based  upon  the  outcomes  of  the  air 
and  tank  battles.  The  battle  can  pioceed  for  an  arbitrary 
number  of  stages,  and  various  win  events  can  be  defined. 
Statistics  showing  the  transient  and  overall  progress  of  the 
battle  are  collected. 

We  have  derived  analytic  performance  equations  that 
can  be  recursively  solved  through  the  use  of  a  computer, 
to  yield- the  distributions  of  the  underlying  battle  states 
(see  {1  j  for  details.)  These  results  are  then  used  to  compute 
win  probabilities  and  loss  distributions,  for  prescribed  bat¬ 
tle  durations,  under  various  predetermined  or  adaptively 
and  dynamically  adjusted  rules  of  engagement,  resource  al¬ 
location  policies,  and  other  command  and  control  options. 
We  present  performance  curves  for  C3  battle  examples  un¬ 
der  a  variety  of  command  and  control  policies  for  various 
parameters  and  scenario  conditions. 

Input  Variables 

The  inputs  to  the  model  are: 

•  Ns  —  Number  of  stages  in  battle. 

•  Nts  =»  Number  of  tank  battle  phases  per  stage. 

•  Na$  *=  Number  of  air  battle  phases  per  stage 

•  T[  =»  Initial  number  of  F-Tanks. 

•  Xf  =  Initial  X  coordinate  of  F-Tank  group. 

•  Yf  o  Initial  Y  coordinate  of  F-Tank  group. 

•  Tf  =  Initial  number  of  A-Tanks. 

•  Xf  =  Initial  X  coordinate  of  A-Tank  group. 

•  Yf  =  Initial  Y  coordinate  of  A-Tank  group. 

•  Af  sa  Initial  number  of  F-Aircraft. 

•  Aa  ss  Initial  number  of  A- Aircraft. 

•  N£{T  =  Number  of  missiles  fired  by  an  F-Tank  which 
has  detected  a  target,  during  a  tank  vs.  tank  srbphase 
of  the  tank  battle. 

•  -NjJr  =  Number  of  missiles  fired  by  an  A-Tank  which 
has  detected  a  target,  during  a  tank  vs.  tank  subphase 
of  the  tank  battle. 

•  N/jat  =  Number  of  missiles  fired  by  an  F-Aircraft 
against  a  detected  A-Tank,  during  an  aircraft  vs.  tank 
subphase  of  the  tank  battle. 

•  NffAT  **  Number  of  missiles  fired  by  an  A-Aircraft 
against  a  detected  F-Tank ,  during  an  aircraft  vs.  tank 
subphase  of  the  tank  battle. 

•  Nmaa  5=5  Number  of  missiles  fired  by  an  F-Aircraft 
against  a  targeted  A-Aircraft,  during  a  ph?fc  tne 
aircraft  vs.  aircraft  battle. 

•  Nmaa  ~  Number  of  missiles  fi.ed  by  an  A-Aircraft 
against  a  targeted  F-Aircraft,  during  a  phase  of  the 
aircraft  vs.  aircraft  battle. 
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•'JdttQCuYuX*?*)  =•  Probability  that  an  F-Tank 
at  (Xj»Yi)  will  detect  an  A-Tank  at  (. X 2, V2)  during 
a  tank  vs.  tank  subphase. 

•  P£tt(Xi ,  Yi  ,  X2  >  Y2)  =  Probability  that  an  A-Tank 
at  {XuYi)  will  detect  an  F-Tank  at  (X^Y*)  during 
a  tank  vs.  tank  subphase. 

•  Y)  ^Probability  that  an  F-Aircraft  will  de¬ 
tect  an  A-Tank  at  (X,  Y)  during  an  aircraft  vs.  tank 
subphase  of  the  UnlbbaUle. 

•  PpAj-iX,  Y)  ^Probability  that  ai»'A- Aircraft  will  de¬ 
tect  an  F-Tank  at  (X,  Y)  during  an  aircraft  ys.  tank 

« subphase  of  the  tank  battle.  * 

c  PkTT (Xi  ,  Yi  ,  X2 ,  Y2)  =  Probability  that  a  single  mis¬ 
sile  from  an  F-Tar.k  will  kill  a  detected  A-Tank. 

•  PfirriX  1 >  Y\,  Xj,  Yj)  =, Probability  that  a  single  mis¬ 
sile  from  an  A-Tank  will  kill  a  detected  F-Tank. 

•  P%at{X;Y)  =  Probability  that  a  single  missile  from 
an  F-Aircraft  will  kill  a  detected  'A-Tank  at  (X,Y). 

•  P/cat(^»P)  ®  Probability  that  a  single  missile  from 
an  A- Aircraft  will  kill  a  detected  F-lhnk  at  (X,Y). 

•  P£aa  ~  Probability  that  a  single  missile  from  an  F- 
Aircraft  will  kill  a  targeted  A- Aircraft. 

•  P£aa  “  Probability  that  a  single  missile  from  an  A- 
A.rcraft  will  kill  a  targeted  F-Aircraft. 

•  PSi(XuYitXttY»)  «  Probability  that  an  F-Tank 
group  in  the  high  fuel  state  will  switch  to  the  low 
fuel  state  if  it  moves  from  (Xi,  Yi)  to  (X2,Y2). 

•  P/Jl(Xi,Yi,X2? Yj)  ra  Probability  that  an  A-Tank 
group  in  the  high  fuel  state  will  switch  to  the  low 
fuel  state  if  it  moves  from  (Xj,  Y»)  to  (X2,  Y2). 

Definition  of  the  Model 

We  will  define  the  model  in  sections  corresponding  to  the 
top  level  of  the  hierarchy,  the  tank  battle,  and  the  air-to- 
air  battle.  We  will  further  separate  the  definitions  of  the 
movement,  tank  vs.  tank  attrition,  and  aircraft  vs.  tank  at¬ 
trition  subphascs  of  the  tank  battle.  This  approach  makes 
it  very  easy  to  modify  assumptions  about  firing  doctrine, 
allocation  rules,  and  so  forth.  By  using  this  approach,  we 
can  consider  multiple  tank  battles  and/or  air  battles  by 
changing  only  the  top  level  of  the  model. 

The  Top  Level  Model 

The  top  level  of  the  battle  proceeds  as  follows: 

•  The  battle  begins  with  an  initial  allocation  of  tanks 
and  aircraft. 

•  At  tne  start  of  each  stage,  the  commanders  each  con¬ 
sider  summary  results  ot  the  previous  stage  of  the  bat¬ 
tle,  and  allocate  their  aircraft  between  the  tank  and 
air  battles. 

•  The  process  repeats  itself. 


The  State 

We  define  the  state  of  the  top  level  battle  at  the  start 
of  stage  n  to  be: 

where 

•  Tjf  =  The  Number  of  F-Tanks  at  the  Start  of  Stage 
n. 

•  J„  —  The  Fbel  State  of  the  F-Tanks  at  the  Start  of 
Stage  n. 

•  AJ  =  The  Number  of  F-Aircraft  at  the  Start  of  Stage 
n. 

•  T*  =  The  Number  of  A-Tanks  at  the  Start  of  Stage 
n. 

•  In  —  The  Fuel  State  of  the  A-Tanks  at  the  Start  of 
Stage  «. 

•  A*  =  The  Number  of  A-Aircraft  at  the  Start  of  Stage 
n. 

Aircraft  Allocation  Rules 

We  assume  that  both  commanders  allocate  aircraft 
based  upon  a  deterministic  function  of  the  state.  That  is, 
we  let 

.  A?n  -  =  The  Number 

of  F-Aircraft  allocated  to  the  Stage  n  Tank  Battle, 
0  <  A?n  <  aJ. 

•  A  s=  Aj  -  A ss  The  Number  of  F-Aircraft  allo¬ 
cated  to  the  Stage  n  Air  Battle. 

•  Ayn  «  #(#,/£, AkJrtf./jf.AjJ)  =  The  Number 
of  A-Aircraft  allocated  to  the  Stage  n  Tank  Battle, 
0<A$„<AZ. 

•  A^n  =  A*  -  Afn  =  The  Number  of  A-Aircraft  allo¬ 
cated  to  the  Stage  n  Air  Battle. 

The  allocation  rules  (•)  and  F„( )  do  not  have  to  use 
all  of  the  state  information;  we  can  assume  that  each  side 
has  only  partial  information  about  the  other  side.  The  al¬ 
location  rules  are  easily  changed.  We  will  use  the  following 
allocation  rules  in  the  numerical  examples  presented  later: 

1.  If  your  side  has  more  (>)  aircraft  than  the  other  side, 
allocate  half  of  your  aircraft  (rounded  down  to  the 
nearest  integer  number)  to  the  tank  battle  end  the 
rest  to  the  air  battle;  otherwise  allocate  all  of  your 
aircraft  to  the  air  battle; 

2.  Always  allocate  one  half  (rounded  down  to  the  nearest 
integer)  of  your  aircraft  to  the  tank  battle,  and  the 
rest  to  the  air  battle; 

3.  Always  allocate  all  of  your  aircraft  to  the  tank  battle; 

4.  Always  allocate  all  of  your  aircraft  to  the  air  battle. 
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Update  oft  be  State  ProbaKSy  JKrfi&clsoa  at  the 
Start  ofEaeb  Stage 

Tie  state  ptobiKSSr  datr&rtio  at  tie  jurt  ef  eaab 

stage  is  dictated  ct  tie  foCoaiaj;  m=d 

«  Asssae  tial  tie  state  prob2i£S^£*tisirtica  fee  tie 

start  of  stage  n  bas  beea  caksbted. 

•  For  eath  stale  ssjti  ocsstjTe  proiaiStj,  tie  zScxilioa 
xeis^asc  csed  to  detertsae  lie  iFiOfityri  c  -frctaft 
to  tie  task  aad  air  battles. 

•  The  coad-tioaal  ditribatka  of  tie  ocUcoh  of  tie 
task  battle  aad  lie  air  battle  are  each  raVefated  (b- 
depeudertljr,  c=2*  tie  task  aad  air  balUe  oodris), 
given  the  initial  state. 

•  The  conditional  distributions  are  combined  to  give  tie 
overall  joist  conditional  distribution  fix  the  stort  cf 
stage  n-i- 1,  given  tbe  state  at  the  start  of  stage  a. 

•  The  conditional  distributions  are  combined  to  yieJd 
the  overall  joint  state  distribution  foe  tbe  start  of  stage 
n  +  l. 

iNote  that  this  is  not  the  most  computationally  efficient  ap¬ 
proach.  Since  many  of  the  joint  states  trill  ©tc  tie  same 
inputs  to  either  the  tank  battle  or  the  air  battle,  either 
sub-battle  couW  be  recak,  dated  for  the  same  set  cf  inputs 
many  times.  It  would  be  more  computationally  efficient 
to  store  the  results  of  the  sub-batiks  for  each  set  of  input 
conditions,  and  then  combine  them  appropriately.  How¬ 
ever,  this  would  require  a  great  ded  of  storage.  For  our 
initial  model,  we  calculate  and  store  the  results  of  vari¬ 
ous  sub-oattles  and  phases  only  once,  and  then  combine 
them  as  needed.  In  future  work  we  will  examine  of  the 
computation/storage  tradeoffs. 

The  Tank  Battle 

The  tank  battle  is  modeled  as  follows:  Two  opposing 
groups  of  tanks  battle  each  other  on  a  2-dimensional  sur¬ 
face.  The  surface  is  divided  into  6  sections  (for  our  initial 
model,  a  2  X  3  grid.)  AH  the  tanks  in  a  tank  group  axe 
in  the  same  grid  square.  The  tank  groups  move  about 
the  grid,  fighting  each  other.  Opposing  aircraft  also  strafe 
the  battlefield.  The  tank  vs.  tank  and  aircraft  vs  tank 
probabilities  of  detection  and  kill  depend,  upon  the  tank 
locations.  When  a  tank  group  names,  with  some  probabil¬ 
ity  the  tank  group  will  enter  the  “low  fuel  state.”  Once  in 
the  low  fuel  state,  tank  movement  b  restricted. 

Each  stage  of  the  tank  battle  is  divided  into  phases, 
and  the  phases  arc  further  divided  into  sub-phase  of  move¬ 
ment,  tank  vs.  tank  fighting,  and  aircraft  vs.  tarjk  fighting. 
A  stage  of  the  tank  battle  proceeds  as  follows: 

•  A  set  of  initial  conditions  b  passed  in  from  the  upper 
level  of  the  hierarchy.  Thb  consists  of  the  initial  num¬ 
ber  cf  tanks  and  aircraft  on  each  side,  and  the  initial 
tank  fuel  status  for  each  side. 

•  The  state  b  expanded  to  include  position  informa¬ 
tion.  For  the  first  stage,  thb  b  done  using  the  initial 


cciqct ly  Ibecacr.  Fcshles 
-r  £x±~k rrfraa  t£ pq&Saa,  grraa  tie 

simibtrfctfsarramg  teaks  aad  tier  fed  states  tscal- 
crii^i;ti*m3t£eKaj^clm5atiactc3ai 
the  begr-nring  cf  lie  aa!  itije  to  opmi  the  stair 
(«eUk»fa:gxt&a2t)  Xcttthzltmaseto- 
art.  To  be  exact,  we  wccSd  bare  to  at  x  ceodltaflcal 
dbtribclxa  tht  ako  txbM  tbe  mc£ccfrim2ft 
£ko^d  to  tbe  tdc  lattlc  by  cdt  sase,  as3  trad: 
lie  snmbercfamcaft  allocated  otic  pcrriocs  stage, 
so  th2i  we  could  pwperfy  expand  tbe  state. 

•  Tbe  tScd  c£  ezch  pbije  c£  tie  touk  battle  upon  lie 
expanded  state  dhtribetoxa  g  ciVr.hirsL 

•  At  tbe  cad  cf  tbe  stag?,  tbe  &ti2c*is3  cf  the  jm> 
marj  state  h  calculated  aad  passed  to  tbe  upper  level 
of  tie  hierarchy.  Tbe  ccadlbsd  6tnto»a  cf  tie 
poritioa  hdcnsaliea  b  2bocaks!aIed. 

Expanding  Tbe  State 

At  tie  start  of  stage  «,  the  tank  model  receives  initial 
values  for  tie  cumber  of  tanks  2nd  aircraft  os  each  side, 
and  tbe  feel  states  of  tie  tank  groups.  We  esc  tie  sub¬ 
script  n*  co  indicate  values  at  tbe  end  of  phase  *  of  stage 
».  We  cse  tbe  subscript  nO  to  indicate  tie  initial  raises. 
Thus,  in  keepssg  with  our  other  notation,  we  have 

•  T£  =  Tbe  Number  cf  F-Tanks  at  tie  end  of  phase  * 
of  Stage  n. 

m  J?%  =.  Tie  Fed  Stale  of  tbe  F-Tanks  at  tbe  end  of 
phase*  of  Stage  n. 

•  A%i  =  Tbe  Number  of  F-Aircraft  at  tbe  end  of  phase 
i  of  Stage  n. 

•  T*  =  Tbe  Number  of  A-Tanks  at  the  end  of  phase  i 
of  Stage  n. 

•  J««  =  Tbe  Fud  State  of  tbe  A-Tanks  at  the  end  of 
phase  *  of  Stage  n. 

•  A*  —  The  Number  of  A-Aircraft  at  the  end  of  phase 
i  of  Stage  n. 

The  tank  battle  model  receives  initial  values  for  Tjh  /*o» 
AZ0,  T*>,  I*0,  and  A&-  Note  that  since  we  assume  that 
there  b  no  aircraft  attrition  in  the  tank  battle.  A*,  —  A£0 
and  A*  -  AJ?0  for  all  i.  Since  the  number  of  aircraft  allo¬ 
cated  to  the  tank  battle  do  not  change  during  a  stage,  wc 
do  not  explicitly  carry  the  numbers  in  the  state  descrip¬ 
tion. 

We  define  the  state  of  the  tank  battle  at  the  start  of 
phase  »  of  stage  n  to  be 

where 

•  X?t  =  the  x-coordinatc  of  the  F-iank  group  at  the 
start  of  phase  i  of  stage  n. 

•  Y*  -  the  y-coordinate  of  the  F-tank  group  at  the 
start  of  phase  *  of  stage  n. 
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•  =  tie  jKose&aie  c£  tie  X-Usk  pw?  21  tie 
start  cf  ptas-c  x  rfj^jca. 

•  1'^  »  tie  y<oorfit^  ed  tie  A-taai  peep  2I  tie 
start  cf  phase*  efsiajec- 

At  tie  start  of  tie  first  stage,  ta~k  grocp  peetka  iufor- 
gsatSoB  b  Sensed  frsca  tie  e=?=t  saiaes. 

At  tie  eaj  of  each  stage  cf  tie  UtV  httir,  tie  cco- 
dsticaildaSribclajBcd  tie  test  gge?pag&5aBi,tiaEa  tie 
ssAefrfssnret  tr.VtoataA  side,  aad  tie  fad  states 
of  each  task  gnocy  ts  calculated. 

At  tie  start  of  e2di  stage  other  tiaa  tie  first,  tie 
expa uded  state  d-stribciioo  a  calculated  css;  tie  ini¬ 
tial  conditions  and  tie  conditional  distribution  of  tie  tank 
jroeppesisj. 

Once  tie  expanded  state  distributioa  Has  been  calcu¬ 
lated,  tie  subphase  calculations  are  performed  for  eadi  of 
tie  1V75  phases  of  tie  task  battle.  We  defiae  tie  state 
of  tie  task  battle  at  tie  start  of  sebpiase/  of  phase  i  of 
stage  A  to  be 

P‘r-  lr  Xr  Yr-  Ta  1a.  Xa  Ya  \ 

We  define  tie  state  probability  distribution  at  the  start  of 
sebphasej  of  phase  i  of  stage  n  to  be 

W.tr '.*r. ./■ ,/‘\4‘‘,*\y4). 

Finally,  the  ending  summary  state  distribution  is  cal¬ 
culated  and  passed  to  tie  higher  level  of  tie  command 
hierarchy,  and  the  conditional  position  distribution  i s  cal¬ 
culated  and  stored  for  the  next  stage. 

The  Movement  Subphase 

The  tank  groups  move  according  to  deterministic 
functions  which  are  specified  by  the  user.  These  functions 
can  depend  upon  the  number  of  surviving  tanks  on  each 
side,  and  their  feel  status*  and  positions.  Of  course,  the 
functions  can  ignore  some  of  this  information  to  model  par¬ 
tial  knowledge.  We  assume  that  a  tank  group  can  move 
at  most  one  square  to  the  right  or  left,  up  or  down  during 
a  single  movement  subphase.  When  a  tank  group  in  the 
high  fuel  state  moves,  with  some  probability  it  changes  to 
the  low  fuel  state.  This  probability  is  a  function  of  the 
tank  group  location,  and  the  movement  it  makes.  The 
probability  is  input  by  the  user. 

The  Tank  v$ .  Tank  Subphasc 

In  the  tank  vs.  tank  subphase,  the  two  tank  groups 
attempt  to  detect  and  fire  upon  each  other.  Various  models 
of  the  detection,  target  allocation,  and  firing  processes  arc 
possible. 

Detection.  Various  assumptions  about  tank  detection 
and  communication  abilities  can  be  made.  Wc  assume  here 
that  each  of  the  tanks  in  a  tank  group  independently  scans 
the  battlefield.  The  probability  that  a  tank  detects  a  par¬ 
ticular  opposing  tank  depends  only  upon  the  two  tanks’ 
grid  locations,  and  is  independent  of  any  other  factors. 


We  atm:  sc  that  tnrrrfog*  of  a  tank  group  as  cocsscss- 
cate  23d  share  targeting  eSrsdioa  The*,  the  crucial 
factor  ss  whether  ary  nether  of  a  tank  group  has  de¬ 
tected  a  particular  oppe drg  task:  detection  by-mediae 
tanks  adds  nothing. 

We  recall  that 

•  P£rAXr*Yr*XA*YA)  =  ProhabSty-tiat  an  F- 
Tint  u  (Xr,Yr)  w31  dtUct  a  A-Ttzk  *t  (XA,YA) 
e=ii=j  a  Ti=i  vj.  Tul  Szbpinc. 

•  PorriXA,YA,Xr,Yr)  =  F«*jK2y  OalaA- 
Ttsi  at  [XA,YA)  WE  dtUct  aa  F-Ta=l  at  (Xr,Yr) 
dssisz  a  Tinr  vs.  Taal  Ssbpiusc. 

Thss#  tie  prohaKEty  tiat  a  pzrticclar  A-Taai  at 
(XA,YA)  h  dettcud  bf  aa  F-Taik  jrcrrp  at  (Xr,Yr) 

witi  j  Usbs  £5  prea  by 

Pic{Xr,Yr,XA,YA\j)  =  l-[l-PSrAXr,Yr,XA,YA)y 

The  other  probabilities  can  also  be  easily  calculated. 

Firing  Models.  We  assume  that  during  a  single  tank 
vs-  tank  subphasc,  each  F-task  can  fire  JV£r  missiles, 
and  each  A-tank  can  fire  iVjJr  missiles.  A  number  of  fir¬ 
ing  models  are  passible.  For  oar  sample  firing  model,  we 
ignore  the  effects  of  attrition  within  a  subphase  upon  the 
total  number  of  missiles  fired  during  the  subphase.  We 
also  assume  that  any  detected  ta  get  can  be  fired  upon 
by  any  tank  in  the  opposing  group,  and  ignore  any  retar¬ 
geting  delays.  We  also  assume  that  all  missiles  are  fired 
at  live  targets.  This  provides  a  simple  first  order  model. 
Various  assumptions  can  be  relaxed  at  the  cost  of  added 
complexity,  Or  by  adding  simple  degrade  factors. 

The  Aircraft  vs.  Tank  Subphasc 

In  the  aircraft  vs.  tank  subphascof  the  tank  battle,  wc 
assume  that  the  aircraft  allocated  by  each  side  to  the  tank 
battle  pass  over  the  battlefield,  search  for  and  firing  upon 
the  opposing  tanks.  For  the  MSMB-1  model,  wc  assume 
that  there  is  no  attrition  of  aircraft.  As  in  the  tank  vs. 
tank  subphasc,  numerous  detection  and  firing  models  arc 
possible.  Wc  present  a  representative  model  here. 

Detection  and  Firing  Model.  Wc  assume  that  the  de¬ 
tection  and  firing  phases  are  separate,  and  very  similar  to 
firing  model  I  in  the  tank  versus  tank  subphase.  Wc  as¬ 
sume  here  that  each  of  the  aircraft  in  a  aircraft  group  inde¬ 
pendently  scan  the  battlefield.  The  probability  that  an  air¬ 
craft  detects  a  particular  opposing  tank  depends  only  upon 
the  tank’s  grid  location,  and  is  independent  of  any  other 
factors.  We  assume  that  members  of  an  aircraft  group  can 
communicate  and  share  targeting  information.  Thus,  the 
crucial  factor  is  whether  any  member  of  an  aircraft  group 
has  detected  a  particular  opposing  tank,  detection  by  mul¬ 
tiple  aircraft  adds  nothing.  Wc  recall  that 

•  PqAT(Xa,Ya)  ~  Probability  that  an  F-Aircraft  will 
delect  an  A-Tank  at  ( XA,YA )  during  an  Aircraft  vs. 
Tank  Subphase. 
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•  PairtX^y^J  =  Probability  that  aa  A-Aircraft  will 
delect  aaF-Tank  at  [Xr,YF)  during  aa  Aircraft  vs. 
Task  Scbpfcasc. 

Ties,  the  probability  that  ,  a  particular  A-Taak  at 
[XAtYA)  is  detected  by  an  F-Aircraft  group  with  Ap  air¬ 
craft  is  gjrea  by 

^2xC^.i",W = 1  -  (1  -  i&.r(*MM))‘r 

Th*  probability  thit  ia  F-Aiicraft  group  with  hr  lironft 
a  :!!  detect  l  oat  of  the  m  members  of  an  A-Taak  group  at 
(XA,YA)  is,  for  0 </  <  m,  P£<c('!fc,'.>*>l.yX.m)  = 

( 7 ) 

Similarly,  the  probability  that  a  particular  F-Tank  at 
(XF,Yr)  is  detected  by  an  A- Aircraft  group  with  kA  air¬ 
craft  is  given  by 

*Ai(x  W)  =  1  -  (1  -  p£AAxr,Yr))kA 

Tfce  probability  that  an  A-Aircraft  group  with  hA  aircraft 
will  detect  l  out  of  the  m  members  of  an  F-Tank  group  at 
(Xr,Yr)  is,  for  0  <  /  <  m, 

PiAcmA,Xr,Yr,m)  = 

(  7  )  P£AX’,’YWli-p£AXF,Yr{hA)r-‘ 

We  assume  that  all  missiles  are  fired  at  live  targets. 
This  provides  a  simple  first  order  model.  Various  assump¬ 
tions  can  be  relaxed  at  the  cost  of  added  complexity,  or  by 
adding  simple  degrade  factors. 

Recording  The  Position  Information 

During  each  stage  of  the  battle,  the  tank  battle  is  run 
for  each  set  of  initial  conditions  which  has  positive  proba¬ 
bility.  After  the  calculation  of  the  ending  state  distribution 
(at  the  end  of  a  stage)  for  a  particular  set  of  initial  con¬ 
ditions,  the  conditional  distribution  of  the  positions  of  the 
tank  groups,  given  the  number  of  surviving  tanks  on  each 
side,  and  the  fuel  status  of  each  tank  group,  is  calculated. 
The  overall  conditional  distribution  of  tank  position  is  cal¬ 
culated  by  weighting  the  distributions  calculated  for  each 
set  of  initial  conditions  by  the  probability  of  that  set  of 
initial  conditions. 

Returning  Summary  Information  to  the  Top  Level 
During  each  stage  of  the  battle,  the  tank  battle  is  run 
for  each  set  of  initial  conditions  which  has  positive  prob¬ 
ability.  After  the  calculation  of  the  ending  state  distribu¬ 
tion  (at  the  end 'of  a  stage)  for  a  particular  set  of  initial 
conditions,  the  marginal  distribution  of  the  summary  in¬ 
formation  which  will  be  returned  to  the  top  level  of  the 
hierarchy  is  calculated.  The  overall  marginal  distribution 
of  the  summary  information  is  calculated  by  weighting  the 
distributions  calculated  for  each  set  of  initial  conditions  by 
the  probability  of  that  set  of  initial  conditions. 


The  Air  Battle 

Each  phase  of  the  air  battle  consists  of  a  pairing  of  adver¬ 
sary  aircraft,  followed  by  the  firing  of  a  number' of  missiles 
by  each  aircraft  in  a  pair.  TJ-e  number  of  missiles  fired 
per  phase  is  an  input  parameter.  In  our  initial  model,  we 
assume  that  the  number  of  missiles  fired  during  a  phase  is 
the  same  for  F-aircraft  and  A-aircraft.  -Unpaired  aircraft 
wait  for  subsequent  phases.  Alternative  air  battle  models 
could  easily  be  used  in  place  of  this  initial  model. 

Consider  tfce  phase  n  air  battle.  The  battle  starts  with 
AAm  F-aircraft,  and  AAn  A-aircraft.  We  let 

Pni{i,j)  =  th»  probability  that  phase  l  of  stage  n  of 
the  air  battle  ends  with  i  F-aircraft  and  j  A-aircraft 
surviving. 

During  each  phase  of  the  air  battle,  opposing  aircraft 
are  “paired  up*.  Unpaired  aircraft  (if  one  side  has  more 
aircraft  than  the  other)  wait  until  the  next  phase.  We  as¬ 
sume  that  each  pair  of  aircraft  participate  in  a  stand-off 
dogfight:  they  fire  only  at  each  other,  but  the  time  be¬ 
tween  firing  a  missile  and  having  it  reach  its  target  is  long 
enough  that  the  target  also  has  time  to  fire  a  missile.  Dur¬ 
ing  a  j>hase,  paired  aircraft  fire  up  to  NfjAA  —  A fAtAA 
missiles  at  each  other.  Wc  assume  that  both  aircraft  take 
their  first  shots  at  essentially  the  same  time.  They  wait  to 
see  the  outcome  of  the  first  exchange  and,  if  both  survive, 
fire  again.  This  continues  for  Nj^AA  =  NAfAA  exchanges. 
There  are  four  possible  outcomes  to  a  single  phase  dog¬ 
fight:  either  both  aircraft  survive,  the  F-aircraft  is  killed 
but  the  A-aircraft  survives,  the  A-aircraft  is  killed  but  the 
F-aircraft  survives,  or  both  aircraft  are  killed.  We  let 
PAA  —  probability  both  aircraft  survive^ 

Pda  =  the  probability  that  the  F-aircraft  is  killed, 
but  the  A-aircraft  survives 

Pad  —  the  probability  that  the  A-aircraft  is  killed, 
but  the  F-aircraft  survives 
Pdd  —  the  probability  that  both  aircraft  are  killed 
If  a  phase  starts  with  t  F-aircraft  and  j  A-  aircraft, 
there  will  bem  =  min(t,  j)  standoff  dogfights.  The  joint 
distribution  of  the  number  of  dogfights  which  end  with 
both  aircraft  alive  (AA),  the  number  which  end  with  the 
F-aircraft  dead  and  the  A-aircraft  alive  (DA),  the  number 
which  end  with  the  F-aircraft  alive  and  the  A-aircraft  dead 
(AD),  and  the  number  which  end  with  both  aircraft  dead 
(DD)  will  have  a  multinomial  distribution  with  probabili¬ 
ties  Paa*Pda*Pad,  and  Pdd - 

Numerical  Examples 

In  this  section  we  will  consider  two  simple  numerical  ex¬ 
amples  which  illustrate  the  use  of  the  model 

Example  1 

In  example  one,  we  focus  upon  aircraft  allocation  A  group 
ol  6  i-vanks  starts  m  g»id  location  fl.l)  and  approaches  a 
group  of  5  a-tanks  which  remain  in  grid  location  (J  3). 
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Each  stage  of  the  tank  battle  consists  of  X  phase.  During 
the  first  stage,  the  f-tanks  do  pot  move.  During  the  second 
stage,  they  move  to  (1,2)  and  during  the  third  stage  they 
move  to  (1,3).  We  assume  that  the  tanks  remain  in  the 
high  fuel  state  for  the  entire  battle. 

Each  side  starts  with  five  aircraft.  Each  stage  of  the 
air  battle  consists  of  two  phases.  We  consider  four  aircraft 
allocation  strategies: 

1.  If  your  side  has  more  (>)  aircraft  than  the  other  side, 
allocate  half  of  your  aircraft  (rounded  down  to  the 
nearest  integer  number)  to  the  tank  battle  and  the 
rest  to  the  air  battle;  otherwise  allocate  all  of  your 
aircraft  to  the  air  battle; 

2.  Always  allocate  one  half  (rounded  down  to  the  nearest 
integer)  of  your  aircraft  to  the  tank  battle,  and  the 
rest  to  the  air  battle; 

3.  Always  allocate  all  of  your  aircraft  to  the  tank  battle; 

4.  Always  allocate  all  of  your  aircraft  to  the  air  battle. 
We  set: 


butions  of  surviving  tanks  and  aircraft  at  the  end  of  each 
stage  of  the  battle,  when  both  sides  use  strategy  1. 
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Table  1.  Mean  Number  of  F-tanks  Surviving  the  Battle 
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1.250 

2 
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1.236 

1.207 

1.061 
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0.110 

0.111 

0.153  j 

0.086 
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2.030  j 

2.033 
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Table  2:  Mean  Number  of  A-tanks  Surviving  the  Battle 


no.  of  missiles  fired  by  an  f-tank  in  a  subpha^e  —  2 
no.  of  missiles  fired  by  an  a-tank  in  a  subphase  =  2 


no.  of  missiles  fired  by  an  f-aireraft 

against  a  tank  during  a  subphase  =  2 

no.  of  missiles  fired  by  an  a-aircraft 

against  a  tank  during  a  subphase  =  2 

no.  of  missiles  fired  by  an  f-aefi  against  an 

a-aeft  during  a  subphas*  of  the  air  battle  =  2 

no.  of  missiles  fired  by  an  a-aeft  against  an 

f-aefi  during  a  subphase  of  the  air  battle  —  2 


The  probability  that  an  f*tank  will  detect  an  a-tank 
increases  from  .4  to  .6  to  .8  as  the  f-tanks  move  across  the 
grid.  The  corresponding  probability  that  an  a-tank  will 
detect  an  f-tank  increases  from  .4  to  .6  to  .8. 

The  probability  that  an  f-aircraft  will  detect  an  a-tank 
is  .3  for  each  stage  and  equals  the  probability  that  an  a- 
aircraft  will  detect  an  f-tank. 

The  probability  that  a  single  missile  from  an  f-tank 
will  kill  an  a-tank  increases  from  .2  to  .3  to  .4  as  the  f-tanks 
move  across  the  grid.  The  corresponding  probability  that 
a  single  missile  from  an  a-tank  will  kill  an  f-tank  increases 
from  .3  to  .4  to  .5. 

The  probability  that  a  single  missile  from  an  f-aircraft 
will  kill  a  detected  a-tank  equals  .2  for  each  stage,  and 
equals  the  probability  that  a  single  missile  from  an  a- 
aircraft  will  kill  a  detected  f-tank. 

The  probability  that  a  single  missile  from  an  f-aircraft 
will  kill  an  a-aircraft  equals  .3,  and  vice  versa. 

We  now  present  examples  of  the  types  of  results  which 
can  be  determined  by  the  model. 

In  tables  1  through  3  wc  show  the  mean  number  of  sur¬ 
viving  F-tanks,  A-tanks,  and  the  difference,  respectively. 

Similar  tables  could  easily  be  calculated  for  the  air¬ 
craft  battle.  In  figures  3  -  6  we  see  the  marginal  distri- 
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Table  3:  (Mean  Number  of  F-tanks  -  Mean  Number  of 
A-tanks)  Surviving  the  Battle 
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-1.017  I 

-1.111  1 

-1.927 

-0.530 

-0.738  1 

-0  832  j 

-1.179 

-0.337 

0  834  | 

0.454  I 

-0  097 

1.227 

-1.728  | 

-1.776  1 

-2.512 

-1.273 

Example  2 

In  example  2,  we  consider  various  movement  rules.  We 
consider  a  group  of  5  f-tanks  which  start  at  grid  location 
(M)  and  wish  to  attack  a  group  of  5  a-tanks  located  at  grid 
location  (2,3).  Along  the  route  (1,1)  -»  (1,2)  (1,3)  -» 

(2,3),  the  tank  vs.  tank  probabilities  of  delation  and  kill 
are  lower  than  along  the  route  (1,1)  -♦  (2,1)  (2,2)  -♦ 

(2,3),  but  the  probability  of  detection  of  the  f-tanks  by  the 
ataircraft  is  higher  along  the  first  route.  See  tables  4  ~  7 
for  details.  We  consider  three  possible  movement  rules: 

1.  The  F-tank  group  remains  at  location  (1,1)  during 
the  first  stage  of  the  battle.  If,  after  the  first  stage, 
the  F-tank  group  has  more  (>)  survivors  than  the  A- 
tank  group,  the  F-tank  group  takes  the  route  (1,  l)  -* 
(1,2)  -♦  (1,3)  -♦  (2,3),  moving  one  square  per  stage. 
Otherwise  the  F-tank  group  takes  the  route  (l,l)  -♦ 

(2, 1)  -♦  (2,2)  -♦  (2,3),  moving  one  square  per  stage. 

2,  The  F-tank  group  remains  at  location  (1,1)  during  the 
first  stage  of  the  battle.  Regardless  of  the  outcome  of 
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Table  6:  Probability  of  Detection  of  F-tank  at  (X,Y)  by 
A- aircraft 
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Table  7:  Single-Shot  Probability  of  Kill  of  F-tank  at  (X,Y) 
by  A-aircraft 
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Abstract 

Tactical  data  fusion  is  composed  of  a  number  of  separate  process 
with  the  goal  of  supporting  the  complete  assessment  of  the  tactical 
situation.  One  of  the  component  processes  of  data  fusion  is  the 
correlation  of  sensor  reports  with  existing  data  records  to  determine 
the  presence  of  new  targets  and  to  update  the  status  of  previously 
noted  targets.  Thrs  paper  describes  a  correlation  procedure  for  data 
fusion.  Current  approaches,  which  use  linear  discriminant  functions, 
serve  as  the  basis  for  the  procedure  described  her*  However,  whereas 
the  current  approaches  use  only  subjective  assessments  of  attribute 
importance,  the  procedure  described  here  adaptively  acquires 
attribute  Importance  measures  Using  information  contraints 
generated  by  examples.  This  technique  provides, for  in  effective 
method  of  acquiring  the  correlation  parameters.  Additionally,  the 
correlation  process  itself  is  described  in  terms  of  the  bipartite 
matching  problem  and  a  new  method  for  correlation  matching  is 
described. 


I.  INTRODUCTION 

Data  fusion  is  an  activity  which  is  becoming  more  important 
to  military  planners  m  all  services.  It  has  arisen  from  the  netd  to 
ptocesa  large  amounts  ot  data  in  dynamic  scenarios  with  fluid  battle 
formations,  where  commanders  arc  dependent  on  sensor  resources  to 
provide  an  accurate  picture  of  the  environment. 

While  data  fusion  is  important  to  all  three  services,  the 
emphasis  on  the  various  function*  that  comprise  data  fusion  changes 
with  different  areas  of  operation,  The  data  fusion  problem  for  the 
air  and  sea  battles  is  associated  with  target  tracking.  In  these 
operational  areas,  fast  moving  targets  must  be  monitored  for  changes 
in  position  and  intent.  The  ground  forces  problem  changes  less 
rapidly  when  viewed  from  the  vantage  point  of  the  Corps 
commander.  However,  the  target  density  and  variety  for  the  land 
battle  is  much  higher  than  that  found  either  on  the  sea  or  in  the  air. 
Additionally,  the  number  and  distribution  of  sensor  resources  in 
ground  operation*  is  very  targe.  Finally,  the  ground  forces*  problem 
uses  a  different  mix  of  sensors,  relying  less  on  active  sensors,  such  as 
radar,  and  more  on  passive  sensors  to  acquire  the  necessary 
information  about  the  opposing  force. 

These  characteristics  of  the  groyed  forces  data  fusion 
problem  have  slowed  the  development  of  automated  systems  to 
support  intelligence  and  target  acquisition  activities.  The  first 
generation  of  computer-based  data  fusion  systems  for  supporting  the 
land  battle  have  only  recently  l*en  deployed.  Data  on  the 
effectiveness  of  these  systems  is  just  now  starting  to  become 
<n  viable*  Hence,  the  presence  of  a  solid  empirical  foundation  for 
woik  in  this  area  i$,  understandably,  lacking. 


The  fusion  algorithms,  which  constitute  this  first  generation, 
emphasize  the  rapid  processing  of  massive  amounts  of  incoming 
reports.  The  algorithm*  are  not  necessarily  elegant  or  entirely 
effective,  but  efficient,  easily  maintained,  and  understandable  by  the 
users.  The  framework  fox  the  current  algorithm*  was  created  by  the 
developers  ->f  the  BETA  (Battlefield  Exploitation  and  Target 
Acquisition)  system.  From  this  beginning  the  approaches  to  the 
ground  forces  data  fusion  problem  have  proceeded  in  a  wide  variety 
of  direction*  ranging  from  expert  systems  to  statistical  pattern 
matching. 

This  paper  considers  extensions  to  BETA,  known  as  BETA 
derived  systems  (BDS).  BDS  are  proposed  for  fielded  use  and  are 
designed  to  process  incoming  reports  and  produce  an  updated  data 
base  of  targets  or  hostile  entities  in  the  environment.  In  addition  to 
data  fusion  BDS  perform  other  functions  (1},  some  of  which  are, 
distribution  of  reports  to  system  subscribers!  display  of  the  current 
battlefield  situation!  and  targeting  recommendations.  However,  the 
concern  in  thi*  paper  i*  wjth  the  data  fusion  activity  in  BDS.  In 
particular,  the  focus  here  is  centered  around  a  specific  data  fusion 
function  called  self  correlation.  Thi*  paper  present*  several 
imjwrtant  new  techniques  for  strengthening  and  improving  the  *rl‘ 
correlation  algorithm  in  BDS. 

The  next  section  provides  a  brief  overview  of  the  self 
correlation  algorithm  in  BDS  and  section  3  extends  this  discussion  by 
describing  the  process  used  in  BDS  to  measure  correlation  between 
reports.  Section  1  provide*  a  new  and  needed  approach  to 
determining  the  contribution  provided  by  each  attribute  in  the  BDS’s 
measure  of  correlation.  In  section  5,  an  important  problem  with  the 
matching  algorithm  in  BDS  is  described  and  a  solution  provided. 
Fmally,  section  6  contains  the  conclusion*. 

2.  SELF  CORRELATION  ALGORITHM 

The  purpose  of  the  self  correlation  algorithm  i*  to  test 
incoming  sensor  reports  to  determine  if  they  correspond  to  existing 
entries  in  the  target  data  base  or  if  they  are  new  target*.  The 
comparison*  are  performed  using  parametric  data  in  the  reports. 
The  algorithm  used  in  BDS  is  the  basis  for  the  discussion  in  this 
section.  The  basic  steps  in  the  algorithm  are  shown  in  figure  1, 
wlueh  is  condensed  from  {!}. 

The  first  step  in  the  process  i*  to  screen  out  data  base  entries 
which  are  not  within  a  prespecified  distance  from  the  sensor  target  or 
are  not  of  the  same  class  as  the  sensor  target.  The  target  classes  are 
decomposed  in  an  in  lusion  hierarchy,  an  example  of  which  is  shown 
in  figure  2.  Each  report  includes  the  most  specific  classification  the 
reporting  sensor  can  male  using  the  available  parameters.  A  data 
base  entry  with  a  class  on  a  path  below  the  node  in  the  hierarchy 
representing  the  sensor  report  is  considered  a  candidate  for 
correlation.  Once  all  the  data  base  entries  below  the  sensor  report’s 
class  have  been  exhausted,  then  data  base  entries  on  a  direct  path 
above  the  node  of  the  sensor  report  arc  considered  A  direct  pat’*  u 
’In-,  case  means  that  the  path  only  goes  through  parent  no»  - 
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Hence,  m  figure  2  if  a  sensor  report  has  A  class  “tank",  then  it  can 
correlate  with  data  entries  with  class  “armored  vehicles"  but  not 
with  those  with  class  “infantry  fighting  vehicles'*. 


Sensor  V  Initial  form 

Report  — ►  Screening  »-►  Candidate 
1  -  .  List 


"Correlate  "Compute  i 
MOC  ■+ 


Figur©  2._ lng!uvonJHii?iafChy„__ 


\flcr  initial  weening  of  dAta  base  entries,  the  resulting 
can'll. late  list  is  ordered  on  the  basis  of  distance  from  the  sensor's 
ts ported!  target  location  A  measure  of  correlation  (MOC)  is  then 
derived  for  the  first  entry  in  the  candidate  list.  If  the  MOC  is  above 
a  prespecified  threshold,  then  the  data  base  entry  is  updated  to 
reflect  the  information  in  the  sensor  report,  A  MOC  between  this 
updated  entry  and  the  next  member  of  the  candidate  list  is  computed 
and  compared  to  the  threshold.  If  the  MOC  in  these  comparisons  is 
Mow  threshold,  then  the  next  entry  in  the  candidate  list  is 
examined.  This  process  is  repeated  until  the  candidate  list  is  empty. 

There  are  two  features  of  this  algorithm  that  require  closer 
scrutiny.  The  first  is  the  method  of  computing  the  MOC’s  and 
threshold  for  use  in  discriminating  candidate  *ntrifc».  The  second  is 
the  procedure  for  matching  sensor  reports  to  candidates  using  lh* 
computed  MOC.  These  are  the  topics  in  the  remaining  sections  of 
this  paper. 


3.  FIGURE  OF  MERIT  APPROACII  TO  CORRELATION 

The  algorithm  described  in  the  previous  section  depends  on 
the  calculation  of  the  MOC  between  two  reports.  There  are  a 
number  of  approaches  to'  this  calculation  that  have  been  proposed 
and  implemented.  Most  of  these  are  listed  in  [2].  However,  the 
method  of  interest  m  this  paper  is  the  figure  of  merit  (FOM) 
approach  developed  by  Wright  (3),  because  it  serves  as  the  basis  for 
important  implementations  of  BDS.  The  advantages  and 
disadvantages  of  this  approach  vis-a’-vis  its  competitors  will  not  be 
an  issue  here,  although  several  important  research  directions  are 
given  in  the  conclusions.  Instead,  the  FOM  approach  is  taken  as  the 
appropriate  method  for  computing  MOC’s,  and  techniques  are 
provided  to  strengthen  and  extend  it. 

Sensor  reports  arrive  fox  processing  in  batches  Let  S,  =: 
(Su,  be  a  batch  of  sensor  reports  with  t  ss  I,  2,....  As 

the  batches  arrive,  the  elements  are  correlated  with  the  elements  of 
an  existing  data  base  of  targets.  Let  D,  =  (Dj,,  Dj,,.. ,  Dwf)  be  the 
set  of  data  base  entries  at  the  lime  of  arrival  of  batch  In  order  to 
avoid  the  accumulation  of  subscripts,  throughout  the  remainder  of 
this  paper  a  single  arbitrary  batch  of  sensor  reports  is  considered  and 
labeled  S. 

The  correlation  between  the  elements  of  S  and  D  is  based  on 
t’(e  parametric  data  in  the  reports.  These  data  are  used  to  determine 
the  FOM’s,  Hence,  for  correlation  purposes  the  data  matter  only 
insofar  as  their  use  in  the  FOM  calculations.  Thus,  this  paper 
considers  both  the  sensor  and  data  base  reports  to  consist  of  an 
ordered  set  of  attributes,  which  label  the  FOM’s.  In  some  cases  the 
sensor  data  and  the  FOM  labels  or  attributes  are  the  same.  Time  of 
detection  is  an  example.  In  other  cases  they  are  different.  Location 
is  an  FOM  label  which  corresponds  with  x,  y  and  covariance  data  in 
the  report. 

Let  S<  =  ($n,  Sjj,...,  $,<)  and  =  (d,^»  dJ;,...,d,j)  be  the 
sets  of  attributes  for  the  5th  sensor  report,  S  a  1, 2  n  and  jth  data 
base  entry,  jsl,  2,...,m,  respectively.  There  is  no  loss  in  generality 
in  letting  the  number  of  attributes  in  sensor  and  data  base  reports  be 
equal.  If  there  5s  a  missing  attribute  in  a  report,  the  correlation 
procedures  are  conducted  only  over  the  remaining  attributes.  Hence, 
in  the  FOM  approach  the  number  of  attributes  in  both  types  of 
reports  can  be  considered  Identical.  Let  FOMt(ij)  be  the  figure  of 

merit  between  s4j  and  d^,  k  «  1,  2 .  r.  The  methods  for 

calculating  these  FOM’s  are  given  in  (3).  Two  important  properties 

of  rOM»(ij)  for  i  s  1 . .  j  =  l,...,m,  and  k  a  that  are 

required  in  the  next  section  are:  (1)  FOMj(ij)  >  0,  *  >nd 
FOM4(ij)  €  (0,1), 

The  correlation  between  S,  and  is  based  on  combu. 
the  values  obtained  for  FOM|(lj),  k  a  1,  2,.. ,  r.  Howe.er,  tli* 
combination  of  these  FOM’s  is  weighted  in  accordance  to  the 
importance  ascribed  to  the  attribute  in  measuring  correlation 
Hence,  the  measure  of  correlation  between  $<  and  is 

MOC(ij)  =  £  wtFOM»(lj)  (1) 

k=l 

where  w4€  (0,1),  k«  1, . ,  r  and  £  w4  s  1.  If 


MOC(ij)  >  r,  <•*» 

where  t  is  specified  a  prion,  then  S,  and  D;  are  correlated  and  the 
values  fox  dk)  are  updated. 

The  weights,  w4,  in  (1)  are  normally  based  on  information 
about  the  sensors  in  reporting  the  attributes.  Both  the  weights  and 
the  threshold,  r,  are  critical  parameters  to  the  correlation  process. 
Allowing  them  to  be  set  subjectively  has  its  advantages  if  the  uwr 
has  sufficient  experience.  Mire  than  likely,  users  will  not  be  able  i»> 
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effectively  adjust  these  parameters  Additionally,  if  the  parameif’- 
are  set  by  the  developer  using  archival  data,  then  the  system  will  U 
«u<«ptible  to  errors  Jo  the  presence  of  change  in  the  environment. 
This  is  a  critical  problem,  because  most  current  data  is  based  on 
peacetime  activity.  During  war  many,  if  not  most,  of  the  report 
parameters  can  be  expected  to  change.  The  procedures  for  setting 
the  weights  and  thresholds  must  be  adaptive.  Hence,  if  the  FOM 
approach  Is  to  work  effectively,  then  a  method  is  required  for 
generating  weights  and  thresholds  given  exemplary  data. 


4.  MEASURING  ATTRIBUTE  CONTRIBUTION 

The  derivation  of  weights  for  the  attributes  in  (1)  is 
essentially  an  information  acquisition  process.  As  examples  of 
reports  which  should  and  should  not  correlate  ate  provided, 
information  is  obtained,  which  is  relevant  to  determining  the  weights 
and  threshold  There  are  three  problems  which  must  be  overcome  in 
order  to  use  this  information  for  generating  the  desired  values.  The 
first  is  to  formally  define  the  inputs  and  outputs  to  a  weight 
generating  procedure.  The  second  is  to  represent  the  information  in 
the  correlation  examples  in  a  usable  and  concise  format.  The  final 
problem  is  to  create  a  procedure  that  will  automatically  transform 
this  information  into  the  values  required  in  (2). 

Let  0  as  (0j,  02, .  ,0,)  be  a  set  of  examples,  called  a  training 
set.  The  elements  of  this  set  are  ordered  pairs,  =  ({,,  Sj).  The 
second  member  of  0,  U  a  sensor  report  as  defined  above.  The  first 
member  is  a  set  of  indices.  In  particular,  j  t(i  if  S*  is  from  the 
same  target  as  Dj. 

Given  0,  the  problem  is  to  generate  w  a  (w„  w,)  and 

r  for  use  in  (2).  The  w  which  is  produced  must  be  within  £,  where 

2  »  {w  s  ^  w,  as  1,  ^  €  (0. 1)  for  l  a  1, 2,...,r). 

The  properties  listed  in  section  3  for  the  FOM’*  constrain  r  to  be 
within  {0,1},  Hence  both  the  inputs,  0,  and  the  outputs,  w  and  r, 
are  well  defined.  It  remains,  however,  to  create  a  suitable 
representation  for  the  information  in  0,  and  to  describe  a  procedure 
ra(>able  of  converting  this  information  into  w  and  r,  which  Is  both 
)  HtlfiabJe  and  tractable. 

Given  a  training  example  $t  €  0,  a  set  of  inequality 
constraints  of  the  form,  MOC(ij)  >  MOC(i.l)  for  j  €  and  k  g 
,  ate  generated.  For  each  member  of  0  a  set  of  these  constraint*  are 
formed,  For  a  training  set  0,  let 

n  =  (w  :  MOC(ij)  >  M0C(i,V)  foi  jC  ,U(„  k«.U  <„  w£S)  (3) 

The  constraints  generated  by  the  training  set  are  called  consistent  if 
0  is  not  empty,  Approaches  to  the  problem  of  inconsistent 
constraints  are  discussed  in  the  conclusions.  For  the  remainder  of 
this  development  it  U  assumed  that  the  constraints  are  consistent. 

With  the  representation  in  (3)  for  the  information  provided 
by  the  examples,  the  problem  now  is  to  convert  this  information  into 
weights  and  threshold  for  use  in  (2),  Essentially,  a  measure  is  needed 
to  describe  the  information  content  in  (3),  This  measure,  H(w), 
should  satisfy  the  following  reasonable  properties; 

1  |I(w)  t$  a  maximum  when  ():£,  and  nothing  else  » 

known  about  w. 

2  H(w)  Is  a  minimum  when  w,  =  |  for  some  i,  or  w  equals  its 

prior  estimate , 

3.  H(w)  increases  monotonies!!/  as  r  increases. 


These  properties  lead  naturally  to  the  traditional  measure  of 
information,  entropy  {4}  For  the  weights  in  (1),  H(w)  is  defined  as, 

H(w)  a  -  ^  w,-  In  w„  (4) 

i=l 

where  In  is  the  logarithm  to  the  base  e  and  0  In  0  3  0.  When 
information  is  known  a  prion  about  the  weights,  then  a  related 
measure  of  information,  relative  entropy,  »  used.  Relative  entropy 
is  defined  as, 

I(p)  =  £  In  K/w'r),  (5) 

i=l 

where  w^  for  i  =  1, 2,,..,  r,  is  a  prior  estimate  of  w. 

With  these  measures  it  is  now  possible  to  obtain  the  w  ftom 
the  information  in  0  as  represented  by  0.  This  is  done  by 
maximizing  (4)  subject  to  w  e  0.  If  a  prior  estimate  of  w  is 
available  then  a  minimization  is  performed  using  (5)  subject  to  the 
same  constraints.  In  either  case,  the  result  of  th.s  process  w  a  unique 
value  for  w,  which  represents  all  the  information  in  G,  and  no  more. 

This  process  of  generating  the  weights  for  (2)  produces  a 
solution  which  is  not  computationally  expensive  and  is  based  on  the 
principles  of  information  theory.  With  regard  to  the  first  point,  the 
special  structure  of  the  optimization  problem  using  either  (4)  or  (5) 
ii  easy  to  exploit.  In  practice  the  solution  time  for  these  nonlinear 
programs  is  not  much  different  from  a  comparably  sized  linear 
program  using  the  simplex  method.  As  regards  the  second  point  a 
description  of  inferential  axioms  that  are  satisfied  by  the  weight 
generating  procedure  proposed  here  arc  in  (4]« 

The  only  remaining  requirement  before  applying  the 
discriminator  in  (2)  is  to  produce  an  estimate  for  r.  This  is  done  by 
letting 

r  ss  max  {MOC(i.k)}  (6) 


The  MOC  values  in  (6)  are  calculated  when  the  constraints  in  (3)  are 
formed.  Hence,  the  only  additional  computational  requirement  to 
finding  r  is  to  compare  the  current  maximum  value  with  any  new 
values  found  from  the 


5,  MATCHING  PROCEDURES 

A  final  problem  with  the  algorithm  presented  in  section  2 
concerns  the  procedures  for  matching  an  incoming  sensor  report  with 
a  candidate  report  from  the  data  base.  Using  the  procedures 
described  in  that  section  as  Uity  are  implemented  in  existing  BDS, 
there  is  potential  for  overcorrelation.  Overeorrelation  is  defined  as 
correlating  a  sensor  report  with  a  data  base  entry,  when  the  two 
reports  represent  different  target  entities,  Undercorrelation  is  failing 
to  correlate  a  sensor  report  with  a  data  base  entry,  when  both  are 
derived  from  the  same  target.  Of  the  two  types  of  errors, 
overcorrelation  is  considered  the  most  serious  by  military  planners. 

The  reason  overcorrelation  is  the  more  serious  problem  is  not 
hard  to  understand.  If  a  data  base  record  is  contaminated  with 
information  from  another  report,  this  could  easily  produce 
underestimates  of  the  number  and  type  of  target  entities  in  the 
environment.  Situation  assessments  based  on  these  contaminated 
data  base  records  wilt  mislead  the  commander  into  expecting  fewer 
opposing  systems  than  are  actually  present.  Further, 

■'vereorrelations  are  difficult  Rr  a  human  analyst  lo  detect  ai»i 
correct  in  an  automated  system. 


129 


*/ 


Undercorrelation  errors  -  also  present  difficulties  -  for  the 
analyst.  These  errors  contribute  to  the  proliferation  of  spurious 
targets  in  a  situation  assessment  and  overestimates  of  the  opposing 
force  It  has  been  our  experience  in  simulation  tests  of  BDS  that 
undercorrelations  are  more  numerous  than  osercorrelations  by  an 
order  of  magnitude  in  runs  with  less  than  one  hour  of  data. 
However,  undercorrelations  are  easier  for  an  analyst  to  detect, 
because  when  reports  are  posted  the  analyst  can  note  that  the 
number  of  entities  in  a  particular  location  5s  much  higher  than  the 
known  order  of  battle  would  allow.  Armed  with  this  information  the 
analyst  can  make  manual  corrections  to  the  data  base  and  present  a 
more  realistic  picture  of  the  situation  to  the  commander.  Because 
overcorrelations  create  contaminated  records  in  the  data  base,  which 
are  extremely  difficult  to  correct,  this  type  of  error  is  the  more 
important  to  guard  against. 

To  understand  how  overeorrelation  can  occur,  consider  the 
targets  shown  in  figure  3.  The  circles  in  the  figure  depict  error 
ellipses  for  the  locations  of  a  single  sensor  report  (Sj)  and  two 
candidate  reports  (Cj  and  Cj).  If  the  two  candidates  axe  at  roughly 
the  same  distance  from  the  sensor  report,  and  Cj  is  from  the  same 
target  as  Slt  while  C2  is  not,  then  there  is  the  potential  for 
overcorrelation.  Cj  might  be  examined  first,  and  correlated  with  Sj 
because  of  its  proximity.  When  is  updated  the  new  values  for  the 
attributes  might  cot  correlate  with  Cj.  This  is  the  problem 
identified  by  [5],  and  he  showed  that  it  is  not  difficult  to  create 
reasonable  scenarios  where  significant  overcorrelations  can  occur. 


A  related  problem  ia  shown  in  figure  -t.  In  that  case  there 
are  two  sensor  report*  (S(  and  Sj)  and  one  candidate  report  (Cj).  If 
report  Sj  and  C,  are  from  the  same  target  and  S,  is  not,  then  there 
U  again  the  potential  for  overcorrelation,  In  this  case  if  S4  arrive* 
first,  and  correlate*  with  Cj  then  the  updated  Cj  might  not  correlate 
with  S2  when  it  arrive*.  Again,  it  is  relatively  easy  to  create 
scenarios  that  produce  significant  overcorrelations  of  this  sort. 


The  problem  depicted  in  figure  3  can  be  corrected  by  modest 
changes  to  the  algorithm  in  section  2.  The  problem  of  figure  4 
requires  more  fundamental  changes.  Essentially,  the  solution  to  both 
problems  can  be  approached,  but  not  solved,  by  the  application  of 
bipartite  matching  procedures.  A  bipartite  graph  is  a  graph  in  which 
the  nodes  are  partitioned  into  two  sets  and  no  two  nodes  m  the  same 
set  are  adjacent.  In  the  matching  problem  no  two  arcs  are  allowed 
to  be  incident  to  the  same  node. 

There  are  at  least  three  classic  objective  functions  used  in 
bipartite  matching  problems  [5].  The  first  finds  the  maximum 
number  of  arcs  in  a  matching.  The  other  two  are  for  problems  with 
values  or  weights  on  the  arcs.  One  of  these  seeks  a  maximum 
cardinality  matching  in  which  the  arc  with  the  minimum  weight  is 
maximized.  The  other  objective  for  an  arc-weighted  matching  is  to 
maximum  the  sum  of  the  wtights  in  the  match.  Efficient  algorithms 
are  available  for  all  of  these  problems. 

Unfortunately,  none  of  these  objective  functions  completely 
describe  the  objective  for  this  problem.  In  fact  the  bipartite 
matching  problem  docs  not  completely  fit  the  problem  that  the 
algorithm  in  section  2  is  attempting  to  solve.  However,  the  insight 
provided  by  considering  bipartite  matching  procedures  is  sufficient  to 
suggest  a  simple  modification  to  the  algorithm  in  section  2  that  will 
improve  its  performance. 

The  proposed  modification  to  BDS  is  called  the  Match 
algorithm  and  is  shown  in  figure  5.  Some  additional  notation  is  used 
in  figure  5.  Let  (S,D,A)  be  the  bipartite  graph  which  includes  S  and 
D.  Then  (i  j)  c  A  (i= n  and  jsl,...}m)  if  and  only  if  MOC(ij)  > 
r.  The  values  in  this  last  inequality  are  found  using  the  procedures 
in  section  3.  Also,  CL,  a  ((D*.,  MOC(i, *,)),. ..(D4j,  MOC(i,k«))), 
where  (i,i<)  6  A  for  J  =  I,...,z,  and  MOC(i,kj)  >  MOC(i.kj)  >  ...  > 
MOC(l,kj),  Thus,  Cl,  is  the  ordered  candidate  list  for  S,  €  S, 
CL,i  is  the  j'*  ordered  pair  in  CL,  and  CL,,,  is  the  I'*  member  of 
CL„. 


The  algorithm  in  figure  5  can  be  summarized  as  follows. 
First,  for  all  members  of  S  compute  the  MOC  with  all  members  of 
D.  in  practice,  this  is  only  done  for  members  of  both  sets  within  a 
distance  threshold.  The  threshold  is  determined  by  sensor 
characteristics.  Next,  match  the  S,«  €  S  and  €  D,  where  i* 
and  j*  are  the  values  which  maximize  (i  j)  €  A.  Third,  update  Dj»  , 
eliminate  S,*  from  the  list  of  sensor  reports  in  S,  and  return  to  the 
second  step  if  S  is  not  empty. 


o.  ut  ».  m<  •  *  |0(i  ct,  *  •.  v  i  »  i,  a..  .»  « 
a.  fvr  tat,  9,...,  k  a»d  J  •  I,  9,,.,,  a 
Co-pet*  MOC($,.D,> 

If  ‘•OC(S,.D<>  *  r  Uu  put  <0,,P*OC<S,,D,)>  U  tX, 
Sort  Cl* 

2,  for  t  •  I,....* 

If  Cl*  •  I  Ut*  reaov*  S,  fro*  S  »sd  pvt  It  1*  0 
If  t  a  ♦  Utt.  *»|t 
LIm 

Coapvt*  **0CvS„O.„>  V  S,  <  S 
Vpdat*  Cl,  for  HOC(S,.D.„)  £  r 
Co  So  9 

CIm  Correlate  «IU  CV,.U 
U«r*  I*  a  »(*•»*  Cl, i,  for  k  a 

flraove  Ct^  fro*  *11  Cl*  vker*  i  #  I* 

Kfaovo  fro*  0 

Update  CL.  «il>|  correlated  value* 

Co  to  2 

VtKlI'irU* 
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the  modification  in  figure  5  is  based  on  the  use  of  batch 
processing  of  reports  Batch  processing  is  feasible  because  of  the  high 
rate  of  incoming  reports.  However,  a  simple  modification  to  BDS  Is 
to  use  batch  sizes  of  one.  This  change  reduces  the  potential  for 
overcorretation  with  minimal  change  to  the  existing  implementations 
of  BDS.  la  general,  the  modification  rc-luces  the  overcorrelatlon 
problems  previously  described  without  causing  a  concomitant 
increase  In  undercorrelations.  The  modification  also  has  potential  for 
implementation  on  a  parallel  architecture. 

6.  CONCLUSIONS 

The  BDS  self  correlation  algorithm  described  in  section  2 
served  as  the  basis  for  the  discussion  in  this  paper  of  the  ground 
force’s  data  fusion  problem.  Two  improvements  to  this  algorithm 
were  presented:  (1),  A  method  was  provided  for  obtaining  the 
attribute  weights  and  threshold  used  in  calculating  the  measure  of 
correlation  between  reports;  and  (2).  An  improved  matching 
procedure  was  described  for  reducing  the  potential  for 
ovcreorrelation. 

The  procedure  for  acquiring  weights  assumed  a  consistent 
constraint  set  in  (3),  It  is  reasonable  to  expect  this  assumption  will 
be  violated  by  errors  in  the  reports,  sensor  inaccuracies,  and  other 
noise  in  the  environment.  Hence,  methods  are  required  to  cope  with 
inconsistencies  that  can  make  fl  a  C,  One  approach  which  is 
conceptually  simple,  but  of  questionable  implementation  potential  is 
to  identify  and  remove  reports  creating  inconsistencies.  The  problem 
with  implementing  this  approach  is  that  each  report  must  be 
compared  with  every  other  in  terms  of  its  impact  on  the  contralnt*. 
The  comparison  must  be  made  to  find  the  small  number  of  reports 
causing  inconsistencies  with  the  remaining  reports.  However, 
inconsistencies  can  occur  in  a  variety  of  ways,  and  checking  different 
combinations  of  reports  for  different  types  of  Inconsistencies  rapidly 
produces  combinatorial  explosion, 

A  more  efficient  approach  la  this  problem  is  simply  to  allow 
the  inconsistencies.  The  opt  (miration  of  (4)  or  (5)  is  conducted  over 
disjoint  sets.  These  sets  can  be  defined  sequentially  by  the  examples 
in  the  training  set.  The  solution  is  then  taken  to  be  the  optimal 
value  from  among  these  separate  optimizations.  This  approach  has 
promise  because  it  is  computationally  reasonable.  However,  it  does 
present  the  possibility  that  a  spurious  report  will  significantly  affeet 
the  results.  Cheeking  for  this  effect  is  much  cadet  than  checking  for 
reports  which  produced  the  inconsistencies.  It  seems  likely  t'**i 
efficient  algorithms  can  be  developed  to  perform  this  type  of  data 
analysis. 

As  noted  above  this  work  has  concentrated  on  improving  the 
existing  correlation  procedures  embodied  in  BDS.  The  improvements 
Suggested  are  significant  and  should  enhance  the  performance  of  this 
automated  data  fusion  system,  However,  It  seems  unlikely  that 
researchers  and  developers  will  be  able  to  get  many  additional 
capabilities  out  of  the  BDS  self  correlation  framework.  Some  of  these 
additional  capabilities  Include  the  need  to  aggregate  and  cross 
correlate  reports,  and  produce  situation  assessments.  The  first  two 
capabilities  are  features  examined  by  the  original  BETA  developers. 
There  is  also  a  clear  need  for  increased  processing  speed,  which  U 
currently  available  in  parallel  machines.  To  take  advantage  of  these 
architectures,  new  algorithms  for  data  fusion  are  rtquired.  However, 
this  should  not  be  viewed  as  a  call  to  continue  blindly  attempting  to 
apply  every  new  technology  to  the  data  fusion  problem.  Rather, 
there  is  an  opportunity  now  to  critically  examine  the  performance  of 
current  approaches  to  data  fusion  and  use  this  empirical  evidence  to 
suggest  promising  in.provements. 
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Abstract 

Autonation  of  data  fusion  in  C2 
applications  requires  an  understanding  of 
the  mechanisms  by  which  humans  fuse 
multi-sensor  information.  Motivated  by  the 
neurobiology  of  the  human  visual  system 
{HVS  J ,  we  introduce  a  hierarchical 
relational  graph  (HRG)  paradigm  for  the 
representation,  fusion,  and  classification 
of  static  images.  Mathematically,  at  each 
level  in  the  hierarchy,  image  information 
is  represented  by  means  of  a  relational 
graph  (complex  object)  composed  of  nodes 
(simple  objects)  with  edges  (relations) 
defined  between  nodes.  In  the  HRG 
paradigm,  a  simple  object  decomposes  into 
a  complex  object  at  the  next  highest 
resolution  level.  We  discuss  application 
of  the  HRG  representation  to  image 
representation,  fusion,  and 
classification. 


X.  Introduction 

Although  the  subject  of 
multi-sensor  data  fusion  has  been 
discussed  within  the  C2  community  for  many 
years,  progress  towards  a  unified  theory 
has  been  slow.  The  problem  is  a  difficult 
one  which  requires,  for  solution,  a 
detailed  knowledge  of  how  humans  fuse 
multi-sensor  data. 

We  define  data  fusion  as  the 
combination  (averaging)  of  data  in  order 
to  produce  an  internal  model.  When 
multi-sensor  data  of  different 
dimensionality  is  fused,  the  nature  of  an 
internal  mcdel  is  unclear.  However,  when 
data  of  the  same  dimensionality  (e.g.  2-D 
image  data)  is  fused,  the  nature  of  the 
model  can  be  unambiguous.  Once  we  have  an 
unambiguous  model,  and  a  'distance' 
metric,  we  can  measure  the  distance 
between  new  data  and  the  model  (here  we 
use  'distance'  as  an  abstract  measure 
related  to  correlation) .  This  enables  us 
to  classify  new  data,  subject  to  the 
limitations  of  the  distance  metric.  In 


this  paper  we  will  discuss  an  approach  to 
the  fusion  of  static  images.  The  dynamic 
image  fusion  problem  can  be  treated  in  an 
analogous  manner. 

In  the  HVS,  image  recognition 
involves  a  blend  of  low  level  (early 
vision),  and  high  level  (cognitive) 
processing.  Evidence  exists  that  the  early 
vision  process  can  be  modeled  by  a 
multi-dimensional  Gabor  representation 
(1-6).  It  is  reasonable  to  assume  that  the 
Gabor  coefficients  are  coded  as  data 
inputs  to  a  form  of  distributed 
associative  memory  (7,8). 

In  the  next  section,  we  describe  a 
representation  of  a  static  image  which  we 
call  a  hierarchical  relational  graph 
(HRG).  In  Section  3,  using  the  HRG 
methodology,  and  the  properties  of  the 
HVS,  we  describe  an  approach  towards 
automated  fusion  and  classification  of 
static  images. 

2.  Hierarchical  Relational  Graph 
Representation 

Motivated  by  the  properties  of  the 
HVS,  we  represent  a  static  image  by  means 
of  a  hierarchical  relational  graph  (HRG). 
At  each  level  of  the  hierarchy,  we 
construct  a  set  of  nodes  (simple  objects), 
and  a  relational  graph  (complex  object) 
based  upon  the  relations  between  nodes. 
However,  at  the  next  lowest  level  in  the 
hierarchy  (finer  resolution),  each  node  is 
treated  as  a  complex  object,  composed  of 
it's  own  set  of  connected  simple  objects. 
Although,  we  describe  the  HRG  structure  in 
a  top-down  manner,  in  the  HVS,  data  flow 
actually  takes  place  an  a  bottom-up 
manner,  since  image  information  is  first 
processed  in  the  visual  cortex  then  sent 
to  other  areas  of  the  brain,  such  as  the 
cerebral  cortex.  Recognition  of  a  face  can 
be  used  as  a  simple  example  of  this 
process.  Starting  with  the  placement  of 
features  (e.g.  eyes,  nose,  etc.)  we 
recognize  a  face  as  a  complex  ob}ect 
composed  of  simple  objects  (features)  .  On 
the  next  hierarchical  level  we  examine 
individual  facial  features. 
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Fxg.  1  illustrates  the  HRG  model 
for  a  single  level.  Fig. la  shows  the  pixel 
representation  of  four  simple,  objects. 
These  simple  objects  are  combined  to  form 
the  complex  object  illustrated  in  Fig. lb, 
represented  by  the  relational  graph  [RG] 
shown  in  Fig.lc.  The  nodes  of  the  RG  shown 
in  Fig.lc,  labeled  1-4,  consist  of 
internal  representations  of  the  four 
simple  objects.  In  this  simple  example  the 
edges  represent  a  mapping  of  the  spatial 
relationships  between  the  simple  objects. 

The  HRG  for  two  hierarchical  levels 
is  illustrated  in  Fig. 2.  Figure  2a  shows 
the  complex  object  of  Fig.  1,  which,  on 
the  second  hierarchical  level  is  treated 
as  a  simple  object.  Fig.  2b  shows  the 
two-level  HRG  for  this  pixel  image. 
Although  we  do  not  intend'  to  restrict  the 
general  HRG  paradigm  to  this  simple  case, 
for  purposes  of  clarity,  we  have  chosen  to 
illustrate  the  HRG  for  a  second  level 
process  identical  to  the  first.  Since  the 
object  relations  in  Fig. 2  are  identical  to 
those  of  Fig .  1,  it  is  easy  to  see  how 
continuation  of  this  process  will  generate 
the  HRG  for  a  multi-scale  self-similar 
image  (fractal)  (9). 

The  HRG  paradigm  is  intended  to 
suggest  a  morphological  model  for  image 
representation  and  fusion  suitable  for 
machine  vision  applications.  We  do  not 
intend  to  propose  the  HRG  structure  as  a 
neurophysiological  and  psychophysical 
model  of  the  HVS.  However,  it  is 
appropriate  to  comment  on  the 
correspondence  between  the  HRG 
representation  and  certain  properties  of 
the  HVS.  As  visual  recognition  proceeds, 
low  level  processes  (early  vision) 
transition  to  higher  order  (cognitive) 
processes.  In  the  HVS,  the  number  of 
hierarchical  levels  used  for  low  level 
yearly  vision)  and  high  level  (cognitive) 
representation  will  be  a  function  of  the 
maturity  of  the  subject.  In  the  HVS  the 
average  number  of  cognitive  levels  should 
be  related  to  the  storage  capacity  of 
short-term  memory,  which  is  a  function  of 
the  physical  maturity  (age)  of  the 
subject . 

Assume  that  object  discrimination 
in  the  visual  cortex  is  based  upon  a 
binary  decision  process.  Following 
McLaughlin  [101  and  Barrett  (111,  an 
image  cla3s  is  defined  by  the  presence  or 
absence  of  attributes.  At  level  0,  the 
demand  is  for  the  system  to  process  2°  «  1 
concept  (memory  span  equals  1) ,  At  level 
1,  there  is  a  capacity  to  retain  21  »  2 
concepts  simultaneously.  Class  concepts 
can  be  formed,  but  no  distinction  can  be 
made  between  more  than  one  object  and  it3 
environment  (which  requires  at  least  three 
concepts) .  The  mature  short-term  memory 


capacity  corresponds  to  level  three  with 
the  ability  to  process  up  to  23  «  8 
concepts  simultaneously  (5-8  digits)  [12]. 


3.  Classification  and  Fusion  of 
Static  Images 

In  a  m«.  hine  vision  application  the 
the  description  of  objects  within  a 
scene,  the  number  of  hierarchical  levels, 
and  the  choice  of  spatial  resolution  at 
each  level  are  problem  dependent.  However, 
the  processes  associated  with  HRG  image 
representation,  fusion  and  classification 
are  generic.  These  processes  are 
illustrated  m  block  diagram  form  m 
Fig. 3.  Fig. 3a  shows  the  HRG  data 
extraction  process.  This  process  consists 
of  image  processing,  followed  by  spatial 
filtering  at  each  hierarchical  level.  In 
Fig. 3b.  the  HRG  data  is  combined  to 
produce  a  model  (normal  image) .  The 
classification  of  image  data,  which 
consists  of  measuring  the  distance  between 
the  data  and  a  model,  is  illustrated  in 
Fig. 3c.  In  a  machine  vision  application, 
these  functions  could  be  implemented  by  a 
multi-layer  neural  network  computer 
similar  to  Fukushiraa ' s  Neocognitron  (13). 


Summary 

Motivated  by  the  properties  of  the  F.VS,  a 
methodology  for  fusion  and  classification 
of  static  images,  based  upon  an  HRG 
paradigm,  has  been  introduced.  On  a 
single  level  basis,  the  HRG  is  similar  to 
earlier  concepts  of  knowledge 
representation  based  upon  semantic  nets 
[14).  However,  the  HRG  approach,  which  is 
modeled  after  the  HVS,  incorporates  a 
blend  of  high  level-low  level  processing 
within  a  hierarchical  structure.  The  HRG 
approach  to  image  fusion  may  be  extended 
to  multi-sensor  data  fusion,  provided  the 
problem  of  sensor  dimensionality  can  be 
solved.  The  HRG  methodology  may  also  have 
application  to  recognition  and  tracking  of 
moving  images,  as  well  as  m  modeling  of 
other  biological  systems,  such  as  human 
speech  recognition. 
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Figure  2.  Hierarchical  Relational  Graph. 
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ABSTRACT 

la  iHs  paper  we  defix  a  processing  ztchheczze  for  2n 
il;  borne  ssvausace  system  which  siroukrteoesJy  addresses  the 
j.-pbkras  of  nrriritzrga.  tracking  aad  threat  cvaluarioo.  Wesboa 
that  tbc  different  enrere  of  the  two  problems  can  be  nddresed  by 
a  process's*  architecture  which  seppons  borii  numerical  and 
symbolic  processing.  Numerical  processing  algorithms  based 
oa  the  mathematics  of  estimation  theory  are  applicable  to  the 
problem  of  multliurget  tracking.  Symbolic  processing  algo¬ 
rithms  based  on  the  domain  knowledge  of  theahboroe  saved 
lance  nnssicn  are  applicable  to  the  problem  ?f  three;  rvaluauoa. 
The  mulritarget  tracking  algorithm  has  been  •c.ricniested  and 
dcroonstra^xi  m  FORTRAN.  Simulation  resists  obtained  wfch  a 
prototype  of  the  throat  evaluation  algorithm  implemented  in 
PROLOG  show  that  the  evaluated  throat  conditions  aro  con 
risen:  with  those  actually  simulated. 


1.  INTRODUCTION 

The  mission  of  the  E-2C  Hawkeye  is  to  conduct  airborne 
surveillance  for  a  Naval  bank  group.  To  can 3  out  this  mission, 
the  E  2C  surveillance  system  has  a  suite  of  onboard  sensors, 
communication  systems  linking  it  to  other  platforms  in  the  batik 
group,  onboard  data  processing  capabilities  ,  and  a  crow  of 
E  2C  surveillance  operators.  The  onboard  sensor  suite  includes 
a  UHF  radar,  an  kJcnrify-fricnd-orfoe  (IFF)  system  which  can 
interrogate  friendly  targets,  and  a  passive  detection  system 
(PDS;  which  can  detect  and  identify  radars  on  board  targets. 
Target  track  data  available  to  other  platforms  in  the  bank  group 
is  accessible  to  the  E-2C  over  the  communication  links.  Using 
the  sensor  data  and  the  track  data  over  the  communication  links, 
the  surveillance  data  processing  computer  has  to  track  the 
position  and  velocity  of  all  targets  within  the  surveillance  volume 
and  identify  the  types  of  all  tracked  targets.  Based  on  this  track 
and  identity  data  for  all  targets,  the  E-2C  operator  has  to  evaluate 
a  measure  of  the  throat  faced  by  the  battle  group. 

During  the  course  of  the  past  few  years,  the  amount  of 
surveillance  data  accessible  to  the  E-2C  has  increased  several 
fold.  This  nas  been  a  result  of  both  the  extended  coverage 
regions  of  the  sensors  node  possible  by  improvements  in  sensor 
and  communication  systems  on  board  the  E-2C,  and  the  vast 
number  of  platforms  with  associated  electronic  warfare  systems 
(c.g.,  ESM,  ECM,  and  ECCM)  present  in  modem  tactical  sce¬ 
narios.  The  large  amount  of  surveillance  data  has  burdened  the 
E  2C  surveillance  operators  with  tasks  related  to  monitoring 
the  result*  of  the  current  data  processing  algorithms.  Such 
tasks  include  maintaining  track  continuity  of  radar  tracks  and 
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cocrekring  dsa  from  different  sensors.  Not  only  docs  this  cause 
the  operator's  attention  to  be  consumed  by  the  task  of 
oomteriag  and  cterelaring  the  vast  cumber  of  tracks  -  a  usk  for 
winch  he  (or  any  human)  is  not  really  suited  but  n  also  causes 
himu.  neglect  Ins  privacy  duty  of  evaluating  throat  to  the  bank 
group  -  a  task  for  which  he  is  beser  stated. 

To  keep  pace  with  this  daia-rich  environment,  a  Hib» 
Speed  Processor  (HSP>  which  has  large  data  processing  capa¬ 
bility  has  been  developed  and  incorporated  into  the  E-2C  This 
larger  data  processing  capability  on  the  E-2C  presents  an 
opportunity  10  incorporate  advanced  data  processing  algorithms 
which  will  better  support  the  E-2C  surveillance  operators  and 
thereby  enhance  the  mission  effectiveness  of  the  E  2C  sy  stem. 
The  objective  of  our  effort  is  to  develop  a  prototype  of  such  a 
data  processing  algorithm.  Norice  that  the  data  procuring  algo¬ 
rithm  is  intended  to  serve  as  a  decision  aid  to  the  E-2C  surveil¬ 
lance  operator  and  not  ajra  replacement  for  him.  We  do  not 
foresee  that  a  human  operator  can  be  replaced  for  a  function  as 
critical  as  threat  evaluation  in  actual  tactical  warfare  -  at  least  not 
with  existing  or  near  term  algorithm  technology. 

The  objective  of  this  paper  is  to  discuss  the  overall 
architecture  of  the  decision  aid  and  to  examme  in  detail  me  threat 
ev *luarion  algorithm.  With  this  objective  m  mind,  we  have 
organized  this  paper  as  follows.  Section  2  provides  an  overview 
of  the  architecture  of  the  decision  aid.  The  Correlation  and 
Tracking,  and  the  Identification  algorithms  are  discussed  briefly 
in  Section  3.  Details  of  th.  Threat  Evaluation  algorithm  are  pro¬ 
vided  in  Section  4  and  simulation  results  which  demonstrate  the 
effectiveness  of  this  algorithm  are  provided  in  Section  5. 


2.  ARCHITECTURE  OF  THE  DECISION  AID 

The  first  step  in  the  design  of  a  data  processing  algorithm 
is  to  dearly  define  all  a  pnon  knowledge  available  about  (he 
process.  For  the  E-2C  airborne  surveillance  problem,  this 
entails  two  bodies  of  knowledge: 

1.  Physical  laws  that  model  well  understood  phenomena 
such  as  the  dynamics  of  target  motion  (e  g.,  Newton  s 
lav,  >  of  motion),  and  the  measurements  from  the  E  2C 
sensor?  (e.g.,  electromagnetic  propagation  and 
reflection  laws  for  the  radar  signal;.  These  also 
include  statistical  models  which  account  for  (he  lack  of 
precise  knowledge  of  the  dynamics  (c  g ,  effect  that 
wind  has  on  aircraft  motion)  and  measurements  (e.g , 
measurement  uncertainty  introduced  by  randomly 
changing  characteristics  of  the  medium  through  which 
the  radar  signal  propagates),  and  geometrical 
relationships  which  account  for  sensor-target  geometry 
(e  g..  Pythagorean  theorem). 
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2.  'Man-made  laws  sods  is  doctrines  used  m  tactical 
warfare  (e-g..  flight  corridors'' for  friendly  aircraft 
approaching  an  aircraft  carrier),  can-cade  roles  for 
cvalczang  threat  (a  fighter  aircraft  has  tactical,  air 
superiority  over  a  bomber),  and  known  facts  (c.g.,  the 
BADGER  is  z  Soviet  bomber  which  carries  a  type  A 
tail  warning  radar,  has  a  maximum  speed  of  B  knots. 
and  is  equipped  with  type  C  antiship  missiles  which 
can  be  launched  from  a  range  of  up  to  P  nautical 
miles). 

Dara  processing  algorithms  designed  to  utilize  these  two 
boctes  of  know  ledge  have  different  cbarecrensucs.  For  the  for¬ 
mer  body  of  know  ledge,  algorithms  may  be  designed  which  are 
based  on  a  precise  mathematical  frame  work  and  w  hich  follow  a 
fixed  sequence  of  steps  to  process  the  data.  Further,  they  arc 
entirely  numerical  in  that  these  algorithms  process  numerical  data 
while  carrying  out  transformations  (dynamic,  geometrical,  aver- 
aging)  to  arrive  at  the  result 

For  the  latter  body  of  knowledge,  one  cannot  formulate 
precise  r.-raericai  relationships  because  either  they  do  cot  exist 
ot  they  are  not  known.  Variables  associated  with  this  body  of 
know  ledge  are  described  in  a  symbolic  or  aggregated  form.  One 
cannot  formulate  a  fixed  sequence  of  steps  to  arrive  at  the 
desired  result,  rather  one  has  to  process  all  the  available  data  to 
derive  a  recognizable  pattern  from  «.  This  form  of  processing  is 
generally  symbolic  in  nature.  Since  humans  process  data  in  a 
symbolic  form,  they  prefer  to  interface  with  symbolic  algorithms 
rather  than  with  numerical  algorithms. 

Since  the  E-2C  surveillance  problem  entails  both  bodies  of 
knowledge  and  since  the  data  processing  algorithm  has  to 
interface  with  the  E-2C  operator,  the  design  of  the  data  pro¬ 
cessing  algorithm  requires  both  forms  of  processing.  A  con¬ 
ceptual  architecture  for  the  combined  processing  in  the  decision 
aid  is  shown  in  Fig.  1.  The  figure  indicates  a  partitioning  of  the 


two  forms  cf  processing  with  the  numerical  processing  algo¬ 
rithms  on  the  one  ride  and  the  symbolic  processing  algorithms 
on  the  other.  The  numerical  algorithms  are  constructed  basedon 
models  and  associated  parameters  of  the  physical  laws.  They 
.process  the  numerical  data  from  sensor  reports  to  evaluate 
numerical  results.  Symbolic  algorithms  utilize  rules  and  facts  to 
process  the  symbolic  data.  They  evaluate  the  threat  conditions 
for  the  battle  group.  The  two  forms  of  processing  are  linked  by 
a  common  data  base  which  contains  intermediate  and  partial 
results  produced  by  either  form  of  processing  and  required  by 
the  other.  Specifically’,  the  numerical  algorithms  compute 
numerical  results  that  enable  certain  rules  to fire  within  the  sym¬ 
bolic  algorithms,  and  the  symbolic  algorithms  will  request  new 
results  to  be  evaluated  by  the  numerical  algorithms.  Expla¬ 
nations  for  generated  results  arc  produced  by  the  symbolic  algo¬ 
rithms  in  response  to  E-2C  operator  queries. 

A  functional  architecture  of  the  decision  aid  is  shown  in 
fig.  2.'  The  two  rectangles  drawn  with  broken  lines  represent 
the  numerical  and  symbolic  processing  partitions  discussed 
above.  Specifically,  the  algorithms  for  correlation  and  tracking, 
and  target  identification  are  numerical  algorithms,  the  remaining 
algorithms  are  symbolic.  We  have  chosen  titles  for  the  modules 
(Level  a.  2.  and  3  Processing)' and  the 'submodules  (Situation 
Abstraction,  Situation  Assessment,  etc.)  which  are  consistent 
with  the  lexicon  defined  by  the  Fusion  Subparie!  of  the  Joint 
Directors  of  Laboratories  (JDL)  Research  and  Technology 
Program  [1].  The  functions  of  each  of  the  submodules  are  as 
follows,  the  (Multisensor  Multitarget)  Tracking  and  Correlation 
submodule  correlates  the  sensor  reports  over  time  and  sensors 
and  evaluates  the  position  and  velocity  of  all  targets,  targets  are 
identified  based  on  the  sensor  reports  by  the  Identification  sub- 
module,  target  characteristics  relevant  for  threat  evaluation  are 
abstracted  by  the  Situation  Abstraction  submodule,  the  Situation 
Assessment  submodule  evaluates  the  hostile  target  threat  and  the 
ability  of  friendly  forces  to  engage  the  hostile  targets  effee 
ttvely  on  a  one-on-one  basis,  finally,  the  Threat  Assessment 


figure  1.  Conceptual  Architecture  of  the  Decision-Aid. 
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Figure  2.  Functional  Architecture  of  the  Decision  Aid. 


submodule  evaluates  the  collective  hostile  target  threat  and  the 
ability  of  the  battle  group  to  engage  the  enemy  effectively. 

3  TARGET  TRACK  CORRELATION  AND 
IDENTIFICATION 

Both  the  Correlation  and  Tracking,  and  the  Identification 
problems  can  be  modeled  fairly  precisely.  Based  on  these 
models,  we  have  developed  correlation  and  tracking,  and  iden¬ 
tification  algorithms  which  follow  a  fixed  sequence  of  steps  to 
process  the  sensor  data  For  reasons  discussed  in  Section  2,  we 
classify  these  as  numerical  algorithms.  We  will  discuss  these 
numerical  algorithms  briefly  in  this  section. 

3  I  Correlation  and  Tracking  Algorithm 

The  multiscnsor  mullitargct  correlation  and  tracking 
problem  has  been  studied  extensively  in  the  p>ast  [2].  Some  of 
these,  especially  those  currently  used  in  operational  systems,  arc 
based  on  heuristic  rales  formulated  using  intuition  and  expe¬ 
rience  from  actual  surveillance  scenarios.  Such  algorithms  work 
well  in  specific  situations;  however,  since  they  arc  not  based  on 
a  general  model,  they  fail  to  handle  situations  other  than  those 
considered  during  the  design. 

Other  correlation  and  tracking  algorithms  arc  based  on 
principles  of  statistical  estimation  theory  13-51  These 
approaches  define  a  precise  mathematical  model  for  the  system, 
formulate  the  equivalent  mathematical  problem,  and  develop  the 
algorithm  to  compute  the  optimal  solution.  Such  approaches 
work  well  in  most  situations,  but  they  generally  have  large  com¬ 
putational  requirements.  However,  carefully  designed  heuristic 
rales  may  be  incorporated  within  the  optimal  solution  which 
dramatically  cut  down  the  computational  requirements  of  the 
optimal  algorithm  without  significant  loss  in  performance.  In 


fact,  such  an  algorithm  has  been  designed  and  demonstrated  in 
real  time  using  real  data  [6).  Tlie  same  algorithm  has  been 
incorporated  in  our  decision  aid.  Wc  will  overview  the 
mathematical  approach  and  the  heuristics  used  to  develop  this 
multisensor  mulnrargct  tracking  algonthm  here,  the  reader  may 
refer  to  [5]  for  a  derailed  description  of  the  algorithm. 

The  correlation  and  tracking  algonthm  uses  the  math¬ 
ematical  framework  of  Hybnd  State  Estimation  to  formulate  the 
solution  methodology  The  general  hybnd  state  model  consists 
of  continuous-valued  states  and  discrete- valued  states.  Mea¬ 
surements  related  to  the  hybrid  state  are  used  to  evaluate  an 
optimal  (minimum-mean-squarcd-enor  or  maximum-a-postenor) 
estimate  of  the  hybrid  state.  Vanables  in  multiscnsor  multitarget 
tracking  can  be  identified  with  the  generic  hybrid  model  as  fol¬ 
lows:  the  state  (position  and  velocity)  of  all  targets  constitute  the 
continuous-valued  state;  indicators  for  target  status  (constant 
velocity  model,  maneuver  model)  and  sensor  report  status 
(associated  with  target,  false  alarm)  constitute  the  discrete- valued 
state,  the  noisy  measurements  of  range,  angle,  etc.  from  the 
sensors  constitute  the  measurements. 

The  optimal  estimator  for  the  hybnd  state  based  on  the 
measurements  is  easy  to  foimulate,  however,  the  postulation  ol 
all  possible  values  of  the  discrete-valued  state  (refereed  to  as 
global  hypotheses)  and  computation  of  their  likelihoods  pose  a 
difficult  problem  In  order  to  construct  a  practical  algonthm  all 
the  unlikely  global  hypotheses  have  to  be  pruned  away  The  key 
techniques  that  we  have  used  to  prune  unlikely  hypotheses  are 
outlined  below. 

N-scan  Approximation  The  optimal  correlation  and  tucking 
algonthm  requires  that  each  track  postulated  ioi  a  target  be  asso¬ 
ciated  with  each  sensor  report  since  all  such  associations  may  be 
possible  In  reality,  we  know  that  each  target  should  have  only 
one  track  corresponding  to  ar,  association  with  the  report  it 
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..  generates  or  to  no  association  in  ihc  ease  11  is  not  detected.  The 
N-scan  approximation  .w  for  N  scans  before  it  resolves 
multiple  associations  made  for  a  target  in  a  particular  scan. 

Gating :  Gating  is  a  screening  technique  that  eliminates  unlikely 
associations  of  sensor  reports  with  targets  The  gating  process 
consists  of  constructing  a  region  (gate)  around  the  predicted  tar¬ 
get  position,  and  selecting  only  those  reports  which  lie  within 
(his  region  to  be  associated  with  the  target  track.  Gating  proves 
to  be  very  effective  in  cutting  down  the  number  of  unlikely 
target-to*report  associations  and  has  been  used  in  most  of  the 
tracking  algorithms. 

Classification  :  Another  powerful  screening  technique  that  we 
have  incorporated  involves  the  selection  of  only  a  group  of  tar¬ 
gets  while  forming  global  hypotheses.  The  selection  is  based  on 
the  criterion  that  the  target  track  should  have  a  likelihood  greater 
than  a  threshold.  Targets  that  satisfy  this  criterion  arc  referred  to 
as  Confirmed  targets.  Hie  remaining  targets  are  grouped  as 
either  Imermediaic,  Tenumve  or  Born  targets  and  each  group  has 
it?  own  likelihood  threshold.  This  form  of  grouping  is  termed 
Classification. 

Clustering .  As  mentioned  earlier,  the  computational  complexity 
ot  the  correlation  and  tracking  algorithm  arises  mainly  due  to  the 
vast  number  of  global  hypotheses  that  may  be  formed.  The 
number  of  global  hypotheses  is  an  exponential  function  of  the 
the  number  of  tracks  postulated.  If  target  tracks  lie  within  dif¬ 
ferent  regions  of  the  surveillance  volume  such  that  no  common 
repons  arc  assigned  to  them,  then  obviously  there  is  no  need  to 
form  global  hypotheses  across  these  tracks.  Clustering  is  a 
grouping  of  target  tracks  which  avoids  the  formation  of  such 
global  hypotheses. 

3.2  Identification  Algorithm 

The  multiscnsor  target  identification  problem  has  also  been 
studied  extensively  in  the  past.  Methodologies  generally  differ 
with  regard  to  how  they  model  and  account  for  the  uncertainty  in 
the  sensor  measurements  17).  We  have  adopted  a  Bayesian 
method  since  a  Bayesian  identification  algorithm  will  be 
compatible  with  the  Bayesian  corrclauon  and  tracking  algorithm 
discussed  in  subsection  3.1. 

E-2C  sensor  data  that  can  be  used  to  identify  targets  are  the 
PDS  emitter  type  measurements,  and  the  IFF  response  mea¬ 
surements.  Correlation  and  Tracking  algorithm  outputs  of  target 
position  and  velocity  profiles  also  contain  information  useful  for 
target  identification.  Ideally,  we  would  like  to  identify  targets  at 
a  type  level  (Bear,  F-14,  etc.);  however,  this  may  not  always  be 
possible  due  to  the  fact  that  some  of  the  sensor  data  cannot  dis¬ 
cern  targets  at  the  type  level  since  it  is  the  same  for  a  group  of 
targets.  Examples  of  such  sensor  data  are:  target  height  infor¬ 
mation  which  can  only  identify  targets  as  being  surface  or  air, 
IFF  responses  from  a  target  which  can  identify  whether  a  target 
Is  friendly  or  neutral;  and  speed  profile  measurements  of  a  target 
which  can  identify  whether  a  target  is  a  fighter  or  a  bomber. 
Lacking  sufficient  sensor  information,  it  may  be  more  appro¬ 
priate  to  identify  a  target  at  a  group  level  higher  (more 
abstracted)  than  the  type  level.  The  four  levels  at  which  the 
identification  algorithm  can  identify  targets  are  Type  (Bear, 
Badger,  ..),  Class  (Bomber,  Fighter,  Nature  (Friendly, 
Neutral,  Hostile),  and  Category  (Air,  Surface). 

To  illustrate  the  identification  algorithm,  consider  the  case 
where  there  arc  N  types  of  targets  (T ...„.Tn).  Assume  there 
exist  a  total  of  M  types  of  emitters  and  the  conditional 
probabilities  P(  Ej  l  Tj )  of  observing  emitter  Ej  when  target  T,  is 
present  are  known.  Then  if  a  certain  observed  emitter  Ej  is 


associated  with  a  target  with  prior  type  probabilities  P(  Tj ),  the 
type  probabilities  can  be  updated  using  Bayes  rule  as  follows 


p(-nriiEJ)  = 


P(E)lTi)P(Ti) 

N 

XpIEjtowt*) 

k«l 


0) 


Note  that  ambiguities  in  emitter  type  measurements  arc  modeled 
by  a  measurement  confusion  matrix,  and  emitter  type  switchings 
on  any  target  are  modeled  through  a  dynamic  model.  Details  of 
the  identification  algorithm  which  utilizes  these  models  arc  pro¬ 
vided  in  [8). 

Sensor  information  related  to  a  higher  level  of  target 
identity  (Category,  Nature,  Class)  is  incorporated  at  a  lower 
level  based  on  the  assumption  that  for  each  level  of  abstraction, 
the  subsets  of  identities  at  the  lower  level  are  mutually  exclusive 
and  exhaustive.  This  procedure  can  be  illustrated  with  the  fol 
lowing  example  Assume  that  there  exist  L  target  classes 
(L  £  N).  The  mutually  exclusive  assumption  requires  that  each 
target  type  is  assigned  to  a  unique  target  class  Further  assume 
that  speed  profiles  provide  information  only  at  the  class  level, 
i  e.,  speed  profiles  of  all  target  types  within  each  target  class  are 
identical  (  e.g.,  all  bombers  have  a  speed  profile  of  Sb.  all 
fighters  have  a  speed  profile  of  Sf,  etc )  This  assumption 
implies  that 


P(  Sj  I  Ch(i) ,  Tx )  =  P(  Sj  I  Ch(i) ) ,  Ti  e  Ch(i) ,  (2) 

which  is  the  notion  of  conditional  independence  introduced  by 
Pearl  (9).  Then  if  a  certain  speed  profile  Si  is  observed,  the  type 
probabilities  of  targets  may  be  updated  as  follows: 


p(T|.Sj)o 
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Probabilities  for  target  identification  at  higher  levels  (class, 
nature,  and.  category)  may  be  calculated  by  summing  the 
probabilities  of  the  taiget  members  belonging  to  that  group  at  the 
lower  level.  For  example,  the  probability  that  a  target  belongs 
to  a  class  can  be  computed  by  summing  the  probabilities  of  all 
target  types  belonging  to  that  class. 

P(C„>-  I  P(T.)  <4) 
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4.  THREAT  EVALUATION 

A  brute  force  methodology  for  evaluating  the  hostile  target 
threat  is  to  enumerate  all  tactical  scenarios  countered  by  Naval 
battle  groups  and  assign  a  threat  condition  to  each  of  them 
However,  the  tactical  scenarios  that  today's  Naval  battle  groups 
will  confront  are  expected  to  involve  a  vast  number  of  targets 
Since  the  number  of  scenarios  is  a  combinatorial  function  of  the 
number  of  targets,  their  identities,  and  their  relative  positions 
and  velocities,  it  is  virtually  impossible  to  enumerate  all  possible 
tactical  scenarios  Consequently,  it  will  not  be  possible  to  use 
this  brute  force  methodology  Perhaps,  this  also  explains  why 
there  is  no  universally  accepted  procedure  for  quantitatively  or 
even  qualitatively  measuring  the  threat  projected  by  hostile 
forces  against  a  Naval  battle  group 


138 


One  way  of  avoiding  the  combinatorial  problem  is  to 
evaluate  the  threat  hierarchically.  Using  a  hierarchical  approach'; 
target  threat  characteristics  are  grouped  and  aggregated  at  several 
levels.  Such  an  approach  is  attractive  from  the  viewpoint  that 
ills  similar  to  the  approach  used  by  experienced  E-2 C 
surveillance  operators,  and  consequently  they  can  guide  the 
selection  of  the  number  of  levels  in  the  hierarchy,  along  with  the 
grouping  and  aggregation  at  each  level.  A  hierarchical  approach 
has  the  added  advantage  that  explanations  for  threat  conditions 
evaluated  by  the  decision  aid  may  be  provided  in  the  same 
hierarchical  order,  such  explanations  will  be  easier  for  the  E-2C 
operator  to  comprehend. 

Target  correlation  and  tracking,  and  identification  may  be 
viewed  as  the  first  level  of  processing  in  the  hierarchical  threat 
evaluation  procedure.  Abstraction  of  the  relevant  target  char¬ 
acteristics  and  the  evaluation  of  the  individual  threat  conditions 
represent  the  second  level  of  processing  in  this  hierarchical- 
procedure  Finally,  the  evaluation  of  the  collective  threat 
condition  for  the  battle  group  represents  the  third  level.  As  we 
have  indicated  earlier,  the  definition  of  threat  at  both  Level  2  and 
3  is  highly  subjective  and  so  a  precise  relationship  between  the 
threat  and  the  target  characteristics  may  not  have  any  practical 
significance  Accordingly,  we  define  these  relationships  based 
on  the  lines  of  reasoning  used  by  experienced  E-2C  operators. 
For  reasons  discussed  in  Section  2,  we  classify  the  resulting 
algorithms  as  symbolic  We  will  discuss  these  symbolic 
algorithms  for  Situation  Abstraction,  Situation  Assessment,  and 
Threat  Assessment  in  this  section. 

4.1  Situation  Abstraction 

The  function  of  the  Situation  Abstraction  submodule  is  to 
abstract  target  characteristics  relevant  for  threat  evaluation. 
These  characteristics  include  not  only  those  evaluated  by  the 
Level  1  Processing  module  such  as  the  target's  position, 
velocity,  and  identity,  but  also  those  associated  with  the  target’s 
warfare  capabilities  which  are  available  in  the  target  data  base. 
The  former  characteristics  can  be  parameterized  and  measured 
quantitatively  (c  g.,  the  hostile  target  has  a  speed  of  250  knots), 
whereas  the  latter  characteristics  can  be  parameterized  only 
qualitatively  (e.g.,  the  friendly  target  has  a  defensive  capability 
of,  say,  low).  For  the  purpose  of  evaluating  the  threat  con¬ 
dition,  however,  it  will  be  more  convenient  to  transform  even 
the  quantitative  characteristics  to  a  qualitative  foim.  The  reason 
for  this  is  that  a  precise  mathematical  relationship  between  the 
quantitative  characteristics  and  the  threat  condition  is  not  known. 
Even  if  a  precise  mathematical  relationship  can  be  postulated 
(and  such  a  relationship  is  likely  to  be  quite  nonlinear),  there  is 
very  little  empirical  data  that  can  be  used  to  validate  such  a  rela¬ 
tionship  The  best  we  might  be  able  to  do  would  be  to  use  pre¬ 
dictions  of  this  relationship  made  by  an  experienced  E-2C 
operator  Furthermore,  an  E-2C  operator  would,  most  likely, 
parameterize  all  characteristics  in  a  qualitative  form. 

The  characteristics  of  a  friendly  and  a  hostile  target  which 
are  relevant  for  threat  evaluation  are  as  follows. 

1.  The  military/economic  value  of  the  friendly  target; 

2  The  category  (air  or  surface)  of  the  friendly  target , 

3  The  air-to-air  firepower  of  the  friendly  target  (if  it  is  an 
air  target),  or  the  surface-to-air  firepower  of  the 
friendly  target  (if  it  is  a  surface  target); 

4 .  The  location  of  the  friendly  target, 


5 .  The  velocity  of  the  friendly  larger, 

6 .  The  jniode  in  which  the  friendly  target  is  operating, 

7.  The  military/economic  value  cf  the  hostile  target ; 

8 .  The  air-to-air  firepower  of  the  hostile  target; 

9 .  The  air-to-surface  firepower  of  the  hostile  target;- 

1 0.  The  location  of  the  hostile  target; 

1  i .  The  velocity  of  the  hostile  larger, 

1 2.  The  mode  in  which  the  hostile  target  is  operating. 

The  firepower  represents  both  the  offensive  and  defensive  com¬ 
ponents.  The  mode  or  intent  of  the  hostile  target  represents  the 
operating  state  or  condition  of  the  target  and  is  evaluated  based 
on  the  emitters  used  by  the  target  and  the  position  of  the  target 
relative  to  the  other  targets. 

Since  the  complexity  of  the  threat  evaluation  algorithm  is 
exponentially  related  to  the  number  of  targets  in  the  scenario,  it 
is  beneficial  to  group  (cluster)  targets  that  act  in  unison.  The 
selection  of  targets  that  will  be  members  of  each  cluster  is  based 
on  their  interactive  characteristics.  Specifically,  members  of 
each  cluster  should  have  small  position  and  velocity  separations, 
a  similar  nature  (friendly  or  hostile),  and  the  same  category  (air 
or  surface). 

Since  wc  view  a  cluster  as  a  number  of  targets  acting  in 
unison,  wc  may  aggregate  the  intrinsic  characteristics  of  the 
individual  targets.  The  intrinsic  charactensucs  of  a  target  include 

1.  military /economic  value, 

2.  air-to-air  firepower, 

3.  air-to-surface /  surfacc-to-air  firepower,  and 

4.  air /surface  category. 

The  aggregation  of  each  of  these  intrinsic  charactensucs  for  the 
targets  in  a  cluster  yield  the  intrinsic  characteristics  for  the 
cluster  For  example,  the  aggregation  of  the  military  /  economic 
values  of  each  of  the  targets  yields  the  military  /  economic  value 
of  the  cluster. 

The  grouping  and  aggregation  performed  by  the  Situation 
Abstraction  submodule  serve  two  purposes.  First,  by  grouping 
the  targets  into  clusters  and  treaung  them  as  single  entities  in  the 
subsequent  analysis,  the  computational  burden  of  this 
subsequent  analysis  is  significantly  reduced  Secondly,  by 
aggregating  the  intrinsic  charactensucs  for  a  single  cluster,  the 
synergisuc  effects  of  targets  acting  in  unison  (such  as  those  of  a 
tactical  unit)  can  be  captured.  For  example,  by  acting  in  unison, 
two  fighter  aircraft  may  possess  a  greater  defensive  and/or 
offensive  capability  than  two  aircraft  acting  independently. 

4.2  Situation  Assessment 

The  function  of  the  Situation  Assessment  submodule  is  to 
evaluate  the  hostile  target  threat  and  the  ability  of  the  battle  group 
to  engage  the  hostile  targets  effectively  on  a  one-on-one  ba-is. 
To  perform  this  function,  the  Situation  Assessment  submodule 
forms  cluster-pairs .  Each  cluster-pair  consists  of  a  friendly  and 
a  hostile  cluster.  For  each  such  cluster-pair,  the  relative 
characteristics  between  the  friendly  and  hostile  clusters  are 
evaluated  (this  represents  the  aggregation  step).  These  relative 
charactensucs  include: 
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1 .  Value-Ratio,  „ 

2.  Relative  Air- to- Air  and  Air-to-Surface  capabilines, 

3.  Proximity, 

4 .  Air  /  Surface  category  of  fncndly  cluster,  and 

5.  Mode  of  the  hostile  cluster. 

An  example  of  the  evaluation  of  these  relative  charac- 
'  tcristics  is  the  evaluation  of  the  proximity  of  the  friendly  and 
hostile  clusters  Our  definition  of  the  proximity  of  two  clusters 
accounts  for  not  only  the  distance  between  theclustcrs,  but  also 
the  time  to  engage  (which  takes  into  account  the  weapon 
ranges),  and  their  closest  point  of  approach.  To  understand  why 
this  is  necessary,  consider  two  cases  where  the  clusters  have  the 
same  distance  separation  In  the  first  case,  the  clusters  are 
heading  directly  away  from  each  other,  while  in  the  second  the 
targets  are  headed  directly  towards  one  another.  In  these  cases, 
the  proximity  would  account  for  the  fact  that  their 'separation’  in 
the  first  case  is  smaller  in  a  tactical  sense,  because  their  distance 
separation  is  decreasing,  arid  if  their  trajectories  remain 
unchanged,  will  become  very  small  in  the  future.  In  addition  to 
the  distance  separation  and  the  relative  velocities  of  the  clusters, 
the  range  of  the  weapons  carried  by  the  members  of  the  clusters 
is  included  in  the  evaluation  of  proximity.  This  is  required 
because  two  clusters  which  are  separated  by  a  significant 
distance  may  still  be  within  the  finng  range  of  each  others' 
weapons.  Finally,  the  closest  point  of  approach  is  also 
included,  providing  a  measure  of  how  close  the  targets  could 
become  it  their  velocities  remain  unchanged.  A  similar 
aggregation  of  intrinsic  characteristics  (i  e.,  weapon  range  in  this 
case)  and  interactive  characteristics  (t  c.  physical  separation, 
closest  point  of  approach  and  closing  velocity  in  uiis  case)  can 
be  used  to  evaluate  the  other  relative  characteristics  listed  above. 

The  next  step  is  to  combine  the  relative  characteristics  to 
evaluate  a  threat  condition  for  each  cluster-pair.  As  we  have 
pointed  out  above,  it  may  not  be  possible  to  derive  a  precise 
mathematical  formula,  and  even  if  we  did  it  is  not  likely  to  be 
meaningful  Therefore,  it  is  more  appropriate  to  relate  the  rel¬ 
ative  characteristics  to  the  threat  conditions  in  a  tabular  form. 
The  results  of  the  threat  evaluation  will  be  qualitative  since  this  is 
the  type  of  information  that  E-2C  operators  will  provide  (i.e ,  an 
operator  would  evaluate  the  threat  in  a  given  scenario  as  serious 
rather  than  a  precise  number  such  as  SJ57).  In  addition,  we 
note  that  it  is  unlikely  that  the  information  required  for  threat 
analysis  will  be  provided  for  the  complete  list  of  combinations  of 
the  parameters  described  above.  Instead,  it  is  likely  that  some 
variables  will  become  important  only  when  other  variables  take 
on  specific  values.  For  example,  the  relative  air-to-surfacc 
capabilities  will  be  irrelevant  in  cases  where  both  the  fncndly 
and  hostile  clusters  are  comprised  totally  of  aircraft,  while  the 
relative  value  and  military  capabilities  of  two  clusters  may  be 
unimportant  if  the  clusters  arc  a  long  distance  apart  and  not 
headed  towards  each  other. 

Benefits  provided  by  the  aggregation  of  threat  charac¬ 
teristics  in  the  Situation  Assesment  submodule  are  the  same  as  in 
the  case  of  the  Situation  Abstraction  submodule.  Specifically,  as 
we  have  Indicated  earlier,  the  relationship  between  the  cluster 
characteristics  and  threat  condition  must  be  summanzed  in  tab¬ 
ular  form.  If  the  table  is  to  have  a  realistic  number  of  entries,  the 
number  of  independent  variables  must  bc  restricted  since  the 
number  of  entries  will  increase  exponentially  with  the  number  of 
independent  variables.  The  aggregation  performed  by  the  Situa¬ 
tion  Assessment  submodule  reduces  the  number  of  independent 
variables  used  to  determine  the  threat  condition  from  12  to  5  (for 
example  the  proximity  evaluation  aggregates  four  parameters 
into  one),  thereby  making  a  tabular  approach  feasible.  An 
additional  benefit  that  results  from  aggregation  is  related  to  the 


rgenerati6n  of  explanations  for  evaluated  threat  conditions:  it  is- 
unlikely  that  a  threat  condition  evaluated  for  a  pair  of  clusters 
basedon  twelve  characteristics  will  be  quickly  and  easily  under* 
stood  by  an  E-2C  operator.  Once  ^aggregation  is  performed, 
however,  the  explanation  can  be  provided  by  the  assessment 
module  in  a  hierarchical  fashion  This.will  also  enable  the  E-2C 
operator  to  qutry  explanations  at  any  desired  level  and  detail: 

4.3  Threat  Assessment 

The  function  of  the  Threat  Assessment  submodule’ is  to 
evaluate  collective  hostile  target  threat,  arid  the  ability  of  the 
friendly  targets  to  engage  the  hostile  targets  effectively.  The 
collective  hostile  target  threat  represents  the  overall  threat  faced 
by  each  fncndly  cluster  based  on  all  hostile  clusters  which  might 
interact  with  the  fncndly  cluster.  A  cluster  is  defined  to  interact 
with  another  cluster  if  cither  of  them  imposes  on  the  other  a 
cluster-pair  threat  greater  than  a  threshold. 

Evaluation  of  the  collective  hostile  target  threat  is  based  on 
cluster-pair. threats  and  the  time  to  engage  evaluated  by  the 
Situation  Assessment  submodule.  This  evaluation  procedure 
also  includes  the  steps  of  grouping  and  aggregation  of  threat 
characteristics.  The  grouping  *tcp  combines  all  clusters  that 
influence  one  another's  interactions  to  form  what  wc  callauper- 
clustcrs.  The  threat  condiuon  for  each  fnendly  cluster  belonging 
to  a  particular  super-cluster  is  evaluated  based  solely  on  the 
clusters  belonging  to  the  same  super-cluster.  The  aggregation 
step  combines  the  threat  parameters  associated  with  cluster-pairs 
included  in  a  super-cluster  to  evaluate  the  overall  threat  for  each 
cluster.  S.nce  each  cluster  within  a  super-cluster  has  an  influ¬ 
ence  on  the  remaining  clusters,  the  overall  threat  lor  a  fnendly 
cluster  is  related  to  the  threat  parameters  of  all  clusters  included 
in  the  super-cluster. 

The  evaluation  of  the  net  threat  to  a  fnendly  cluster  based 
on  the  cluster-pair  threats  of  the  clusters  included  in  the  super- 
cluster  may  be  summanzed  as  follows: 

Let 

C  •  denote  the  number  of  clusters  in  the  super-cluster, 

Tjj  denote  the  threat  imposed  by  cluster  i  on  cluster; 
(i*j,  ieC,jeC); 

tjj  denote  the  time  for  cluster  i  to  reach  region  from 
which  it  can  ergage  cluster  j; 

OTj  denote  the  overall  threat  imposed  on  cluster  j. 

Step  1 .  For  all  Ty  >  Threshold,  evaluate  tjj  as  follows. 

tij»0,  ifdjjcrj; 

tjj  *=  ©•>,  if  d|j  >  ri  and  CPAij  >  rj ; 

ty  « (d,j  -  ri)/rdotij,  if  dy  >  ri  and  CPAjj  <  rj , 

where 

djj  denotes  the  distance  between  cluster  i  and  cluster  j, 

r»  denotes  the  weapon  range  of  cluster  i, 

rdotjj  denotes  the  relative  range-rate  of  cluster  i  with 
respect  to  cluster  j; 

CPAjj  denotes  the  closest  point  of  approach  of  cluster  i 
with  respect  to  cluster  j. 


Step  2.  Order  the  tjj  in  ascending  order. 

Step  3.  Evaluate  the  overall  threat  level  for  each  cluster  as 
*  follows: 

Step  3a.  Initialize  the  Commitment  Level  for  each  duster 
within  the  super-cluster  j  to  zero  (CLj  »  0) 

Step  3b.'  Starting  from  the  smallest  tjj,  recursively  update 
the  Commitment  Levels  for  cluster  j  based  on  the 
previous  Commitment  Level  arid  the  threat 
imposed  by  duster  i  on  cluster]  as  follows: 

CLj(new)  «f(Tjj,  CLj(old),  CLj ) 

Step  4.  Set  the  overall  threat  for  all  friendly  clusters  as 
OTj  *  CLj. 


5,  SIMULATION  RESULTS 

The  Threat  Evaluation  algorithm  discussed  in  Section  4  has 
been  implemented  in  PROLOG  on  a  Micro  Vax  II  Graphics 
workstation.  We  refer  to  this  implementation  as  the  Threat 
Evaluation  Module  (TEM).  The  preliminary  implementation  of 
TEM  ts  deterministic  in  that  we  assume  that  target  tracks  and 
identification  arc  known  with  probability  one.  This  allows  us  to 
short  circuit'  the  correlation  and  tracking,  and  the  identification 
algorithms  (discussed  briefly  m  Section  3),  and  demonstrate  the 
performance  of  the  threat  evaluation  algorithm.  Wc  plan  to 
implement  the  probabilistic  version  of  TEM  using  the  same 
hierarchical  approach.  This  probabilistic  version  will  be 
integrated  with  the  correlation  and  tracking  algorithms  in  the 
prototype  E*2C  decision  aid. 

The  deterministic  implementation  of  TEM  required  31 
PROLOG  rules  and  89  Prolog  facts.  In  addition,  four  routines 
which  carry,  out  numerical  computations  are  coded  in 
FORTRAN.  Wc  predict  that  for  the  probabilistic  version  of 
TEM,  the  number  of  facts  will  increase  to  about  250,  and  the 
number  of  rules  to  about  50. 

Wc  have  developed  an  E-2C  simulation  package  to  drive 
the  E-2C  tactical  decision  aid.  This  simulation  package,  which 
we  refei  to  ds  REDGEN  (REalistic  Data  GENcrator),  has  the 
capability  to  generate  E-2C  sensor  reports  for  fairly  realistic 
scenauos  that  might  be  encountered  by  the  E-2C  We  have  used 
REDGEN  to  simulate  the  following  scenario  to  demonstrate  the 
important  capabilities  of  the  Threat  Evaluation  algorithm. 


are  representative  of  these  four  stages  are  shown  in  Figs  4  7 
In  each  of  these  figures,  the  PDS  reports  are  shown  using  radial 
lines  in  the  outer  band  of  the  figure,  the  target  tracks  for  the 
recent  past  are  shown  by  short  line  segments,  and  the  nature  of 
the  target  clusters  (friendly,  hostile,.. )  is  represented  by  simple 
geometric  symbols  surrounding  the  target  cluster.  The  meaning 
of  the  symbol  is  indicated  in  the  Target  Nature  legend.  Finally, 
the  current  threat  posed  against  a  target  cluster  is  shown  by  a 
number  placed  next  to  the  geometric  symbol.  The  interpretation 
of  this  number  is  indicated  in  the  Threat  legend.  (On  the 
VR-290  color  graphics  terminal  used  to  display  the  results  of  the 
decision  aid,  the  threat  levels  are  indicated  using  a  color  code). 

Figure  4  shows  the  first  stage  of  the  scenario.  The  hostile 
targets  are  assumed  to  have  entered  the  radar  coverage  region  of 
the  E-2C  and  are  shown  headed  towards  the  Aircraft  Carrier  and 
the  Destroyers  (surface  targets).  CAP  aircraft  arc  shown  main¬ 
taining  station  since,  at  this  stage,  they  have  not  yet  been 
assigned  to  intercept  the  hostile  targets.  The  threat  evaluation 
algorithm  evaluates  a  hi$h  threat  to  the  surface  targets,  a  mod 
eraie  threat  to  the  CAP  aircraft,  and  only  a  low  threat  to  the  hos 
tile  targets,  (Note  that  the  threat  posed  against  the  hostile  aircraft 
is  a  measure  of  the  counter-threat  imposed  by  the  friendly 
targets.) 


The  scenario  comprises  several  friendly  and  hostile  targets. 
The  friendly  targets  forming  the  battle  group  consists  of  a  single 
Aircraft  Carrier  (CV),  two  Destroyers  (DD),  six  Combat  Air 
Patrol  (CAP)  aircraft  (F-14s),  and  the  E-2C,  The  hostile  targets 
consist  of  three  bombers  (Badgers)  and  six  escort  Fighters 
(MiG-27$).  Figure  3  shows  the  initial  location  and  a  track 
history  for  all  targets  for  the  duration  of  the  sccnano.  For  the 
sake  of  clarity  in  the  figure,  wc  have  labeled  clusters  ol  targets 
as  opposed  to  the  individual  targets;  however,  we  have  shown 
the  individual  target  tracks  for  the  entire  durauon  of  the  scenario. 
The  racetrack  trajectory  at  the  center  of  the  figure  represents  the 
trajectory  of  the  E-2C.  The  concentric  circles  around  the  E-2C 
are  spaced  50  nautical  miles  and  are  used  to  indicate  distance 
relative  to  the  E-2C. 

The  sccnano  progresses  through  four  stages  corre¬ 
sponding  to  diflerent  threat  levels  imposed  by  the  hostile  targets. 
Threats  evaluated  by  the  decision  aid  for  conditions  that 


The  second  stage  of  the  scenario  is  shown  in  Fig  5  The 
CAP  aircraft  have  been  assigned  to  the  hostile  targets  and  are 
headed  towards  the  hostile  targets  The  threat  evaluation 
algonlhm  reduces  the  threat  imposed  on  the  surface  targets  to 
none  based  on  the  counter- threat  provided  by  the  CAP  aircraft 
Threat  to  the  CAP  aircraft  themselves  and  the  hostile  targets  have 
both  been  increased  (as  shown  in  the  figure)  based  on  the  pre 
dieted  air  engagement. 

Figure  6  shows  .he  third  stage  of  the  sccnano  which 
follows  ihc  first  set  of  air  engagements  All  but  two  of  the  CAP 
aircraft  and  one  of  the  hostile  aircraft  are  assumed  destroyed 
during  the  engagement  The  threat  evaluation  algorithm  rec 
ognizes  that  one  of  the  hostile  targets  has  temporanly  succeeded 
in  avoiding  the  counter-threat  provided  by  the  CAP  aircraft. 
Accordingly,  it  sets  the  threat  posed  to  the  surface  targets  to  an 
increased  value.  In  the  final  stage  of  the  sccnano,  the  surviving 
CAP  aircraft  have  been  reassigned  and  have  managed  to  get  on 
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the  tail  of  the  surviving  hostile  aircraft;  Accordingly,  the  threat 
evaluation  algorithm  decreases  the  threat  to  the  surface  targets. 
However,  as  in  stage  2  of  the  scenario,  thcMhreat  against  the 
CAP  aircraft  and  the  hostile  targets  are  increased  based  on  the 
predicted  second  engagement  These  threat  levels  are  indicated 
m  Fig.  7.  ' 

It  can  be  seen,  that  the  threat  evaluations  made  by  7EM  are 
consistent  with  those  that  are  actually  simulated.  For  the  simple 
Scenario  that  has  been  simulated,  it  may  have  been  possible  for 
an  E-2C  operator  to  predict  the  same  set  of  threat  conditions. 
However,  for  a  more  complex  scenario  involving  hundreds  of 
targets,  it  would  be  difficult  for  an  E-2C  operator  to  predict  all 
fiotemial  engagements  and  the  associated  threats.'  In  such  situa¬ 
tions,  the  threatcvaluation  algorithm  will  prove  to  be  a  signifi¬ 
cant  aid  to  the  E-2C  operator. 


6.  SUMMARY 

We  have  defined  a  processing  architecture  for  an  airborne 
surveillance  system  which  simultaneously  addresses  the 
problems  of  multitarget  tracking  and  threat  evaluation.  We  have 
shown  that  the  different  nature  of  the  two  problems  can  be 
addressed  by  a  processing  architecture  which  supports  both 
numerical  and  symbolic  processing.  Numerical  processing 
algorithms  are  based  on  the  mathematics  of  estimation  theory 
and  are  applicable  to  the  problem  of  muluscnsor  multitarget  tar¬ 
get  correlation  and  tracking,  and  identification.  Symbolic  pro¬ 
cessing  algorithms  are  based  on  the  domain  knowledge  of  the 
E  2C  surveillance  mission  and  arc  applicable  to  the  problem  of 
threat  evaluation. 

A  description  of  both  the  numerical  and  the  symbolic 
algorithms  has  been  provided.  The  numerical  algorithms  have 
been  implemented  and  demonstrated  in  TORTRAN.  Simulation 
results  obtained  with  a  prototype  of  the  threat  evaluation  algo¬ 
rithm  implemented  in  PROLOG  have  also  been  provided.  These 
results  have  shown  that  threat  evaluations  made  by  the  threat 
evaluation  algorithm  are  consistent  with  those  actually  simulated. 

In  our  ongoing  effort,  wc  plan  to  incorporate  a  more 
realistic  data  base  for  the  sensors  on  board  the  E-2C  surveillance 
aircraft  and  the  targets  which  it  has  to  track,  Wc  also  plan  to 
integrate  both  the  numerical  and  symbolic  processing  algorithms 
in  the  prototype  of  the  airborne  surveillance  decision  aid. 
Finally,  wc  plan  to  evaluate  the  computational  requirements  of 
the  decision  aid  and  indicate  how  it  might  be  incorporated  into  an 
operational  airborne  surveillance  system. 
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ABSTRACT 

The  purpose  of  this  paper  is  to  provide 
an  overview  of  real-time  automated 
identification  processing  algorithms  as 
they  will  be  implemented  in  the  Advanced 
Combat  Direction  System  (ACDS)  Block  1  as 
described  in  ref1.  The  taxonomy,  system 
architecture,  and  man-machine  context  in 
which  ACDS  will  operate  each  strongly 
affected  the  overall  design  and  algorithm 
trade-off  decisions. 


ACDS..  BLOCK  1  IDENTIFICATION  REQUIREMENTS 

ACDS  Block  1  will  replace  NTDS  on 
carriers  and  non-AEGXS  cruisers  as  the  data 
processing  software  that  drives  Combat 
Information  Center (CSC)  displays  and 
generates  data  link  messages.  ACDS  and 
AEGIS  C4D-ADS  are  assigned  the  function  of 
organic  tracking  and  identification  by 
ref2.  Because  ACDS  will  go  to  sea  in  the 
early  1990's,  and  win  be  the  first  system 
to  automate  the  fusion  of  multi-source 
information  into  the  tactical  environment, 
it  can  be  considered  as  the  operational 
state-of-the-art  for  automated 
identification  and  classification 
processing  of  tracks. 

ACDS  is  required  combine  real-time  and 
non-real  time  track  data  to  identify  for 
immediate  display  and  threat  processing  all 
tracks,  cooperative  and  non-cooperative,  in 
the  Navy  dispersed  battle  force 
surveillance  volume  using  all  available 
data  sources  in  standard  Navy  computers 
(AN/OYK-43)  using  the  Navy  standard  high 
order  computer  language  (CMS-2)  within  a 
tactical  real-time  operational  frame 
These  requirements  make  efficient  use  of 
computer  memory  and  processing  mandatory 
and  thus  preclude  some  artificial 
intelligence  techniques. 

The  ensuing  track  identification 
provides  a  level  of  detail  that  is  useful 
for  command  decisions  and  is  consistent 
with  STANAG  1241  (ref  3>,  the  basis  for  the 
TAD XL  j  taxonomy  as  implicitly  defined  in 
the  fixed  format  messages  of  the  JTIDP-TE, 
volume  II,  and  volume  V,  (ref  *,*).  Data 
link  protocols  for  ID  precedence  and 


difference  resolution  as  defined  in  ref  * 
are  observed.  The  operator's  principalrole 
is  as  arbitrator  when  conflict  situations 
arise. 

1DENT1E1CATIQN_SYSTEM_  OVERVIEW 

The  ACDS  design  shown  in  figure  1 
provides  for  a  multi-level  identification 
process.  At  the  initial  fusion  level, 
similar  source  integration  (SSI)  functions 
combine  sensor  data  received  from  sets  of 
independent  sensor  data  processors  with 
similar  characteristics,  and  derive 
classification  alternatives  and 
confidences.  At  the  higher  level,  after 
correlation  by  a  Dissimilar  Source 
Integration  (DSX)  function,  the  Multi- 
Source  Identification  (MSID)  function 
combines  classification  and  confidence  data 
to  arrive  at  fused  alternatives  and  a 
"best"  identification  for  the  track.  The 
two-tiered  integration  process  has 
available  to  it  a  variety  of  stored  data 
including:  a  priori  presence 
probabilities,  libraries,  speed/altitude 
relationships,  IFF  code  look-ups,  and 
operator-modifiable  doctrine  statements. 


ACDS  will  be  combining  data  from 
multiple  sensors  of  different  types, 
locally  detected  or  communicated  by 
tactical  links  (TADILS) ,  to  form  an  overall 
identification  estimate  of  each  track, 
together  with  an  estimate  of  thv 
identification  quality.  A  standardized 
identification  taxonomy  and  quality 
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descriptor  -for  source  information/  and  a 
method  of  combining  the  information  and 
ranking  alternatives  in  a  multi-level 
identification  description  is  needed.  The 
algorithms  and  analyses  developed  in  this 
project  show  an  approach  to  solving  these 
problems. 

The  data  from  multiple  sources  and 
multiple  sensors  of  different  types  on 
multiple  platforms  communicated  by  tactical 
distribution  links  (TADILS)  need  to  be 
combined  to  form  an  overall  identification 
estimate,  together  with  an  estimate  of  the 
identification  quality.  Different  sensors 
require  different  libraries  of  object 
characteristics  and  distributions  in  order 
to  determine  possibilities.  Furthermore, 
any  library  will  be  incomplete,  and  must 
allow  for  some  level  of  ignorance.  We  wish 
to  separate  the  sensor  error 
characteristics  from  the  library  object 
characteristics.  A  standardized  quality 
descriptor  has  to  be  developed  so  that 
information  can  be  interchanged  between 
systems.  A  method  of  combining  the 
information  and  ranking  alternatives  in  a 
multi-level  identification  description  is 
needed. 

SQU&CELCQNEIPENCE . CQjg’.UTATI.OH... 

A  method  of  developing  lists  of 
possibilities  and  confidences  which  permits 
partitioning  of  raw  sensor  data  and  the 
libraries  necessary  to  interpret  it  into 
specialized  systems,  while  providing 
information  which  can  be  objectively 
evaluated  and  combined  with  information 
from  other  systems  is  necessary. 

Development  of  a  computation  algorithm 
which  allows  inclusion  of  sensor 
characteristics,  alternative  a-prioris, 
alternative  parametric  distributions,  and 
library  degree  of  completeness  will  be 
described.  The  ability  of  the  algorithm  to 
estimate  relative  degrees  of  confidence  for 
different  alternatives  with  widely  varying 
a-priori  alternative  confidences,  sensor 
accuracies,  and  inherent  library 
ambiguities  and  known  gaps  in  a-priori 
knowledge  will  be  demonstrated. 

An  analysis  will  be  described  which, 
using  ESM  data  as  an  example,  demonstrated 
the  ability  of  the  algorithm  to  estimate 
relative  degree  of  confidence  in  different 
alternatives  in  a  library  with  widely 
varying  a-priori  alternative  confidences, 
sensor  accuracies,  and  inherent  library 
ambiguities  and  a-priori  library 
limitations  and  ignorance.  Results  of 
multiple  cases  of  varying  measurements  with 
varying  accuracies  using  different 
parameters  and  two  different  parametric 
libraries,  and  different  sets  of  a-priori 
alternative  confidences,  each  with  multiple 
alternatives  will  be  described. 


The  example  libraries  were  constructed 
based  on  parameters  in  typical  ESM 
operational  geographically  tailored 
libraries  used  in  the  AN/SLQ7I7- to  show 
different  types-  of  ambiguities  and  overlap, 
including  wide  and  narrow  regions  of 
operation,  and  alternatives  with  partial 
overlap,  and  total  containment. 

Measurements  were  selected  to  show  precise 
and  non-:precise  measurements  with  good  fit 
and  not-so-good  fit  to  only  one  or  several 
ambiguous  alternatives,  as  well  as  good  fit 
to  none  but  the  unknown  alternative.  Two 
sets  of  a-priori  values  were  selected  to 
show  the  effect  of  uniform  and  widely 
varying  alternative  a-priori  probabilities. 

The  .examples  demonstrated  the  confidence 
computation  algorithm’s  capability  of 
estimating  high  confidence  values  for 
precision  measurements  with  limited  or  no 
ambiguity  in  the  library.  Low  accuracy 
measurements  could  still  result  in  high 
confidence  classification  if  the  limit  of 
accuracy  fit  within  the  parameter  limits, 
and  there  were  no  ambiguous  specific  types. 
For  low  accuracy  measurements  with  large 
regions  of  probability  falling  outside  the 
library  alternative  class  parametric 
limits,  the  confidence  was  allocated  to  the 
unknown  alternative,  as  opposed  to  being 
force  fit  among  the  library  alternatives  as 
the  classic  Bayes  t*  hnique  would  do.  A 
further  characteristic  of  the  algorithm 
demonstrated  by  varying  the  a-priori 
alternative  classification  probabilities 
was  that  measurements  matching  a  particular 
alternative  resulted  in  high  confidence 
attributed  to  that  alternative,  even  though 
the  a-priori  probability  was  very  small. 

SSM-Classlfication.Al^orithm.Ffiatures 

Desired 

Any  algorithm  to  develop  classifications 
and  confidences  from  Electronic  Support 
Measures  (ESM)  should  account  for  sensor 
noise.  We  would  expect  precise  sensor 
measurements  of  an  emitter  with  unique 
characteristics  to  have  less  ambiguities 
and  hence  a  higher  confidence  than 
measurements  with  a  large  variance. 
Conversely,  precise  measurements  of 
emitters  with  widely  varying  operating 
points,  and  a  large  overlap  of  multiple 
similar  emitters  should  result  in  lower 
confidence.  We  would  further  desire  any 
ESM  classifier  algorithm  to  use  knowledge 
of  geographic  area  intelligence  and  sensor 
field  of  view  to  prune  possibilities  from 
the  list  of  alternatives  before  any 
confidences  are  computed. 

Another  important  aspect  required  of  a 
realistic  ESM  classification  algorithm  is 
the  need  to  account  for  incompleteness  of 
our  knowledge  so  that  we  assign  more 
confidence  to  "unknown"  when  the  library  is 
sparse.  Furthermore,  when  the  emission 
characteristics  are  not  unique,  we  need  to 
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collapse  ambiguities  upward  when  a  lower 
level  of  detail  is  not  justified.  The 
algorithm  should  preserve  all  reasonable 
alternatives  exceeding  a  specified  level  of 
probability,  while  at  the- same  time 
thresholding  out  those  which  are  impossible 
(are  less  than  .the  threshold)  and  can  be 
ruled  out  ^ 

E.SH..SSlIlrEu£es..£.orce-£assiye-Sle,chr.or:agnexi.c. 

£.ens.oc-Cias.slfi.cat,ion.gata., 

The  ESM  SSI  correlates  and  fuses  track 
parametric  and  classification  data  from 
local,  remote,  &  non-organic  passive  em 
sensors.  Its  geographic  library  relates 
measurements  to  specific  types  through 
emitter  and  mode  linkage.lt  uses  the 
intersection  of  multiple  emitter 
possibility  sets  to  successively  reduce 
classification  alternatives  as  data  is 
Integrated.  It  uses  a  modified  Bayes  with 
unknown  to  compute  confidences  to  be 
assigned  to  possible  alternatives. 

ESM  Measurement..  Sequence 

We  assume  that  the  ESM  sensor  measures 
modulation  parameters  which  define  a 

sequence  of  measurement  vectors  \  with 
associated  covariance  M*  of  a  detected 
electromagnetic  emission  which  may  include; 

(1)  Azimuth  Bearing,  (continuous, 
degrees) 

(2)  Elevation  Angle,  (continuous, 
degrees) 

(3)  Pulse  Repetition  Frequency 
(Continuous,  Hz) 

(4)  Frequency  'Continuous,  MHz) 

($>  Pulse  width  (Continuous,  nsec) 

<$)  Scan  Period  (of  lowest  scan 

modulation  Rate,  continuous,  sec) 

(7)  Scan  Frequency  (of  highest  scan 
modulation  ,  continuous,  Hz) 

(8)  Scan  Type  (discrete  description) 

The  statistics  of  the  discrete 
measurements  may  be  described  with  a 
probability  matrix  P*  with  elements  pij 
which  describe  the  probability  of  i  being 
estimated  when  j  was  present.  We  further 
assume  that  the  statistics  of  the 
measurements  of  the  continuous  variables 
can  be  characterized  by  a  multivariate 
Gaussian  density  function  (ref  7),  with  a 
density  conditioned  on  the  measurement  mean 
and  covariance  estimate  given  as: 


p<z)z*,M*>  « 


l _ 


...U) 


If  the  o  individual  parameters  of 
measurement  k  are  uncorrelated,  then  the 
multivariate  density  function  becomes  a 
product  of  univariate  density  functions: 

p(z  |  z*,M*>  - 
n 

n^r'^2"2  ^ . <2) 

i-i 

ESM-Itibgary,,char,acteria..tigivl,l 

The  objective  of  the  ESM  library  is  to 
describe  the  tactical  frame  of  discernment 
in  terms  of  the  objects  to  be  identified 
and  their  a-priori  presence  in  the  tactical 
surveillance  volume,  the  electromagnetic 
emitters  associated  with  them,  the  emitter 
modes  and  probabilities  of  operation,  and 
the  parameter  distributions  associated  with 
the  various  modes  of  operation.  With  this 
information,  the  ESM  measurements  can  be 
inverted  to  estimate  the  probability  of 
each  element  in  the  tactical  identification 
taxonomy  having  caused  the  observed  data. 
Thus  we  need  a  relatively  extensive, 
complex  data  base  to  interpret  the 
measurements,  including  the  following 
tables: 

a.  Specific  Type  a-priori  presence 
potentials  in  the  sensor 
surveillance  volume, 

P (typeplsensorq  &  area). 

b.  Emitters  associated  with  each 
Specific  Type  and  Type  Mod, 
P(emitternltypcp) . 

c.  Modes  of  operation  and  their  a- 
priori  likelihood  associated  with 
each  emitter,  .Ptmoderatemittern) . 

d.  Mode  parameter  distributions  for 
all  the  measurement  parameters  for 
each  emitter  mode, .p(z|modemn)  ■ 

The  multiple  libraries,  linked  together 
by  pointers  and  indices  create  for  each 
Specific  Type  and  Type  mod  a  complex, 
multidimensional  electromagnetic 
fingerprint,  simplified  as  shown  in  figure 
5,  where  the  three  axes  are  frequency, 
pulse  repetition  frequency,  and  pulse 
width.  Mathematical  linking  the  libraries 
together,  the  specific  type  Tp  conditioned 
density  function  of  z  is  defined  as: 

p(zJTp)  «  p(z|moderan)  ♦  P (modern  ieraittern)  * 
P(emittern|Typep)  . . (3) 

Building  these  libraries  is  a  primary 
job  of  the  intelligence  community,  which 
basically  defines  the  identification 
taxonomy  in  terms  of  tniogs  it  can  detect. 
Since  each  sensor  type  has  a  different 
discrimination  capability,  the  ESM  library 
set  of  specific  types  tends  to  differ  from 
the  Radar,  Visual,  Acoustic,  COMINT,  and 
HUM I NT  sets.  But  from  the  multi-source 
identification  point  of  view,  we  need  to 
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drive  all  sensor  libraries  to  a  common 
taxonomy . 

In  the  naval  operational  context/  where 
battle  forces  consisting  of  air,  surface, 
subsurface,  and  amphibious  category 
platforms  can  be- moved  to  any  point  on  75% 
of  the  earth's  surface,  the  basic  set  of 
specific  types  and  a-priori  presence 
probabilities  need  to  be  re-tailored  to  the 
current  operating  zone.  Furthermore,  the 
limitations  of  different  sensor-types  anc 
platforms  needs' to  be  considered  for -range 
and  altitude  limits  defined  by  equipment 
sensitivity,  horizon,  and  field  of  view. 

In  our  system,  these  libraries  are 
included  for  selected  specific  types  of 
tactical  significance,  with  additional 
entries  for  "UNKNOWN".  UNKNOWN  has  a 
distribution  and  probabilities  assigned  to 
it  uniform  over  all  fields  of  view  and 
parametric  limits  and  discretes.  The  a- 
prrori  likelihood  assigned  to  the  UNKNOWN 
specific  type  is  a  function  of  the  expected 
objects  in  the  operational  environment 
which  are  not  contained  in  the  set  of 
defined  specific  types. 

Emitter  Mode  Parametric  distribution 
functions  are  described  by  upper  and  lower 
limit*  for  each  parameter,  and  probability 
values  assigned  to  multiple  steps  within 
the  interval,  summing  to  one,  with  the 
density  defined  as  uniform  in  each 
interval,  the  probability  divided  by  the 
interval  size,  as  illustrated  in  Figure  6. 


Gi.-en  a  measurement  vector  z*  and  its 
characterization  with  mean  and  covariance, 
as  given  in  equation  <1),  and  a  set  of  a- 
priori  type-mod  presence  potentials,  and 
platform  ESM  signatures  as  defined  in 
equation  (3),  we  first  define  a  possibility 
list  about  the  measurement  by  defining  a 
threshold  parameter  error  window  defined  by 
the  using  the  measurement  mean  and 
covariance  and  a  specified  likelihood  of 
missing  a  possible  alternative,  say  0.001. 
An  indexed  search  using  bit  mapped 
techniques  provides  rapid  elimination  of 
alternatives.  As  each  successive 


measurement  is  correlated  with  a  particular 
track,  we  only  have  to  evaluate  the 
previous  possible  list  to  trim  it  down. 

This  process  rapidly  reduces  the  number  of 
possibles  as  shown  in  table  I,  where  four 
emissions  associated  with  a  track  uniquely 
identify  it.  Even  fewer  emissions  may 
suffice  to  select  platform  and  category. 

Raw  emission  data  must  be  retained  through 
this  process,  so  that  if  emissions  are 
decorrelated*due  to  spatial  separation  or 
elimination  of  all  possibles,  the  process 
can  be  redone. 


Table  I.  Multiple  Correlated  Emitters 
Intersect  to  Reduce  Possibles. 
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Given  a  set  of  possible  specific  t^-e 
mod3  created  by  the  search  described  above, 
we  then  wish  to  estimate  the  confidencs  to 
be  assigned  to  each  possible  alternative. 
This  is  done  by  computing  a  conditional 
probability  function  defined  over  the 
possible  library  alternative  specific  type 
mods,  and  integrating  it  over  the 
measurement  -  ot ability  density  function  to 
yield  the  probability  vector  conditioned  on 
the  measurement.  This  is  shown  graphically 
in  Figure  7  below.  The  conditional 
probability  function  for  specific  type  mod 
Tq  with  a  set  of  N  possibles,  to  be 
detected  by  sensor  Sq  in  area  A  is  computed 
mathematically  using  Bayes  law  as; 


P  (T,|  Z&S,&A) 


P  (zt  T„)  «P  (T,  |  S.&A> 


” . <4) 


£p<z|T,)  •P<TriSfSA> 
q*l 


Note  that  the  conditional  probability 
function  is  conditional  on  the  sensor. 
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area,  aivi  specific  type  set,  met  tie  actual 
measurement  z  -,  or  ccvariamce,  bemce  it 
could  theoretically  be  mospcted  ia  advamce. 
Tie  probability  ccsditicmed  oa  the  first 
reasuzerert,  k«l  car  be  computed  by 
ir.tegrau&g  the  c&aditi>xal  pzrbabil  ity 
functAQZi  over  the  measurespemt  comditicsal 
density  fur.cf icr : 

?(7,tzSS#<A*"z~i«Ki)  ** 

jlj?«,l**S,*W|>fzlZi,K.>tSx . (5) 

This  process  say  be  iterated  in  a 
process  similar  to  a  Kalsah  filter  as  each 
successive  independent  measurement  k  is 
received: 

P  (Tq  l  ZftSptAlTjtM.)  - 

(Tqt ztSFtAi~,-14K,.1)p(z I Z.,K.) dz.  (6) 

An  alternative  approach  vould  be  to 
aggregate  successive  measurements  into  a 
larger  observation  vector,  azd  the  original 
possibility  set  binary  search  and  repeat 
the  Bayes  inversion.  This  approach  cast  be 
used  if  the  .neasu  rerents  are  rot 
independent. 

Sc-'e  properties  of  this  process  natch 
the  -esired  properties  enumerated  above. 

For  example,  with  an  G33K5KM  value  (denoted 
as  To)  defined  foi  all  z,  if  the 
measurement  density  function  has  finite 
area  which  does  not  catch  the  parametric 
limits  assigned  to  the  library  emitter 
codes,  this  area  rill  be  assigned  to  T0.  If 
an  emitter  node  has  United  parametric 
range,  it  *ill  require  a  neasu recent  with 
covariance  significantly  smaller  tlan  the 
operating  ranee  to  get  a  high  confidence 
result.  If  emitters  have  a  common  range  of 
operation,  tbi  :onfidence  of  a  measuret-ent 
m  the  sange  of  coroon  operation  will  be 
split  between  then  proportionately  to  their 
individual  total  ranges  of  operation. 


This  Bayes  confidence  computation  algorithm 
could  be  used  at  a  central  node  to  process 
all  raw  sense,  information  through  a  global 


charscser izariaa  process.  This  vxld 
probably  be  the  cyrirm  method  so  far  as 
accuracy  of  the  ideztificatico  is 
esteemed.  Severer  it  would  act  permit 
ccmsartmemtali  zatico  cf  the  parametric 
libraries,  asd  tie  algorithm  weld  met  be 
readily  broken  cg>  into  multiple  processors - 
As  more  amd  more  sensor  data  was"  gathered, 
the  amocmt  of  ccmpctatioa  retired  at  the 
central  node  vccld  grew  ezprmemtially.  Thus 
ve  wish  to  lock  at  alternative  methods 
which  allow  partitioning  of  the 
idestificatioo  process,  without  suffering  a 
large  amount  of  degradation  fres  the  global 
Bayesian  combining. 


CgglSSSS  Q5SIS1SS  c22I^[SIS 

A  method  cf  combining  possible 
alternative  and  confidence  information  from 
different  soer'*es  which  takes  into  account 
unique  characteristics  of  different  sources 
in  terms  of  ignorance,  partial  knowledge, 
and  detectability  constraints  to  fuse  the 
information  and  determine  source  conflicts 
and  ambiguities  is  necessary. 

Demonstrations  of  the  use  the 
Dempster-Shafer  evidence  combining  rules 
will  be  described  and  compared  with  Bayes 
and  another  evidence  combining  algorithm, 
t‘e  diversity  combining  algorithm  derived 
from  signal  processing.  The  confidence 
combining  algorithm  analysis  demonstrated 
tne  capability  of  the  Bezpster-Shafer 
combining  algorithm  to  approach  the 
performance  of  global  Bayesian  combining, 
while  allowing  source  aigratability  and 
library  cozpartmentaticn,  as  well  as 
including  source  ignorance (unknown, no 
statement)  and  the  intersection  of  evidence 
in  the  combining  process. 

£$M  SSI  source  confidences  and  Radar/SSI 
source  confidences  were  computed  by  the 
modified  Bayes  source  confidence  algorithm 
described  above  using  fictional  ESM 
emission  parametric  and  Target 
Kinematic/ Altitude  characteristic  libraries 
with  ambiguity  characteristics  similar  to 
those  expected  in  a  tactical  system.  These 
were  combined  using  the  Derpster-Shafer 
algorithm,  and  as  an  alternative,  the 
Diversity  Combining  algorithm,  and  compared 
with  the  results  obtained  with  a  global 
Bayes  confidence  computation  algorithm 
(having  access  to  ail  raw  measurements  and 
a  global  parametric  library) . 

Performance  metrics  used  in  the 
comparison  included: 

a.  Kean  square  confidence  difference 
over  the  top  five  alternatives  computed  by 
each  of  the  combining  algorithms  versus  the 
global  Bayes  algorithm. 

b.  Kean  square  ordinal  (ran*)  difference 
over  the  top  five  alternatives  computed  by 
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vaiees  vil!  set  be  degraded  when  ccsiised, 
2*o  alt^stives  will  be  eliminated  in  tfce 
cxbiri^f  process. 


each  of  tbe  combining  algorithms  compared 
to  tbe  global  Bayes  esebiriag  algorithm. 

7jbe  Denpzter-Sbafer  algorithm  for 
evidence  combining  vas  originally  developed 
by  Dempster  (in  refs  and  Shafer  (in 

refs  1Xyt2>  -  Application  of  it  to  tactical 
data  fusion  was  suggested  by  Dillard  (ref 
using  tbe  special  case  where  knowledge 
sources  assign  probability  masses  only  to 
tbe  propositions  Ti  and  to  uncertainty  ©. 
This  is  tfce  version  of  tfce  combining  law  we 
use  here,  where  tfce  evidence  assigned  to  7© 
tfce  Unknown,  is  applied  as  uncertainty. 

This  as  opposed  to  tfce  complete 
implementation  of  Dempster's  law  of 
combination  (Shafer  Theorem  3~2)  ever  tfce 
set  of  all  non  empty  subsets  A  such  that 
2^uA.tfce  combination  of  two  probability 
assignments  =:  and  m2  is  given  by: 


a(A) 


2® 

i;  j  A^nBM 
2® 

i;  j  A/iB^o 


(7) 


fc’ith  tfce  number  of  alternatives  to  be 
considered,  the  set  of  subsets  rapidly 
grows  too  big  to  contemplate.  Thus  the  rule 
of  combination  for  specific  type  mod  t, 
confidence  derived  from  evidence  z  and  y 
becomes: 


=(*a!z*y)  • 

a(ry,>y)a(cr,lt)4aCt/,ly)gCtnU>4=(gnly)ag<>n 
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&a(ta}y>aCtal*i*=Ct05z)4a{t0|y)-BCt0U)3(t0|y) 
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Diversity,  Ccrbinim  Algorithm 


An  alternative  formulation  for  combining 
evidence  was  proposed  based  00  the 
algorithm  for  diversity  combining  of 
multiple  channels  used  m  communications. 

In  this  algorithm,  confidence  functions 
from  K  sources  were  converted  to  a 
likelihood  type  function,  summed  across  the 
sources,  and  then  renormalized,  using  the 
formula: 


n(T*iz„k=l..n)=  • 


K 

V*  nfT.lz.) 
Z-r?-o(TJz%) 
Jcsl 
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m  (T. » 2>) 
,-a  (TJz») 


This  algorithm  has  several  attractive 
features.  For  exarple,  high  confidence 


In  order  to  demonstrate  tbe  comparative 
performance  of  tbe  different  proposed 
algorithms,  multiple  examples  of  typica- 
expected  tactical  measurements  were  used  to 
generate  two  confidence  vectors,  and  tfce 
results  combined.  Here  we  will  describe  a 
simple  two  Variable  measurement  where  each 
variable  is  used  to  compute  a  confidence 
vector  and  tfce  results  combined.  Tfce  input 
measurement  of  variable  v  by  source  2  and  v 
by  source  cne  is  shown  in  Figure  8  below. 
Tfce  different  type  A-£  characteristics  in 
v-v  space  are  shown  as  shaded  rectangles. 
Tfce  measurement  and  its  covariance  is  shown 
by  tfce  ellipse. 


The  confidence  vectors  generated  by  the 
two  sources,  and  the  results  of  combining 
the  measure.T*r.ts  using  the  Bayes  inversion, 
and  codbining  the  source  confidences  using 
the  special  case  Detrpster-Shafer  and 
Diversity  Combining  algorithms  are  shown  in 
Figure  9  below.  The  leftmost  column  shows 
the  a-priori  probabilities  of  the  different 
alternatives,  in  this  case,  uniform.  The 
second  two  columns  show  the  results  of  each 


source- operating  cn  its  individual 
seasuremenr  using  the  Bayes  algorithm.  The 
last  three  columns  Show  the  results  of 
sorLbiuxug  the  two  sources  using  Global 
Bayes  inversion  of  the  raw  sensor 
measurements,  Diversity  Combining,  and 
De=oster-5hafe=  combining  resper" ively - 
Kctlce  that  Denpster-Shafer  and  cayes  both 
focus  cn  alternative  C. 

^railed  Performance  BSSalSSi. 

Results  for  all  of  the  examples  were 
cumulated  for  the  tvo  confidence  combining 
algorithms.  The  results  shoved  that  the 
reryster-Shafer  algorithm  was  closer  to  the 
global  Bayes  algorithm  in  90%  of  the 
examoles,  vith  a  mean  square  ordinal 
difference  of  less  than  0.4  (one  flip  of 
adjacent  alternatives),  compared  to  the 
diversity  combining  ordinal  difference  of 
1.4.  Confidence  accuracy  was  also  better, 
with  the  Dempster- Shafer  having  an  rss 
con licence  difference  of  £9%  compared  to 
tr,e  Diversity  Combining  algorithm  ms 
confidence  difference  of  20%. 

Qualitative  evaluation  of  the  results 
also  shoved  the  Dempster-Shafer  algorithm 
to  be  superior,  in  that  it  tended  to 
eliminate  alternatives  which  were  obviously 
impossible  when  source  measurements  were 
oonbined,  while  the  diversity  combining 
algorithm  formed  a  union  set  of  all 
preposed  alternatives,  never  eliminating 
anything.  Ice  area  in  which  both  algorithms 
seemed  to  be  subject  to  error  was  in  under¬ 
estimation  of  the  confidence  which  should 
be  attributed  to  the  "Unknown"  alternative. 

AT.TRR.VATIVP.  BMSSISfi  ANALYSIS. 

Cnee  the  alternative  confidences  are 
corouted,  and  napped  up  to  the  multiple 
levels,  a  method  of  ranking  alternative  set 
descriptors  of  possibilities  is  needed 
which  takes  into  account  the  information 
conveyed  by  a  description,  together  with 
the  confidence  in  a  particular  description 
when  multiple  taxonomic  levels  of 
description  need  to  be  compared  against 
each  other. Development  of  an  entropy 
weighted  ranking  algorithm  for  comparing 
different  level  of  detail  and  confidence 
identification  alternatives  will  be 
described. 

The  alternative  ranking  algorithm 
analysis  demonstrated  the  capability  of  the 
ranking  algorithm  to  select  the  best 
identification  alternative  over  several 
example  data  sets  considering  a  multi-level 
identification  taxonomy.  The  algorithm  was 
implemented  with  several  examples  using  a 
spreadsheet  to  compute  and  sort  the 
alternatives. 

Example.  alternative  Ranking.  Problen 

m  example  showing  the  ambiguities  which 
make  a  multilevel  alternative  ranking  sort 


necessary  is  shown  in  table  II,  where 
sensor  data  is  ambiguous  as  to  Category  as 
well  as  Platform  and  Specific  Type. 


Table  II.  Ambiguous  Alternative  Ranking 
Examnle. _ 
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As  3hown  below  in  table  III,  summing 
confidences  at  different  levels  and  ranking 
results  in  different,  incompatible  results. 
The  Entropy  weighted  rank  scoring  algorithm 
allows  alternatives  at  different  levels  to 
be  compared,  and  the  level  of  detail 
justified  by  the  data  to  be  ranked  highest. 

The  several  ways  sorting  the 
alternatives  shown  in  table  III  above  do 
not  result  in  a  top  5  ranking  which  gives  a 
clear  measure  of  the  best  alternatives.  As 
shown  in  graphically  m  the  pie  charts 
(Figures  10,11,  12,  and  13)  below,  sorting 
by  category,  platform,  or  specific  type  mod 
disassembled  confidences  yields  top 
alternatives  which  ommit  a  significant 
amount  of  information  contained  m  the 
total  picture  conveyed  by  all  the  data  m 
Table  II.  Entropy  Weighted  combined 
ranking,  on  the  other  hand,  as  shown  m 
figure  14,  selects  a  top  five  set  which 
give  a  clearer  picture  of  the  degree  and 
direction  of  the  data  ambiguities. 


ALTERNATIVES  SORTED  BY 
ENTROPY  WEIGHTED  COM8INED  RANK 
{DISASSEMBLED  CONFIDENCE) 
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Figure  14.  Sort  by  Entropy  Weighted  Score 
I  Combining  Category,  Platform,  and  Spec  Type 
_  _ level _ 


Entropy.  We  ighted-Rankincr 


The  entropy  weighted  score  is  determined 
by  weighting  the  confidence  at  each  level 
of  an  alternative  by  the  a-priori  entropy 
(information)  14  available  at  that  level, 
computed  using  the  formula:  * 

N 

H  «  -  £p(?s|S«SA)*l09t(P(Tl|S'SA)) . (10) 

i-1 


Then,  using  the  H  value  at  each  level  to 
compute  the  HSCORE  as  follows: 

HSCORE  «  H^*n(Cat)  +Hmt*m(Plat) 
+HSp,y*ra(SpTy) . . . (ID 

Results. of  Alternative. Ranking. Algorithm 

The  problem  solved  by  the  algorithm  was 
that  of  ranking  alternatives  at  different 
level  of  description:  Category,  Platform, 
and  Specific  Type/Type  Mod.  For  example,  it 
is  necessary  to  rank  the  support  for  "Air- 
Fighter-F4C"  versus  the  alternative  "Air- 
No_Statement-No_Statement" .  The 
implementation  demonstrated  that  for 
typical  expected  cases,  the  weighting 
coefficients  for  the  different  taxonomy 
levels  could  be  adjusted  so  that  with  good 
support  for  a  particular  specific  type, 
even  though  its  absolute  confidence  value 
would  be  much  less  than  that  attributed  to 
the  unqualified  Category  value,  could  be 
selected  as  the  "best"  overall  alternative. 


D£yEL.Q£MSH2^ 

The  set  of  algorithms  described  for 
identification  fusion  (MSXD)  serves  as  part 
of  the  central  Multi-Source  Track 
Management  (MSTM)  function  for  the  Advanced 
Combat  Direction  System  (ACDS)  for  major  OS 
Navy  combatants  including  aircraft  carriers 
and  non-Aegis  Cruisers.  The  multi-source 
identification  function  of  ACDS  is 


currently  in  the  process  of  detailed 
algorithm  validation,  specification,  and 
development,  and  will  be  operational  in  the 
mid  1990’s,  together  with  enhanced 
computers,  displays,  and  data 
communications  equipment. 
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DECISION  PROCESSES  FOR  LARGE  SCALE  RESOURCE 
ALLOCATION  PROBLEMS 

Analysis  of  Problems  with  Random  Release  and  Due  Dates 


Peter  Breitkopf  and  Robert  Walker* 
Marc  Diamond* 


Abstract 

We  present  initial  work  on  the  extension  of  the  op¬ 
timal  resource  allocation  techniques  currently  un¬ 
der  development  to  problems  with  random  release 
dates  and  due  dates.  In  the  allocation  of  terminal 
homing  illumators  in  naval  anti-air  warfare  engage¬ 
ments,  this  means  considering  threats  whose  ve¬ 
locities  may  vary  with  time.  For  this  discussion  we 
restrict  ourselves  to  the  analysis  of  a  single  threat 
scenario.  Here  the  problem  becomes  one  of  deter¬ 
mining  when  and/or  at  what  distance  to  engage  the 
threat.  The  problem  definition  and  problem  geom¬ 
etry  for  this  case  are  established.  Consideration  is 
given  furthermore  to  a  definition  for  the  stochas¬ 
tic  process  that  describes  the  threat  velocity.  It 
is  argued  that  a  filtered  Weiner  process  provides 
a  reasonably  good  model  for  the  threat  and  still 
yields  a  mathematically  tractable  problem  that  can 
be  treated  within  the  context  of  established  theory. 
It  is  shown  that  under  these  conditions,  the  solu¬ 
tion  to  the„problem  of  determining  when  to  engage 
the  threat  to  maximize  the  probability  of  kill  can 
be  solved  explicitly. 

1  Introduction 

This  paper  presents  progress  and  continuing  re¬ 
search  toward  further  development  of  the  optimal 
resource  allocation  techniques,  with  a  particular  fo¬ 
cus  on  the  optimal  allocation  of  anti-air  warfare  re¬ 
sources.  For  scheduling  shipboard  illuminators  to 

*FMC  Corporation,  Central  Engineering  Laboratories, 
Santa  Clara,  CA 

fFMC  Corporation,  Advanced  Systems  Center,  Min¬ 
neapolis,  MN 


aid  terminal  engagement  sequences  in  surface-to- 
air  missile  (SAM)  defense,'  the  analysis  to  date  [1,2] 
has  considered  the  incoming  threat  velocity  as  con¬ 
stant.  In  fact,  the  projected  trajectory  of  incoming 
targets  has  considerable  error  introduced  by  pos¬ 
sible  maneuvers  and  uncertainty  in  the  attacker’s 
mission.  Furthermore,  the  velocity  derived  from 
the.  radar  can  be  considered  to  be  noisy.  Hence 
the;  arrival  time  of  the  ‘'tasks”  into  the  schedul¬ 
ing  queue  must  now  be  represented  as  a  random 
variable  (i.e.  we  now  have  random  release  dates 
and  due  dates  on  the  tasks).  This  affects  the  inter¬ 
cept  timing  and  therefore  has  a  significant  influence 
on  our  past  approach  to  modeling  this  problem, 
in  which  deterministic  release  dates  and  due  dates 
on  tasks  were  used  explicity  to  derive  resource  re¬ 
quirement  intervals  and  generate  a  discrete  state- 
discrete  time  Markov  decision  model  [1],  To  ac¬ 
count  for  the  randomness  over  time  in  the  target 
kinematics,  a  continuous  state  stochastic  model  is 
being  incorporated  into  our  problem. 

We  consider  first  a  single  threat  scenario  with 
no  resource  conflicts.  The  analysis  of  this  case  is 
necessary  in  order  to  provide  the  basis  for  an  un¬ 
derstanding  of  scenarios  involving  multiple  threats 
with  inherent  resource  (illuminator  scheduling)  con¬ 
flicts,  which  is  the  subject  of  ongoing  work.  In  the 
sequel,  the  problem  geometry  for  a  single  threat  at 
tacking  a  ship  is  established  under  the  assumption 
that  we  are  committed  to  launch  only  a  single  salvo 
against  it.  Ir*  this  restricted  problem  we  are  inter 
ested  in  determining  when  and/or  at  what  distance 
the  threat  should  be  engaged  in  order  to  optimize 
the  probability  of  kill.  This  arises  as  a  problem, 
because  of  the  fact  that  the  threat  velocity  cannot 
be  predicted  with  certainty  means  that,  for  a  given 
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SAM  launch  time  and  threat  distance  one  cannot 
guarantee  that  the  threat  will  be  intercepted  while 
it  is  in  the  engagement  envelope.  The  case  in  which 
a  single  observation  of  the  threat  distance  is  made 
is  considered  first  and  then  generalized  to  the  situ¬ 
ation  in  which  the  threat  is  continuously  observed. 
An  appropriate  definition  for  the  velocity  process  is 
then  examined.  We  argue  that  a  filtered  Weiner 
process  provides  the  best  available  model  for  the 
threat.  Finally,  we  conclude  that  when  modeled 
this  way,  the  problem  of  determining  the  optimal 
engagement  opportunity  becomes  a  function  only 
of  the  threat  distance  and  can  thus  be  very  easily 
be  solved. 


2  Problem  Geometry 

Consider  first  a  single  threat  observed  at  time  to 
to  be  some  distance,  Zo,  from  a  ship  and  assume 
that  we  are  restricted  to  launching  a  single  salvo 
against  it.  Assume  that  there  is  no  error  in  the 
initial  observed  range,  but  possible  error  in  the  ob¬ 
served  velocity.  We  want  to  determine  when  we 
should  launch  the  defending  surface-to-air  missile 
so  as  to  maximize  the  probability  of  destroying  the 
threat.  As  per  our  assumption,  we  cannot  predict 
with  certainty  the  future  location  of  the  threat  for 
i  >  <o  but  assume  the  the  threat  trajectory  will  be 
in  some  “trajectory  cone”  as  shown  in  the  distance¬ 
time  plot  of  figure  1.  The  rays  bounding  this  cone 
represent  an  assumed  maximum  and  minimum  ve¬ 
locity  for  the  threat,  which  are  respectively,  5/4  and 
5/6  "distance  units  per  time  unit"  for  this  example. 
Because  we  assume  it  to  be  constant  (as  a  first  or 
der  approximation),  the  trajectory  of  the  SAM  de¬ 
scribes  a  straight  line  on  this  plot.  Given  a  fixed 
launch  time,  T,  the  SAM  will  intercept  the  threat  if 
its  trajectory  intersects  the  actual  (unknown)  tra¬ 
jectory  of  the  threat  within  the  engagement  en¬ 
velope.  The  probability  of  this  event  (which  will 
depend  on  the  assumptions  about  the  distribution 
of  the  random  variable  representing  the  threat  ve¬ 
locity  as  well  as  the  launch  time)  will  be  denoted 
as  pi(T),  where  the  argument,  T,  makes  explicit 
the  dependence  on  the  launch  time.  We  assume 
that  the  probability  of  kill  given  intercept,  pfc|„  is 
constant,  and  since 


threat  trajectory  envelope 


Figure  1:  DiSTANCB-TIMB  PLOT  SHOWING  EN- 
GAGEABIMTY  OF  A  SINGLE  THREAT  DEPENDING 
ON  LAUNCH  TIME. 


Pk(T)  =  pkVp,(T)  (1). 

our  qualified  objective  is  clearly: 

[PI)  maximize:  Pi(T) 

subject  to:  T  >  to. 

For  any  given  launch  time,  T,  the  SAM  trajectory 
intersects  the  threat  trajectory  cone  at  two  points, 
(B  and  D  of  figure  1).  It  also  intersects  the  engage¬ 
ment  envelope  at  two  points  (A  and  C  of  figure  1). 
Let  us  assume,  for  the  sake  of  illustration,  that  the 
intercept  point  of  the  threat  trajectory  is  uniformly 
distributed  between  points  A  and  B1  so  the  proba¬ 
bility  of  intercept  for  launch  time  t\  is  given  as. 


i  (S,D) 


(2) 


where  d  is  some  appropriate  distance  metric.  Figure 
2  provides  a  plot  of  pk(T)  as  a  function  of  launch 

’Implicit  in  this  is  an  assumption  about  the  ftochastic 
process  for  the  threat  velocity  as  discussed  further  below. 
In  fact,  there  may  not  be  a  ‘‘reasonable’’  physical  pro¬ 
cess  that  will  result  in  this  assumption  being  valid.  The 
assumption  is  made  here  for  illustrative  purposes  only. 
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Figure  2:  Probability  of  kill,  />*,  as  a 
FUNCTIONOF  LAUNCH  TIME  UNDER  THE  AS¬ 
SUMPTION  THAT  THE  THREAT  POSITION  WILL 
NOT  BE  OBSERVED  AFTER  THE  INITIAL  DETEC¬ 
TION  AT  TIME  to- 


time,  T,  for  the  conditions  illustrated  in  figure  1, 
assuming  that  d  is  the  standard  Euclidean  metric, 
and  that  we  cannot  observe  the  threat  after  the 
initial  observation  at  time  Jo-  For  this  example,  it 
is  assumed  that  =s  0.8.  In  this  case  the  solution 
to  Pi  is  clear. 

3  Problem  Consideration  for  a  Con¬ 
tinuously  Observed  Threat 

Assume  now  that  we  are  allowed  to  observe  the 
threat  after  its  initial  detection.  If  the  velocity  pro¬ 
cess  Is  assumed  to  be  stationary,  an  observation  at 
time  t'o  of  a  threat  distance  je'o  results  in  a  transla¬ 
tion  of  the  trajectory  cone  so  that  its  apex  «s  at  the 
point  (*' o,*o)  (%ure  3).  If  ws  are  not  going  to 
be  allowed  any  observations  beyond  time  t'o  then 
the  problem  becomes  similar  to  that  cited  above. 
Otherwise,  we  can  no  longer  ask  when  we  should 
launch  to  maximize  pk ,  because  the  answer  to  this 
question  will  depend  on  the  future  behavior  of  the 
threat,  which  we  can  now  observe.  The  dimension 


Figure  3:  Distance-time  plot  showing  the 

TRANSLATION  OF  THE  THREAT  TRAJECTORY 
CONE  FOR  AN.OBSERVATION  MADE  AT  TIME  t'0. 


of  threat  distance,  z(jT)  must  then  be  explicity  rep¬ 
resented  in  the  problem: 

(P2)  maximize:  pi{T,  x(T)) 
subject  to:  T  >  Jo¬ 
in  fact,  the  only  reasonable  way  in  which  the 
problem  can  now  be  stated  is,  "given  that  I  observe 
the  threat  at  distance  x(T)  at  this  point  in  time, 
shall  I  launch  immediately,  or  wait  and  continue  to 
observe  it”.  In  general  this  problem  is  very  difficult 
to  formulate  and  solve.  For  example,  at  a  specific 
point  in  time  T  and  an  observed  distance  x(T) 
we  can  calculate  p/,(T,.c(T))2,  but  there  may  be 
some  chance  that  the  threat  will  pass  into  a  region 
of  higher  pk  at  some  future  point  in  time.  Under 
some  conditions,  however,  this  problem  becomes 
tractable  For  example,  if  we  constrain  ourselves  to 

JNote  that  once  the  SAM  is  launched  further  obser¬ 
vation  of  the  threat  .  avior  is  unimportant  from  the 
standpoint  of  the  system  control.  Hence  for  <  >  T  the 
situation  reverts,  essertially,  to  the  case  of  a  single  obser¬ 
vation  (made  at  lime  T).  Hence,  we  can  easily  compute 
Pt(X,z(T))  for  all  feasible  points  (T,z{T)) 
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Figure  4;  A  contour  plot  for  p*  as  a  func¬ 
tion  OF  LAUNCH  TIME,  T  AND  OBSERVED  DIS 
TANCE  AT  LAUNCH  TIME,  x(T)  FOR  THE  EXAM¬ 
PLE  OF  FIGURES  1,  2,  AND  3. 


make  observations  at  (e.g.,  regular)  discrete  points 
in  time  (as  opposed  to  making  continuous  obser¬ 
vations),  then  a  classical  optimal  stopping  problem 
[3],  which  can  be  solved  using  dynamic  program¬ 
ming,  results.  As  another  example,  figure  4  pro¬ 
vides  a  contour  plot  of  pfc(jT,  sc(T)),  for  the  hypo¬ 
thetical  situation  characterized  by  figures  1  and  2 
under  the  assumption  of  a  continuously  observed 
threat.  Note  that  the  contours  run  parallel  to  the 
time  axis,  as  will  necessarily  be  the  case  when  the 
process  is  stationary.  Note  also  that  the  problem 
P2  can  readily  be  solved  by  a  policy  that  says,  in 
effect,  “wait  until  the  threat  reaches  a  point,  T 
such  that  p*(T,:e(T))  is  optimum  (i.e.  within  the 
shaded  region),  and  launch  the  SAM.”  Because  the 
pfc  function  is  independent  of  time  in  this  case,  it  is 
guaranteed  that  the  system  will  reach  such  a  state 


4  Consideration  of  Velocity  Process 

it  is  very  important  when  modeling  the  threat  ve¬ 
locity  as  a  random  process  that  its  mathematical 


description  reflects  as  realistically  as  possible  the 
actual  nature  of  the  underlying  physical  process. 
On  the  other  hand  it  is  desirable  that  the  model 
be  simple  enough  to  derive  results  in  closed  form. 
The  most  simple  model  would  be  to  consider  the 
velocity  at  any  point  in  time  as  a  random  variable 
that  is  uniformly  distributed  over  a  finite  interval, 
in  the  same  spirit  as  the  discussion  of  the  previous 
section.  Although  this  process  is  mathematically 
easy  to  handle,  it  is  not  close  to  the  actual  physi¬ 
cal  reality  in  that  it  appears  unlikely  that  there  exist 
no  physical  process  of  a  continuous  time  parameter 
that  is  consistent  with  the  stated  assumptions. 

Another  more  realistic  choice  assumes  the  ve¬ 
locity  of  the  incoming  threat  to  be  an  indepen¬ 
dent  Gaussian  Process  with  non-zero  mean  and 
bounded  variance.  This  allows  for  a  fluctuation  of 
the  sample  function  of  the  integral  process  in  time. 
The  integral  of  such  a  process  is  closely  related 
to  a  Wiener  Process  or  Continuous  Random  Walk 
for  which  an  extensive  mathematical  theory  exists 
(4).  The  Wiener  process  has  properties  sufficient  to 
make  the  problem  mathematically  tractable.  How¬ 
ever,  since  the  velocity  is  assumed  to  be  indepen¬ 
dent  and  stationary,  its  power  spectrum  contains 
very  high  frequencies,  which  means  that  the  accel¬ 
eration  becomes  unbounded.  To  force  a  more  pre¬ 
dictable  behavior  on  this  process  it  is  reasonable 
to  perform  a  low  pass  filtering  operation.  This  im¬ 
poses  a  Markov  structure  by  introducing  statistical 
time  dependencies. 

To  avoid  unbounded  sample  functions  and  keep¬ 
ing  the  process  realizations  inside  a  cone  emerging 
from  the  initial  observation  point  in  time  the  intro¬ 
duction  of  a  stationary  independent  velocity  pro¬ 
cess  with  uniform  first  density,  appears  to  model 
the  situation  of  a  randomly  varying  threat  most 
accurately.  This  process  may  also  be  low  pass  fil¬ 
tered.  Applying  the  Law  of  Large  Numbers  one  can 
show  that  the  first  order  densities  of  the  derived  in¬ 
tegral  process  become  approximately  Gaussian  for 
large  t  and  its  dynamic  behavior  approaches  that 
of  a  Wiener  Process.  Hence,  it  makes  sense  for  our 
studies  to  assume  that  an  unfiltered  independent 
stationary  Gaussian  velocity  process  is  a  valid  ap¬ 
proximation  and  leads  to  meaningful  results  with 
out  extensive  simulations. 
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5  Computation  of  the  Probability  of 
Intercept 

As  has  been  pointed  out  above,  maximizing  the 
probability  of  kill  is  equivalent  to  maximizing  the 
probability  of  intercept.p^T).  The  stochastic  pro¬ 
cess  of  threat  position  (integral  of  velocity  process) 
is  observed  and  the  result  of  this  observation  is  «o 
(figure  3).  This  observation  restricts  the  number  of 
possible  time  functions  to  a  subset  of  realizations  of 
the  process  that  lie  roughly.in  a  cone  that  emerges 
from  the  observation  parameters  (<oj*o)-  A  SAM 
with  a  constant  velocity  vm  may  be  launched  at 
T  >  <o-  Interception  is  possible  if  there  exists  t 
such  that  X(t)— vm(f — T)  =  0  and  a  <  X (f)  <  6. 
This  means  that  the  realization,  *(<),  of  the  pro¬ 
cess  of  the  threat  position  and  the  deterministic 
missile  trajectory  intersect  within  the  engagement 
interval  (a,  6],  It  is  therefore  reasonable  to  com¬ 
pute  the  probability  of  intercept  p,  in  the  following 
manner: 


Pi  = 


(3) 


P[X(t)-vm(t-T)  =  0,a<X(t)<b 
pf(to)  =  *o) 


The  assumption  of  a  gaussian  velocity  process 
with  mean  ij  and  bounded  variance  leads  to  a 
Wiener  Process  (figure  4),  whose  first  order  den* 
sity  conditioned  on  the  observation  x(*o)  can  be 
described  as 


.V(«)l*(«e)=*.  ^2rro(t~To) 


. (4) 

B  is  a  normalization  factor  and  a  is  proportional 
to  the  variance  of  the  velocity  process.  As  shown 
in  figure  11,  if  we  start  from  the  observation  point 
(<o>*o)»  the  first  order  conditional  density  of  this 
process  is  centered  around  a  linearly  varying  mean 
=  xo  -  7]{t  -  <o)  with  a  linearly  increas¬ 
ing  variance.  This  position  process  is  clearly  not 
stationary. 

If  z(t)  is  replaced  by  vm(£  —  T),  a  new  function 


s(*o,<o,r,f)=  (5) 

B  |.m(l-T)-.04^i-lt)|1 

■  . . P 

\/2xa(t  -  (0) 


Figure  5:  Calculation  of  p,  assuming  a 
Gaussian  velocity  process. 


can  be  constructed.  It  can  be  shown  that  its  inte¬ 
gral  has  a  least  upper  bound  Af.  Normalization  of 
the  function  j(xo>fo,I',f)  using  M  leads  to  a  new 
function  g(X0,to,T,t)  that  has  the  properties  of  a 
probability  density  function.  Using  equation  (2)  the 
probability  of  intercept  can  be  computed  by  inte¬ 
grating  the  function  xo,lo}T,t )  from  £  +  T  to 
-f  T.  This  leads  to  the  following  optimization 
problem: 

max:  Pi(xo,to,T) 

1 7™  '17' 

=  /  g(*o>to>T,t)dt 

subject  to:  *o  >  0>  T  >io>0 
which  will  be  considered  here. 

0  Results 

It  is  very  important  to  show  that  the  derived  prob¬ 
ability  of  intercept  contains  enough  information 
about  the  underlying  random  process’  dynamics  to 
serve  as  a  useful  measure  for  optimization.  Some 
of  the  results  will  therefore  show  the  variation  of  p, 
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dependent  on  different  process  parameters,  which 
indudes'-the  special  case  of  a  deterministic  threat 
trajectory. 

Figure  6  shows  the  variation  of  SAM  speed.  Con¬ 
sidering  pi  as  a  function  of  vm/r]  attains  a  maxi¬ 
mum  which  allows  one  to  determine  an  optimal 
launch  velocity  for  each  a.  This  function  degener¬ 
ates  to  a  rectangular  function  for  a  =  0,  which 
corresponds  to  the  deterministic  case.  Figure  7 
shows  that  as  a  decreases  to  0,  pi  becomes  1  if  the 
theoretical  interception  occurs  within  the  engage¬ 
ment  interval  and  0  otherwise.  The  case  where 
the  missile  velocity  is  held  constant  and  a  is  in¬ 
creased  is  shown  in  figure  8.  Here  again  it  is  shown 
that  if  theoretical  interception  occurs  within  (a,  b] 
the  probability  pi  will  approach  1  for  a  approach¬ 
ing  0  (upper  curve  in  figure  9).  If  a  theoretical 
interception  occurs  outside  (a,  6),  pi  tends  to  go  to 
0.  Therefore  both  results  contain  the  determinis¬ 
tic  case.  Figure  10  shows  the  situation  where  the 
threat  process  is  observed  at  fo  =  0  and  a  missile 
launch  is  attempted  after  a  delay  time  T.  Given  one 
observation,  figure  11  shows  a  curve  that  attains  a 
maximum.  This  allows  us  to  determine  an  optimal 
launch  time  T  that  optimizes  j>,*.  If  continuous  ob¬ 
servations  (foj  *o) arc  allowed  and  the  launch  of  the 
missile  occurs  at  the  time  of  observation,  p,(fo»*o) 
will  remain  constant  as  <o  changes.  This  is  clearly 
shown  in  figure  12.  The  value  pi  therefore  is  only 
dependent  on  the  observation  distance  xq  and  at¬ 
tains  a  maximum  which  allows  one  to  determine 
the  optimal  distance  of  the  threat  where  immediate 
launch  will  yield  the  highest  probability  of  intercept 
(figure  13). 

7  Conclusions 

From  these  studies  one  can  conclude  that  to  max¬ 
imize  the  probability  of  intercepting  a  one  dimen¬ 
sional  threat  whose  velocity  is  an  independent  sta¬ 
tionary  Gaussian  random  process  with  non-zero 
mean  and  bounded  variance  it  suffices: 

a.  to  observe  the  treat  once  and  then  launch  the 
missile  after  an  optimal  delay  time  T  (figures 
10  and  11),  or 

b.  to  observe  the  threat  continuously  until  the 
optimal  threat  distance  (figure  12  and  13)  is 


x 


Figure  6:  Variation  of  missile  speed. 


Figure  7.  A  PLOT  of  pt  FOR  varying  missile 
SPEEDS. 
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Figure  12:  Continuous  observation  at 

(fo,*o)  OF  THE  INTEGRATED  VELOCITY  PRO¬ 
CESS. 


Figure  13:  The  value  of  pt  for  varying  ob¬ 
servation  DISTANCES. 


reached' and  then  launch  immediately. 

Since  pi  is  not  dependent  on  the  observation 
time  to,  each  realization  of  the  random  process 
will  reach  this  point  eventually3. 

Possible  ways  to  continue  this  work  would  be 
to  look,  at  a  more  realistic  stochastic  description 
of  the  velocity  process  allowing  non-Gaussian  first 
order  densities  with  final  support  (i.e,  hard  limita¬ 
tion  of  the  velocity)  and  impose  a  linear  Markovian 
structure  by  filtering.  Another  direction  to  extend 
this  work  is  to  use  the  results  for  the  Gaussian  den¬ 
sity  presented  here  to  describe  the  probability  of 
intercept  of  multiple  launches  employing  a  form  of 
shoot  and  look”  doctrine.  It  seems  reasonable 
that  a  solution  to  the  problem  of  optimizing  a  mul¬ 
tiple  salvo  engagement  against  a  single  threat  can 
be  solved  using  dynamic  programming.  For  exam¬ 
ple,  the  optimal  first  launch  opportunity  in  a  two 
salvo  engagement  would  have  the  form: 

max:  1  x(t))  JA  i>0j,(t'o)/(t'o)rf( 

subject  to:  t  >  t0 

Here,  ^(probability  of  miss)  =  1  ~pk,  pQ\t(t')  is 
the  probability  density  for  the  outcome  time  of  an 
engagement  initiated  with  a  SAM  launch  at  time  t 
(that  is,  the  time  at  which  we  know  whether  or  not 
the  SAM  successfully  destroyed  the  threat),  and 
f(t)  is  defined  by: 

[P3|  /(*' o)  =  min pm(T,  x(T)) 
subject  to:  T  >  t1 '<>. 

Obviously,  further  details  and  the  tractability  of 
this  problem  have  yet  to  be  established. 
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ABSTRACT 

This  paper  deals  with  prolans  of  quantitative 
organizational  design.  We  show  tfc2t  the  optical  architecture 
of  even  a  very  simple  team  of  two  decision  rates  (DMs) 
performing  binary  hypothesis  testing  depends  on  variables 
external  to [the  team.  On  the  o&er  hand,  there  exist  particular 
probability  distributions  for  the  observations  which  lead  to 
unambiguous  optimal  architectures  ic  which  the  "berter" 
decision  maker  makes  the  final  team  decision  based  upon 
finite>;t  messages  f'om  the  "worse"  decision  maker.  But. 
ever  ,i.  these  cases  the  results  are-difficult  to  generalize  foe 
teams  with  three  or  more  DMs.  because  of  the  complexity  of 
the  problem.  A  heuristic  algorithm  for  organization  design  is 
presented. 

1.  INTRODUCTION  AND  MOTIVATION 

Our  main  research  goal  is  to  develop  basic 
understanding  of  decision  making  In  distributed 
organizations.  As  we  shall  see  such  problems  can  become 
very  complicated  because  of  the  distributed  (decimalized) 
decision  process.  In  order  to  gain  understanding  into  the 
bas:c  fundamental  issues  we  need  a  paradigm  which 
represents  simple  decision  making,  and  whose  centralized 
version  is  easy  to  formulate,  solve,  and  compute.  We  have 
adopted  the  problem  of  hypothesis  testing  as  our  basic 
paradigm;  see  references  [1 J  to  [4]  for  related  prior  research 
in  this  area. 

The  classic  decision  problem  in  this  setting  relates  to  the 
desigr  a  team  to  perform  target  detection  (no  target  vs  target 
present)  using  several  distributed  sensors.  Suppose  that  each 
sensor  has  significant  computational  capability  to  process  his 
raw  returns  and  can  perform  local  target  detection.  Because 
of  the  unreliability  and  uncertainty  of  the  observations  there 
is  a  high  probability  of  error  associated  with  each  sensor’s 
decision  when  he  operates  in  isolation.  Thus,  it  is  desirable 
to  have  many  sensors  to  operate  together  as  a  team  to 
decrease  the  error  probability.  In  order  to  achieve  this,  we 
have  to  define  the  architecture  of  the  organization  (i.e.  which 
sensor  communicates  with  whom)  and  derive  a  decision 
protocol  to  fuse  the  "tentative"  sensor  decisions  into  a  global 
team  decision. 


We  er^-cy  a  binary  fcyp<xbrris  testing  model,  wtach 
cam  be  generalized  ?o  more  general  hypothesis  Jesting 
problems.  **'  test  are  indeed  gexeric  in  the  situation 
assessment  C*  function.  We  would  like  to  develop  a 
quantitive  design  methodology  co  deal  with  them. 

We  cxzsvie  several  te^oftzniissoes  of  these  problems, 
rearing  with  real-time  dectsKtt  ruling  rules  for  dsstribmsd 
hypothesis  testing.  Tbe  team  arebzzzsrc  *s  the  way  the  DMs 
of  the  team  are  set  up.  We  want  to  obeci*,  the  performance  of 
a  given  team  architecture  (say  the  pn^ebfliiy  of  error)  and 
compare  the  performance  of  alirrarjve  architectures.  We 
also  seek  to  design  an  organization  to  cocci  some  global  team 
performance  specifications  and  saxly  the  effect  of  adding  a 
new  DM  to  tbe  team.  Finally,  we  weald  like  to  understand 
and  develop  the  theoretical  aspects  and  computational 
complexity  associated  with  this  class  of  problems. 

Suppose  that  a  team  consists  of  N  DMs.  Evidently,  the 
team  may  have  many  alternative  architectures  and 
communication  protocols.  For  example,  if  N  =  3.  we  can  see 
two  different  architectures  in  Figure  la  and  lb.  The 
environment  consists  of  several  hypotheses.  Each  DM 
receives  a  conditionally  independent  observation  and  makes  a 
tentative  decision,  based  upon  his  own  measurement  and  the 
decisions  of  the  other  processors  which  have  been  transmitted 
to  him,  according  to  some  specified  ommunication 
protocols.  The  final  team  decision  has  some  costs  associated 
with  it.  We  would  like  to  determine  somehow  vhich 
configuration  results  into  superior  performance;  moreo.er, 
given  three  DMs  and  a  particular  configuration,  we  would 
like  to  determine  which  DM  should  be  employed  in  each 
position.  We  would  also  like  to  test  the  effects  of  different 
communication  protocols.  Another  type  of  problem  is 
illustrated  in  Figure  lc.  Given  a  team  of  DMs  which  docs  not 
meet  certain  specifications,  we  would  like  to  determine  what 
DM  should  be  introduced  to  the  team  and  in  what  position, 
for  the  team  to  meet  the  posed  specifications. 

In  this  paper  all  the  hypothesis  testing  performed  i> 
assumed  binary.  In  Section  2,  we  will  discuss  the  optimum 
configuration  of  a  team  consisting  of  two  DMs.  In  Section  3, 
we  examine  the  mm  problem  for  the  special  case  where  the 
observations  of  the  DMs  are  described  by  Gaussian 
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FIGURE  1 

LONG  RANGE  OBJECTIVES 
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p»-  /„?*,{ AJH.J4A  (1) 

abac 


A(y)  = 

is  the  likelihood  ratio  2nd 


PfrIHJ 

P(>iH) 

n  represents  die  decision  shresbokt 


The  probability  of  filse  alum.  Pp  is  the  probability  that 
the  DM  decides  u  =  l  »  hen  1 10  is  the  tree  hypothesis  and  is 
defined  by 

Fr=  /.P«.,(A|iy«!A  (2) 


Thus,  the  ROC  curve  is  expressed  by  two  parametric 
equations,  with  the  threshold  parameter  n  varying  from  zero 
to  infinity;  in  general,  can  not  be  expressed  in  a  dosed  form. 
The  ROC  curve  is  gflncavC  and  it  has  another  useful  property, 
suppose  that  by  substituting  n*  in  equations  (1)  and  (2).  the 
point  (Pp*,PD")  of  the  ROC  curve  is  obtained.  Then,  the 
slope  of  the  tangent  to  the  ROC  curve  at  (PF\PD#)  is  n# 
(Figure  3).  Consequently,  if  a  DM  performs  detection  with 
some  given  n\  his  optimal  operating  point  is  the  point  of  the 
ROC  curve  whe.ie  the  slope  of  the  tangent  is  n\ 

In  our  research,  we  use  the  ROC  curve  to  quantify  the 
relative  expertise  of  different  DMs.  Moreover,  since  the  team 
of  DMs  also  performs  binary  hypothesis  testing,  team 
performance  can  also  be  quantified  by  the  team  ROC  curv  e. 
If  the  ROC  curve  of  DM  A  is  higher  than  the  ROC  curve  of 
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2SS£zx&  known.  as  wdl  as  lie  costs  J(aJf)  which  arc 
.  inccnrd  by  lie  team  when  i:  decades  o  and  H  is  ibe  tree 
hypothecs.  It  frassungdtfcg  it  is  more  cosriy  foe  the  tram  to 
err  liaa  io  be  correct.  The  team  objecrive  is  to  minimize  the 
expected  cost  incurred  bv  tic  ism. 

Each  DM  receives  a  conditionally  independent 
.  observation.  One  DM,  caned  the  fongi*nnt  DM.  cukes  a 
binary  dedsSoc  (cc=  0  or  dc=  I)  based  ca  his  pesetem. 
y^.  and  transmits  it  to  the  oibe  DM,  celled  the  prinrnv  DM. 
Then.  tic  primary  DM  fcas  to  cake  the  team  derisioa  (based 
upon  his  ow a  measurbnent-y^  and  the  message  from  the 
consultant)  which  has  to  be  either  op=0  or  ur=  1  indicating 
that  the  corresponding  hypothesis  is  considered  to  be  tree. 


Tfce  optimal  solution  for  the  decision  rules  of  tfce  two 
DMs  Is  given  by  likelihood  ratio  test  with  constant  thresholds 
[3J.  For  the  primary  DM: 


If  oe=0: 
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For  the  consultant  DM: 
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where 


^  J(I(ig-J(0,IL) 
P,  JvO.iy-Jfi.H,) 


and  PD'  (  PF* )  is  the  probability  of  detection  (probability  of 
false  alarm)  for  the  primary  DM  when  uc  =  i  was  received  by 
the  consultant  (i  =  0,1)  and  PD«  (  Ppc  )  is  the  probability  of 
detection  (probability  of  false  alarm)  for  the  consultant  DM. 
when  both  DMs  are  operated  according  to  the  optimal 
decision  niles  of  eqs.(3)-(5).  For  example. 


Pr°=  PrlA^-L^nHy  (6) 

1  '  *D 


Figure  5b  demonstrates  the  form  of  the  operating  points. 

The  ROC  curve  of  the  team  as  a  whole  can  be  computed 
and  is  given  by: 


Pft  =  0-PF‘)PF°  +  PP*Pf‘  (7) 

Pdt  =  (1-P0c)Pdo  +  pdcpd.  (8) 
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FIGURE  ; 


Z5  A  CbunlerexmnpJe  to  the  Conjecture 


THE  PROBLEM  AND  ITS  SOLUTION 


PRIMARY  DM  CONSULTING  DM 


Note  that  the  team  ROC  depends  not  only  upon  the 
characteristics  (“expertise")  of  the  individual  DMs,  but  also 
on  the  particular  way  that  they  have  been  constrained  to 
interact  (the  team  or  organization  architecture). 

2.4  Architecture  Comparisons 

Suppose  that  one  of  the  two  DMs  is  "better"  than  the 
other,  i.e.  his  ROC  curve  is  higher  than  the  ROC  curve  of 
the  other  DM.  There  exist  two  candidate  architectures  for  the 
team;  either  make  the  "better*  DM  the  primary  DM  or  make 
the  "better"  DM  the  consultant  DM.  Recall  that  the  primary 
DM  makes  the  final  team  decision.  We  would  like  to 
determine  which  of  the  two  architectures  yields  better 
performance  than  the  other  for  all  values  of  n,  that  is 
whether  the  optimal  architecture  is  independent  of  the 
external  parameters  of  the  problem  (details  of  cost  function, 
prior  probabilities)  which  determine  the  value  of  n. 

The  architecture  with  the  better  DM  as  the  primary  DM 
was  conjectured  (3J  to  be  better.  This  conjecture  is  appealing 
from  an  intuitive  point  of  view;  given  two  DMs  one  would 
like  to  have  the  "better"  DM  make  the  final  decision, 
independent  of  the  prior  probabilities  and  the  cost 
assignments.  If  this  were  the  case,  then  the  optimal  way  of 
organizing  two  DMs  would  not  change,  say,  as  the  prior 
probabilities  of  the  underlying  hypotheses  vary. 
Unfortunately,  as  we  show  below,  this  conjecture  can  be 
false. 


la  figure  6,  we  prescm  the  ROC  cezve*  of  twp  DMs, 
ooc  berter  than  t be  other  aceonfiag  to  our  prior  defimtibe. 
Table  1  contains  the  discrete  distributions  of  their 
observances;  the  elements  in  the  matrix  denote  probatxHries- 
Fcr  example,  the  "worie"  DM  v  will  observe  y  =  1  with 
probability  (XI  if  is  cue  and  with  probability  0.5  if  H,  is 
cnc.  From  TaKe  1  wr  can  then  see  that  tbe-becer  DM  has  as 
good  cr  better  diseiminarioa  of  the  two  hypotheses,  and  of 
course  this  is  reflected  in  tbs  dominance  of  his  ROC  cove  in 
figured. 

In  order  to  establish  the  counterexample  we  compared 
the  two  architectures  using  tedious,  albeit  straight  forward 
calculations  of  the  probability  of  error.  The  results  are 
fllusxued  in  Table  2,  which  contains  the  probability  of  error 
for  iv^o  different  values  of  n  for  each  architecture  —  B 
denotes  the  "better"  DM,  while  W  denotes  the  "worse"  one. 
For  n  =  1.0  having  the  better  DM  as  the  consultant  is 

FIGURE  6 
THE  ROC  CURVES 


TABLE  1 

DESCRIPTION  OF  DMs 
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optimal  while  for  n  =  0  38  having  the  better  DM  as  the 
primary  is  optimal.  This  can  be  also  verified  by  deriving  the 
team  ROC  curves  for  each  architecture  (Figure  7a).  As  the 
close-up  of  Figure  7b  shows  the  two  ROC  curves  intersect 
near  Pp=  0.3.  Thus,  in  this  special  example,  the  optimal  team 


TABLE  2 

COMPARISONS  OF 
PROB.  OF  ERROR 

[f]-®-*  ®-QD— 

n=  1.00  0.200  (oolinul)  0.215 

a =0.35  0.1840-  ‘  0.1S33  (optimd) 


FIGURE  7 

TEAM  ROC  CURVES 
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architecture  depends  on  ihe  value  of  n  (i  e.  the  numerical 
values  of  the  prior  probabilities  and  costs).  On  the  other 
hand,  for  this  example,  both  architectures  have  very  similar 
performance,  since  their  ROC  curves  are  quite  close  (Figure 
7a). 

3.  COMPARING  GAUSSIAN  VARIANCES 
3.1  General  Remarks 

Consider  special  case  of  the  problem  presented  in 
Section  2.3  above,  where  each  DM  receives  two  independent 
observations  distributed  with  the  Gaussian  distribution  with 
different  variance  under  each  hypothesis.  The  ROC  curves  in 


this  case  are  simple  a ad  given  in  a  closed  form  [JJ.  A 
summaty  of  this  case  is  given  in  Table  3- 

33.  The  First  Architecture 

Suppose  that  the  better  DM  is  made  the  primary.  Then, 
from  the  solution  of  the  problem  and  the  property  of  the  ROC 
curve 
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where  the  superscripts  B  (better)  and  W  (worse)  indicate 
which  DMs  ROC  curve  is  being  differentiated.  Solving  the 
system  of  eqs.(9)-(U)  and  recalling  the  concavity  of  the 
ROC  curve,  we  obtain  that  in  this  case 

WOJ) 

which  implies  that  whenever  uc=  1  is  received  from  the 
consultant,  the  primary  decides  up=  1  independent  of  his  own 
observation.  Substituting  into  (7)  and  (8).  we  obtain  that  the 
team  ROC  cun  e  in  this  case  is  given  by: 

Pft  =  PF»  +  PF‘  -  Pp°PFi  02) 

pdt  =  pd°+pd«  -  pd»p„>  03) 

for  some  OV’-F'd0)  >»  Ule  R0C  curre  °r  "OTSe 

[belter]  DM. 

TABLE  3 

COMPARING  GAUSSIAN  VARIANCES 

WORSE  DM :  BETrER  DM : 

Y,,Y2~NW)  Y,,Y,~N(0,o2) 

I'o:°2  =  0o2  H0:oJ  =  o02 

H,  :«*=<.,*  H, :  o2  =  N  o,2 


with :  o02  <  o,2  ;  N  >  1 
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3-3  The  Second  Architecture 

Suppose  that  sow  the  better  DM  is  cade  the  primary. 
Then,  we  can  arbitrarily  assign  to  the  DMs  the  following 
operaring  poisa: 

to  the  Consultant  (Worse)  DM 

(PFSPDe):  to  the  Primary  (Beaer)  DM  when  ue  =  0  is  received 
(1.1)  :  to  the  Primary  (Better)  DM  when  ue=l  is  received 

Substituting  into  eqs.  (7)  asd  (8),  we  obtain  eqs.  (12)  and 
(13)  again.  Since  for  this  arbitrary  assignment  of  operating 
points,  the  architecture  with  the  better  DM  as  the  primary  can 
achieve  performance  equal  to  the  optimal  performance  of  the 
other  2nrimecture.  the  better  DM  shonM  alwav*  he  the 
m'marv  DM. 

33  Obtaining  the  Team  ROC  Curse 


43  Adding  a  New  DM 

By  introducing  the  "’perfect*  DM  to  the  team,  that  is  a 
DM  who  always  knows  which  is  the  true  hypothesis  (Le.  his 
ROC  curse  goes  through  (PF,Pp)  =  (0,1)  ),  the  team 
probability  of  error  will  be  reduced  to  2ero-  Hence, 
specifications  no  maner  bow  strict  can  always  be  met 

We  would  like  to  introduce  a  trade  off  between  the  team 
performance  and  the  quality  of  the  DM  to  be  introduced.  To 
measure  quality  we  need  to  rank  the  DMs  even  in  cases  of 
ambiguity  (Figure  4b).  Tbe  measure  we  will  employ  is  the 
area  under  the  ROC  corse.  This  measure  is  scalar  and 
preserves  the  ranking  of  unambiguous  situations  (Figure  4a;, 
the  "perfect"  DM  has  a  measure  of  1  and  the  "worst"  DM 
(tbe  DM  who  is  equally  likely  to  choose-  between  either 
hypothesis  independent  of  his  observation)  has  a  measure  of 
0.5. 


Suppose  that  the  better  DM  is  the  consultant.  Then, 
from  the  system  of  eqs.  (9H1 1),  we  C2n  solve  for  PFC  to 
obtain: 


fL  __d_  M.i 


This  is  an  equation  of  just  PF«  We  could  have  substituted  for 
PDC  from  the  equation  of  the  ROC  curve  of  the  consultant 
(better)  DM,  but  did  not  do  it  because  of  space  limitations.  If 
the  equation  is  solved  PFC  is  obtained.  Moreover 


By  substituting  into  the  equation  of  the  ROC  curve  of  the 
primary  (worse)  DM,  PD°  is  obtained.  Finally  by  substituting 
for  all  the  probabilities  into  equations  (7)  and  (8),  the  team 
ROC  curve  is  obtained  as  a  function  of  n,  the  variances  of 
the  DMs  and  N. 

It  should  be  clear  that  the  team  ROC  curve  will  not  be  of 
the  same  form  as  the  ROC  curves  of  the  individual  DMs.  In 
fact,  it  is  not  even  given  by  a  closed  form  expression.  Thus, 
we  cannot  easily  extend  the  result  to  the  case  of  three  DMs  in 
a  tandem  architecture. 

4.  DESIGNING  ORGANIZATIONS 
4.1  General  Remarks 

Suppose  that  we  are  given  a  team  of  DMs  and  a  set  of 
requirements  on  the  team  performance,  which  are  not  met. 
We  could  perform  several  changes  in  the  team,  such  as 
adding  or  deleting  a  DM  or  changing  the  team 
interconnections,  or  redesigning  the  communication 
protocols,  to  make  the  team  meet  posed  performance 
requirements.  Presently,  we  are  employing  a  tnal  and  error 
approach  because  of  the  mathematical  complexity  of  the 
problems;  we  hope  for  analytical  insight  from  our  future 
research. 


The  design  problem  will  now  be  to  find  the  "cheapest" 
DM  which  will  enable  the  team  to  meet  the  requirements,  by 
cheapest  meaning  the  DM  with  the  smallest  area  under  the 
ROC  curve. 

43  A  Sample  Problem 

Suppose  we  are  given  a  DM  ("old")  with  ROC  curve: 


and  a  set  of  requirements  for  team  performance  (i.e. 
minimum  levels  of  probability  of  detection  for  specified 
levels  of  probability  of  false  2larm).  We  want  to  find  the 
“cheapest"  DM  ("new")  with  omiomorphic  ROC  curve  to  the 
old  DM.  that  is: 


which  will  make  the  team  satisfy  the  requirements.  In  this 
case,  the  smaller  the  value  of  the  constant  K  the  cheaper  the 
DM. 


The  problem  is  the  same  as  the  one  described  in  Section 
23  above.  The  two  possible  architectures  are  to  use  the  new 
DM  as  the  consultant  or  to  use  the  new  DM  as  the  primary. 

In  the  following  algorithm  we  use  our  theoretical  analysis 
which  suggests  that  the  better  DM  should  be  the_Primarv  to 
avoid  a  completely  our  trial  and  error  approach. 

4.4  The  Algorithm 

STEPO:  Start  with  two  identical  "old"  DMs 

STEP  1  If  the  requirements  are  met,  then  the  team  is  too 
good.  Thus,  the  new  DM  can  be  worse  than  what 
he  is,  which  implies  that  the  K  of  the  new  DM  can 
and  should  decrease.  From  our  theoretical  analysis 
we  know  that  the  new  DM  should  be  the  consultant 
Thus,  we  decrease  the  consultant’s  K  and  go  to 
STEP  3. 
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STEP  2:  If  ifce  requirements  are  not  met,  then  the  team  is  too 
weak-  Thus,  the  new  DM  should  be  better  than 
what  be  is,  which  implies  dial  the  K  of  the  new  DM 
can  and  should  increase.  From  our  theoretical 
analysis  we  know  that  the  new  DM  should  be  the 
primary.  Thus,  we  decrease  the  primary's  K  and  go 
to  STEP  4. 

STEP 3:  If  all  the  requirements  are  met  and  one  is  met 
exactly,  we  stop.  If  the  requirements  are  met  then 
we  decrease  the  K  of  the  consultant.  If  the 
requirements  are  not  met  we  increase  the  K  of  the 
consultant.  We  then  repeat  STEP  3. 

STEP  4.  If  all  the  requirements  are  met  and  one  is  met 
exactly,  we  stop.  If  the  requirements  are  met  then 
we  decrease  the  K  of  the  primary.  If  the 
requiremette  arc  not  met  we  increase  the  K  of  the 
primary.  We  then  repeat  STEP  4. 

Our  theoretical  analysis  indicated  whether  the  new  DM 
should  be  the  primiry  or  the  consultant.  Using  educated 
choiscs  for  the  values  of  K  in  our  trial  and  error  approach  our 
problem  will  be  solved  efficiently. 

5.  CONCLUSIONS 

By  a  counterexample  we  have  shown  that  the  optimal 
team  architecture  may  depend  on  parameters  external  to  the 
team  (prior  probabilities,  cost  structure  etc).  Hence,  we  can 
have  ambiguity  of  whether  a  particular  architecture  is  optimal 
for  al!  values  of  the  external  parameters.  It  is  possible, 
however,  to  use  the  area  under  the  team  ROC  curve  to 
remove  the  ambiguity. 

Special  distributions  lead  to  architectural  comparisons 
that  are  unambiguous.  We  demonstrated  this  in  the  case  of 
comparing  gaussian  variances,  in  which  the  better  DM 
should  alw;,ysJ>e  thc  Drim?rv  DM.  Computer  simulations 
(not  reported  here)  indicated  that  this  result  holds  true  for 
comparisons  of  means  of  gaussian  distributions,  but  the 
inherent  complexity  of  the  equations  prohibited  us  from 
obtaining  analytical  results. 

Even  if  the  individual  DM  ROC  curves  are  analytical, 
the  team  ROC  curve  is  not.  Thus,  it  is  hard  to  generalize  our 
results  to  teams  with  more  than  two  DMs.  We  hope  to  obtain 
aome  novel  results  to  help  us  design  more  complex 
organizations;  but,  it  is  not  clear  whether  such  results  exist. 

Finally,  we  plan  to  study  the  effects  on  the  team 
performance  of  different  communication  protocols  as  well  as 
of  more  complex  (non -bin ary)  hypotheses. 
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THE  DYNAMICS  OF  A  HUMAN  DECISION  MAKER  IN  A  SUDDENLY  CHANCING  ENVIRONMENT 
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San  Diego,  CA  92152-500 0 
ABSTRACT 

In  most  C3  architectures,  the  human  decision 
mak?r  has  a  central  position.  He  is  frequently  given  a 
role  in  which  he  is  required  to  bring  some  semblance  of 
order  to  a  rapidly  evolving  encounter  which  involves 
groups  of  both  hostile  and  friendly  vehicles.  On  the  basis 
of  his  understanding  of  the  implications  of  different 
events,  he  must  make  rational  judgments  on  resource 
allocation  and  strategy. 

This  paper  presents  a  study  of  a  model  which 
portrays  the  response  of  a  person  given  a  situation- 
assessment  task.  The  model  is  phrased  in  terms  of 
stochastic  differential  equations  in  order  that  it  be 
compatible  with  the  usual  modelling  paradigm  for 
describing  dynamically  varying  encounters.  This 
normative-desenptive  model  permits  the  intimate 
interrelation  of  the  operator  and  the  rest  of  the  C3 
subsystems  to  be  expressed. 

The  measured  response  of  a  test  subject  has  been 
compared  with  the  sample  response  of  the  model.  A  time 
varying  scene  was  presented  to  a  subject  who  was  asked 
to  indicate  the  level  of  confidence  that  a  target  was 
within  the  field  of  view.  This  response,  along  with  the 
actual  locations  of  targets  and  decoys,  was  recorded  and 
compared  with  the  model  response  to  the  same  scenario. 
The  model  response  did  not  reproduce  tho  empirical 
behavior  pattern  any  more  than  two  humans  would 
respond  identically  to  the  same  stimuli  Nevertheless,  the 
model  does  manifest  the  ‘human"  indecisiveness  found  in 
the  experiment. 


1.  INTRODUCTION 

A  human  has  a  unique  talent  for  making  decisions 
and  allocating  resources  in  a  dynamically  varying 
encounter  wh5eh  is  subject  to  significant  uncertainty.  For 
example,  if  ho  is  able  to  view  the  field  of  action,  he  can 
distinguish  the  highest  pnority  target  in  a  cluster  of  like 
objects  even  m  an  environment  permeated  with  a  high 
level  of  structured  clutter.  Additionally,  he  is  able  to 
bnng  some  semblance  of  order  to  observations  of  the 
motion  of  interacting  groups  of  hostile  and  fnendly 
vehicles.  On  tho  basis  of  his  understanding  of  the 
implications  of  the  perceived  events,  he  makes  rational 
judgments  on  suitable  strategics  Indeed,  the  ubiquitous 
role  of  the  human  in  BM/C3  testifies  to  nis  oistinctrvo 
aptitudes. 

Notwithstanding  this  general  sentiment,  tho 
precise  delineation  of  human  tasks  is  a  controversial 
theme  Indeed,  the  potential  role  of  algorithmic  sur¬ 
rogates  has  expanded  as  sensor  and  computer  technology 
bavo  advanced  In  many  analyses  of  C3  systems,  tho 
human  ts  not  thought  of  as  an  integral  part  of  the 
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system  architecture,  but  is  instead  given  an  externa! 
position  as  a  "user"  of  data  or  an  "input"  to  the  rest  of 
the  system.  This  extrinsic  view  of  the  human  has  fed 
some  investigators  to  relegate  human  activities  to  a  very 
limited  domain. 

While  a.1  military  BM/C3  systems  share  numerous 
generic  similarities,  different  applications  tend  to 
emphasize  the  importance  of  certain  aspects  of  the 
system  design  problem.  To  see  why  this  is  so,  some 
insight  into  the  basic  issues  which  guide  system  design  is 
required.  The  functions  of  Battle  Management  (BM)  and 
Command.  Control  and  Communications  (C3)  are  per¬ 
formed  hierarchically  at  many  levels  of  military  command 
and  operations.  These  levels  range  from  individual 
weapons  platforms  at  the  lowest  to  the  Command 
Authonties  (CA)  at  the  highest.  The  functions  are 
earned  out  through  organizational  structures  and 
procedures  spanning  the  military  force  structure.  Imple¬ 
mentation  is  accomplished  by  the  incorporation  of  equip¬ 
ment,  algorithms  and  communications  into  vanous 
categories  and  levels  of  subsystems  which  range  from 
space-based  sensor  to  field  radios. 

Even  when  the  particular  needs  of  a  specific 
application  are  studied,  virtually  the  entire  domain  of 
system  components  and  locations  must  be  considered. 
Consider,  for  example,  the  BM/C3  functions  required  for 
tho  operation  of  an  individual  weapons  platform.  Data 
trom  multiple  sensors,  both  on  board  and  remote,  must 
oe  processed  in  concert  with  weapon  status  information 
to  determine  whether  and  where  to  launch  interceptors. 
More  generally,  a  panoramic  view  of  BWC3  includes  not 
only  the  individual  subsystems,  but  also  the  communica¬ 
tion  links  and  the  support  that  they  provide  in  supplying 
the  requisite  information  to  the  control  and  management 
centers. 

In  the  global  system  there  are  numerous  interac¬ 
tions  to  be  considered  and  trade-offs  fo  be  made  in  the 
allocation  of  BM/C3  functions  to  the  different  levels 
within  the  hierarchy  and  to  different  nodes  within  each 
level  This  allocation  is  made  on  the  basis  of  consider¬ 
ations  of  cost,  reduced  sensitivity  to  countermeasures, 
and  uncertainties  in  the  way  that  the  encounter  will 
evolve.  A  flexible  architecture  is  essential  to  permit  a 
rational  maturation  through  the  inclusion  of  advanced 
subsystems  and  components. 

The  utilization  of  human  decision  makers  does  not 
alter  this  fundamental  view  of  BKVC3  Many  of  the 
8M/C3  functions  can  be  performed  either  by  a  human  or 
by  an  algorithmic  surrogate.  Clearly,  any  task  involving 
the  expeditious  processing  of  large  quantities  of  data  is 
of  necessity  outside  tho  human  purview  A  judicious 
aggregate  of  the  data.hovvever,  can  enable  a  human  to 
adroitly  those  critical  decisions  upon  which  the 

success  of  the  C3  system  depends  The  making  of 
changes  m  rules  of  engagement,  and  the  placement  of  the 
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system  on  alert  status  are  inherently  human  decisions 
that  must  o?  referred  to  the  CA  acting  in  a  direct 
management  role. 

To  better  understand  the  role  ot  BM/C3  a  broad 
description  is  useful.  An  epigrammatical  definition  is  that 
BM/C3  is  the  mapping  of  assets  into  capabilities.  This 
definition  emphasizes  the  fact  that  BM/C3  is  manifest  in 
the  system  architecture.  The  arguments  on  the  extent  of 
8M/C3  (does  it  comprise  everything  from  detectors  to 
debns.  or  is  it  confined  to  the  decision  making  environ¬ 
ment  of  the  CA)  can  then  be  seen  to  be  disputations 
about  the  domain  and  range  of  the  mapping,  rather  than 
about  the  fundamental  character  of  BM/C3. 

A  recent  workshop  was  held  to  explore  the  generic 
problems  encountered  in  civil  and  military  systems  which 
share  many  features  with  C3,  t  ** .  a  wide  geographical 
dispersal  of  activities,  high  communication  data  rates, 
uninterrupted  operation  for  extended  periods  of  time, 
etc  ft  Not  surprisingly,  civil  systems  do  share  a  range 
ot  challenges  with  military  BM/C3  systems,  but  the  range 
ot  permissible  reactions  to  these  challenges  is  much  less 
restncted  in  the  civilian  setting.  For  example,  the 
Amencan  Airlines  SABRE  system  has  a  bnttle 
architecture,  and  has  had  to  be  completely  shut  down  for 
bnef  periods  in  the  past.  It  has  evolved  over  the  years 
that  it  has  been  in  service,  but  this  evolution  has  tended 
to  be  based  upon  an  ad  hoc  response  to  new  needs  or 
unexpected  pred.caments.  Such  a  behavioral  characteristic 
is  unacceptable  in  the  context  of  the  most  military  C3 
systems.  Such  systems  will  remain  in  place  for  a  long 
penod.  A  purposefully  open  architecture  which  permits 
the  exploitation  of  advances  in  technology  in  sensors, 
communications,  and  processors  is  essential  if  the  system 
is  not  to  be  outmoded  long  before  its  design  lifetime. 

In  th9  presentations  made  at  the  workshop,  it  was 
observed  that  the  function  of  the  human  decision  maker 
Kept  reappeanng  m  vanous  contexts.  The  need  for  a 
human  presence  is  a  controversial  theme  in  discussions  of 
complex  systems,  both  military  an.1  civil  For  example, 
the  SABRE  system  is  under  the  direct  control  of  human 
d^patchers,  and  they  are  in  turn  supervised  by  a  ’super* 
dispatcher,  thus  creating  a  classical  hierarchical  manage¬ 
ment  structure  which  involve*  both  human  supervision  and 
atgonthmic  data  manipulation.  Similarly,  the  space  shuttle 
is  under  human  control  except  for  phases  of  ascent  and 
descent  In  NASA,  there  is  such  a  lack  of  trust  in  the 
ability  ol  computers  to  automatically  detect  oil  nominal 
operating  conditions,  that  computers  are  not  permitted  to 
turn  olf  other  computers.  This  can  only  bo  done  by  a 
person  with  the  responsibility  to  make  such  decisions. 

The  amb^ucus  role  of  the  human  manifested  itself 
again  in  the  NORAD  system.  The  principal  operating 
decisions  are  all  mado  by  humans  working  individually  or 
in  teams  Although  the  anecdotal  evidence  suggests  tnat 
some  ol  the  most  untoward  system  errors  have  been 
caused  by  misguided  human  irtcrvention,  there  is  no 
indication  ol  any  intent  to  reduce  the  human  presence  in 
the  future.  Instead,  the  proposals  from  both  NASA  and 
NORAD  would  .ncrease  the  human  presence  by  providing 
aids  that  would  enhance  his  effectiveness. 

Rigorous  reasons  for  this  fixation  on  giving  a 
human  an  on-line  role  are  frequently  difficult  to  articu¬ 
late.  One  might  infer  from  this  that  the  justification 
rests  upon  simple  anthropocentric  apologetics.  Indeed,  in 
many  discussions  of  complex  engineering  systems  the 
human  is  given  an  external  position.  This  extnnsic  view 
of  the  numan  has  led  some  in/estigators  to  relegate  the 
human  to  a  very  limited  position  in  one  of  the  majpr  C3 
systems  of  current  interest,  the  SD1  system  In  \%  for 


example,  it  is  suggested  in  a  discussion  of  the  $DS  that 
"the  tactical  system  will  have  to  operate  in  an  automated 
mode  simply  because  there  is  no  time  for  humans  to 
evaluate  the  huge  amounts  of  sensor  information  and  to 
arrive  at  supenor  weapon  engagement  in  the  short  time 
available."  - 

This  circumscribed  place  of  the  human  is  unsatisfac¬ 
tory  in  the  SD1  mission  and  in  other  C3  systems  as  well. 
There  has  been  a  consensus  from  the  beginning  that 
human  involvement  in  strategic  defense  decisions  is 
essential.  Admittedly,  there  are  significant  practical 
limits  on  the  role  that  can  be  played  by  humans.  The 
basic  issue  is  how  to  define  and  support  the  ro'e  of 
human  decision  making,  given  the  characteristics  and 
limitations  of  the  human  information  processing  capabili¬ 
ties.  If  meaningful  human  roles  are  to  be  established  in  a 
C3  system,  early  incorporation  of  human  factors  analysis 
is  indispensible. 

It  would  appear  that  any  precisely  defined  tasks 
given  to  a  human  could  be  performed  automatically  by  an 
algonthm  which  mimics  his  input-output  relationship.  In 
truth,  such  algonthmic  emulation  has  proven  to  be 
unsatisfactory  in  many  respects.  To  dearly  display  the 
unique  contribution  that  can  be  played  by  the  human,  a 
dear  understanding  of  his  areas  of  proficiency  is 
essential  To  provide  a  description  of  operator  behavior 
that  will  aid  m  defining  the  appropnate  human  role  in 
the  system  architecture,  it  is  essential  to  have  a 
behavioral  model  which  is  both  relatively  simple  and 
compatible  with  the  other  constituents  of  the  encounter. 

Analytical  models  of  human  response  have  a  long 
history,  w,th  careful  development  beginning  in  the  1940's 
More  recently,  as  the  tasks  originally  assigned  to  the 
human  have  come  to  overlap  more  with  those  of  the 
inanimate  elements  of  the  system,  humans  have  assumed 
more  complex  roles  and  increasingly  sophisticated  models 
have  been  required  In  ft  Johannsen  and  Rouse  propose 
a  framework  within  which  human  activities  can  be 
organized.  Their  hierarchical  perspective  is  amenable  to  a 
quantitative  computer-like  interpretation  of  human  func¬ 
tions.  but  at  tho  same  time  accounts  for  higher  level 
psychological  and  intellectual  activities  such  as  reflection 
and  planning.  At  the  lowest  level  of  activity,  the 
operator  behaves  in  an  essentially  automatic  way.  Indeed, 
in  highly  trained  operators,  proper  behaviors,  once 
learned,  become  reflexive  and  are  probably  performed  at 
the  level  of  the  cerebellum.  Johannsen  and  Rouse  point 
out  that  the  events  which  elicit  these  activities  tend  to 
occur  relatively  frequently  and  the  response  becomes 
instinctive.  . 

Rasumssen  ft  continued  the  trend  toward  a 
hierarchical  representation  of  human  control  and  decision 
making  behaviors  The  lowest  level  of  activity,  which 
Rasmussen  refers  to  as  "skill  based,"  occurs  when  the 
operator  is  quite  familiar  w.th  the  environment  in  which 
the  encounter  takes  place  Thus,  an  experienced  driver 
smoothly  and  automatically  adjusts  his  steenng  and 
acceleration  to  maintain  a  desired  position  on  the  road 
Even  the  abrupt  appearance  of  a  obstacle  in  the  path 
elicits  a  reflexive  response. 

When  concern  centers  on  such  composite  problems 
as  tracking  of  a  dynamic  target  m  clutter,  the  Optima! 
Control  Model  (COM)  of  Baron,  Weinman  and  Lev, son  has 
proven  quite  useful  (see  n  for  a  clear  description  of 
this  approach  along  with  numerous  references)  Norma 
five  descriptive  models  of  which  the  OCM  is  a  nolable 
example  have  as  their  rationale  the  fact  that  "the 
motivated  expert  decision  makers  strive  for  optimality  but 
are  constrained  from  achieving  it  by  inherent  human 
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perceptual  limitations  and  cognitive  biases.^  When 
appried  to  situations  in  which  actions  must  be  taken  in 
response  to  an  evolving  encounter,  the  COM  and  its  more 
recent  counterparts  have  been  phrased  within  the  Stimu¬ 
lus/Hypothesis/Options/Response  (SHOR)  paradigm  of 
human  decision  making  (see  {'}  and  a  recent  example  of 
its  application  [°J). 

In  this  paper,  the  relationsh'p  between  stimulus  and 
hypothesis  evaluation  is  explored  in  some  detail  v.VJun 
the  context  recognition  and  decision  maljfng  tasks  that 
are  encountered  in  C3  applications,  fn  [y]  Wohl,  etai. 
discuss  some  of  the  generic  issues  which  must  be 
addressed,  in  the  formulation  of  the  Stimulus  and 
Hypothesis  Evaluation  portion  of  the  operator  model. 
Paraphrasing  these  themes  in  a  prototypical  C3  task, 
reconnaissance  and  situation  evaluation,  it  is  evident  that 
the  decision  maker  may  encounter  a  vanety  of  different 
eventualities  as  he  monitors  a  dynamic  encounter.  There 
may  be  important  targets  of  various  types,  decoys  or 
target-like  objects  of  little  significance,  open  areas 
containing  nothing  of  interest,  etc.  The  operator 
classifies  these  alternatives  as  different  hypotheses,  and 
makes  a  choice  between  them  on  the  basis  of  his 
observations.  If  this  decision  is  made  contingent  on  the 
motion  patterns  of  the  observed  objects,  then  the 
situation  assessment  block  in  the  operator  model  becomes 
a  bank  of  Kalman  filters  tuned  to  the  various  dynamic 
hypotheses,  along  with  a  suitable  combination  of  the 
outputs  to  generate  the  conditional  likelihoods  of  the 
various  hypotheses  (this  »s  shown  in  Figure  3-10  of  (8)). 

The  application  which  motivated  this  work  involved 
a  study  of  a  system  built  around  the  Naval  Oceans 
Systems  Center  (NOSC)  teleoperated  vehicle  (TOV)  (see 
Figure  1.1),  In  this  system  a  remote  operator  is  able  to 
project  his  presence  into  a  hostile  environment  through 
the  intermediary  of  an  anthropomorphic  robot  (Figure 
1.2).  The  remote  operator  becomes  the  central  focus  in 
this  C3  architecture,  and  a  quantification  of  his  action 
pattern  is  essential  in  determ-ning  the  adequacy  of  the 
system.  In  this  application  as  in  most  C3  systems,  the 
hypotheses  which  define  the  evolution  of  the  encounter 
are  more  cfearfy  distinguished  by  their  panoramic 
features  than  they  are  by  their  local  motion  attributes 
For  example,  a  tank  (high  pnonty)  may  maneuver  in 
concert  with  other  vehicles  of  less  worth  The  remote 
operator  will  tend  to  identify  the  relevant  object  in  the 
field  of  view  on  the  basis  of  its  visual  signature  rather 


figure  1.1  The  NOSC  Teleoperated  Vehicle 


In  this  paper,  a  recognition  model  somewhat 
different  than  that  found  so  useful  in  the  indicated 
references  is  proposed  It  is  a  nonlinear  stochastic 
deferential  equation  which  evidences  the  uncertainty  that 
an  operator  faces  m  recognizing  the  relevant  features- in 
a  changing  scene  containing  a  high  level  of  visual 
clutter.  A  test  which  compares  the  response  of  the  model 
with  that  of  a  human  subject  suggests  that  'human”  in- 
deosiveness  is  well  captured  by  the  model. 


(V- 


figure  1.2  The  NOSC  Teleoperated  Robot 


2.  DECISION  MAKER  RESPONSE  MODELLING 

Since  reconnaissance  and  situation  evaluation  are 
important  roles  for  a  decision  maker  in  C3,  it  is  useful 
to  be  able  to  describe  an  operator’s  proficiency  in 
situation  recognition.  The  ability  to  infer  the  mode  of 
evolution  of  an  encounter  requires  both  a  panoramic  view 
and  an  ability  to  place  the  observations  within  a  well 
defined  pattern.  The  human  role  becomes  preeminent 
when  the  encounter  involves  sudden  and  unpredictable 
changes  in  the  operational  environment.  The  appearance 
of  a  target,  the  change  in  aspect  of  that  target  in  a 
manner  which  indicates  a  threat  to  decision  maker’s 
resources,  an  abrupt  change  in  the  terrain  over  which 
the  encounter  takes  place  are  all  possible  events  that  the 
decision  maker  may  experience  and  to  which  he  nust 
respond.  These  are  represented  by  a  distinct  set  of 
hypotheses  in  (8).  In  contrast  to  the  structure  developed 
in  that  reference,  the  currently  realized  hypothesis  may 
change  m  time;  i  e.,  the  target  may  become  obscured,  the 
terrain  may  change  again. 

Suppose  that  the  operative  hypothesis  is  denoted  by 
an  integer  valued  ’feature'  of  the  encounter  Indicate  the 
feature  process  by  {r,}  where  the  state  space  of  r,  is 

S«{1 . s);  ie.  there  are  s  different  possible  features  and 

r.  is  an  indicator  of  the  current  one.  A  specific  example 
of  this  structure  which  will  bo  discussed  in  more  detail 
io  the  sequel  can  be  desenbed  as  follows.  Suppose  that 
the  decision  maker  is  scanning  a  region  looking  for  high 
priority  targets.  Within  the  field  of  view  there  is  either 
(1)  a  target,  (2)  a  target  like  decoy  or  (3)  open  terrain 
The  appropnate  options  for  the  decision  maker  are 
contingent  on  the  realized  feature.  The  most  important 
event  is  that  a  target  is  within  the  operator’s  field  of 
view,  and  this  is  indicated  by  r{=1.  The  events  r.=2  or  3 
are  interpreted  m  an  analogous  fashion  and  $={1,2.3} 
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For  calculations,  it  is  expedient  to  introduce  an 
alternative  notation  for  the  feature- process  If  r*=i.  let 
$t=e,.  Then  -{<>.}  is  .a  unit  vector  which  indicates  the 
current  feature.  Assume  that  fy}  is  a  Markov  process 
with  transition  matrix  Q*(qrj 

P'(fti5-ilrtj|)  -  (!+q-,S*o(5i;  i.j  (2.1) 

1+4  t  q-|5.o(6) ;  i*j 
Then  {$.}  satisfies  a  stochastic  differential  equation 

dqt «  Q'qtd  t  +  dmt  (2.2) 

where  {m,}  is  a  purely  discontinuous  mart.ngale  with 
reject  to  the  natural  filtration. 

Equation  (2.2)  is  a  simple  model  of  the  feature 
process,  but  it  wa  suffice  for  the  introductory  study. 


Feature  variation  manifests  itself  in  panoramic  changes  in 
sensory  data,  and  the  operator  attempts  to  identify 
feature  changes  from  stimuli  provided*  by  the  suite  of 
sensors  available  to  him.  Such  observations  may  be  quite 
cluttered,  and  it  is-  difficult  to  eliminate  the  ambiguity 
which  naturally  surrounds  the  interpretation  of  the  scene 
To  be  specific,  suppose  that  each  feature  has  a  d-stmet 
sensory  signature.  In  keeping  with  the  referenced 
analytical  models  cl  human  response,  .this  signature  has 
little  to  do  with  the  actual  physiological  processes  in  the 
human,  but  is  rather  a  pseudo-stimulus  used  as  the  input 
in  the  normativo-descriptivo  model  of  operator  response, 
let  the  signature  of  feature  i  be  given  by  the  real 
number  h  The  operator  receives  a  cluttered  measur¬ 
ement.  {y.}.  of  the  current  feature.  This  measurement 
will  bo  represented  by  the  stochastic  differential  equation 

dy,  -  h'fydt  +  dnt  (2  3) 

where  h  is  the  indicated  s-vector.  and  {n{)  is  Brownian 
motion  '  . 

(dnt)2»dt  (2.4) 

Equation  (2  3)  relates  the  operator’s  observation  to  a 
signal  h'fy  generated  by  the  feature.  This  modal  indica¬ 
tion  is  contaminated  by  an  exogenous  wide  band  clutter. 
On  the  basis  of  {y.}.  the  decision  maker  infers  the 
likelihood  of  the  vanous  possible  features.  This  structure 
fits  well  with  the  SHOR  paradigm,  but  since  the  motions 
give  little  information,  the  structure  of  the  hypothesis 
estimator  is  significantly  different. 

let  {Yt}  be  the  natural  filtration  associated  with 
{y.},  and  denote  the  conditional  expectation  with  respect 
to  {Y|>  by  *A\  Then  the  operator’s  conception  of  the 
relative  probabilities -of  different  features  is  given  by  the 
•information  state’  {$>.}  A 

(2.5) 

The  equations  of  evolution  of  are  given  in  (,WJ. 
and  they  represent  the  first  portion  of  the  Decision 
Directed  Model  (DDM)  used  to  describe  the  response  of  a 
remote  operator  engaaed  in  directing  the  TOV  in  a 
multitask  enviroRment  i‘T)  A  A 

d&  a  G^dt  +  (crag  h  •  ah  l&  dv.  (2.6) 
where  (vt)  is  the  innovations  process 

dv.  -  dy.  -  h'p.dt  (2,7) 

Equation  (2  6)  is  a  nonlinear  stochastic  differential 
equation.  It  quantifies  the  way  in  which  the  information 
state  changes  as  the  operator  processes  new  observations. 
The  components  of  (a)  are  the  conditional  likelihoods  of 
the  various  hypotheses  concerning  the  encounter.  It  is  on 
the  basis  of  these  quantities  that  strategy  is  formulated 
and  resources  allocated. 

Equation  (2.6)  is  an  Ito  equation,  and  considerable 
care  must  be  exercised  in  its  interpretation  In  Section 
3  the  flexibility  of  tho  operator  model  is  explored 
Different  •personalities*  are  created  as  model  oarameters 


are  changed,  fhe  effect  that  the  rate  of  change  in  the 
encounter,  the  feature  discemibility,  and  the  level  of 
exogenous  clutter  have  on  hypothesis  evaluation  are 
exhibited  in  die  sample  behavior  of  the  DDM. 

In  Section  4,  the  measured  response  characteristics 
of  an  operator  is  compared  with  die  simulated  behavior 
of  the  model  A  time  varying  scene  was  presented  to  a 
subject  who  was  asked  to  indicate  a  level  of  confidence 
that  a. target  (a  tank)  was  within  the  field  of  view.  This 
response  along  with  the  actual  locations  of  targets, 
decoys  and  open  regions  was  recorded  A  sample 
function  of  the  information  state  {$.}  generated  from 
(2.6)  for  the  same  feature  sequence  was  also  recorded 
For  different  sample  functions  of  the  observation  noise, 
the  operator's  perception  ol  the  scenario  features  will 
change  As  a  consequence,  {&}  is  a  random  process  even 
for  a  predetermined  scenario  (fy)  Thus  one  would  not 
expect  the  model  to  reproduce  a  specific  human  response 
any  more  than  a  human  would  be  unaffected  by  the 
realization  of  the  exogenous  visual  clutter,  or  indeed  that 
two  humans  would  respond  identically  to  the  same 
stimuli  With  this  caveat,  (2  6)  does  indicate  an  appro 
priate  indecasiveness  in  identifying  feature  changes. 


3.  THE  PLIANCY  OF  THE  DDM 
The  model  given  in  (2  6)  is  intended  to  represent 
the  behavior  of  a  decision  maker  in  a  variety  of 
different  situations,  and  to  do  this  it  must  posses  the 
'human"  quality  of  formability.  Thus,  when  the  scenano 
is  slowly  varying  and  tho  clutter  level  is  low.  tho  DDM 
should  respond  surely  and  expeditiously.  Alternatively, 
when  the  features  which  distinguish  different  hypotheses 
lack  contrast,  and  when  there  is  considerable  clutter,  the 
DDM  may  be  confused  and  tepid  in  its  /esponse. 

The  operator  model  has  two  multidimensional 
parameters,  and  each  is  related  to  a  different  aspect  of 
the  encounter.  The  rate  at  which  the  underlying  features 
of  the  scenario  change  is  quantified  by  Q  If  hypothesis 
i  has  a  short  mean  lifetime,  then  q.  is  large.  If  there 
are  targets  of  different  classes  in  cf'ise  proximity,  then 
tho  transition  rates  a-,  would  be  large  for  appropriate  i,j 
and  so  on  The  correct  specification  of  Q  is  dependent 
upon  the  dynamic  structure  of  the  encounter,  and  it 
parameterizes  tho  dnft  terjp  in  (2.6);/{.e. 

E{dfcJYt)«Qyt  (3.1) 

in  the  same  way  that  Q  quantifies  the  encounter 
dynamics,  h  quantifies  both  the  sensory  acuity  and  the 
clutter.  Equation  (23)  is  phrased  in  terms  of  a  norma¬ 
lized  observation  signal  (y.)  with  the  noise  term  (n.) 
having  unit  intensity  (sae  (2.4)).  The  scale  of  h  ,s  then 
contingent  on  the  actual  intensity  of  the  wide  band 
clutter  in  tho  sense  that  if  tho  exogenous  disturbance  is 
increased  by  a  power  factor  of  four,  this  same  effect  can 
be  induced  into  (2  3)  by  mapping  h«>h/2. 

To  study  the  flexibility  of  the  DDM  it  is  expedient 
to  generalize  (2.3)-(2  4)  slightly,  oven  though  this  means 
over  parameterizing  the  system.  Thus,  instead  ol  (2.4), 
suppose  that 

(dntr  « r  dt  (3  2) 

Then  r  is  a  direct  indicator  of  tho  intensity  of  the 
observation  noise  Although  redundant,  (3  2)  permits  the 
effects  of  varying  clutter  levels  to  be  separated  from 
variations  in  the  distinguishable  of  the  vanous  modal 
hypotheses  Tho  equation  for  {fy}  must  be  modified  in  an 
obvious  way,  and  this  has  been  done  in  what  follows  It 
was  further  noted  that  the  numerical  stability  of  (2  6) 
was  inadequate  for  the  simulation  task  A  change  of 


^Denote  the  unit  vector  in  the  i’th  direction  in  Rs  bye,. 


i 

f 


172 


variables  transforms  (2  6)  into  the'Zakai  formjvhich  is  a 
linear  stochastic  differentia!, equation  for-an'unnormalized 
version  of  {^},  This-- equation  proved  to  be  superior  in 
this  application,  and, the  solutions  were  renormalized  for 
presentation  here. 

As  pointed  out  above,  there  are.,  throe  basic 
constituents  of  an  encounter,  each  with  a  natural 
parameterization-  in  the  ODM:  encounter  dynamics  (Q). 
exogenous  disturbance  (r).  and  operator ,  acuity  (h).  To 
illustrate  the  behavior  of  the  model  as  a  function  of  the 
observation  noise,  consider  a  situation  in  which  there  are 
only  two  hypotheses  (S*{1,2})  and  h«{l,*t).  Hence  the 
observation  structure  is 

dy.-  ldt  + noise  if  r,*1 

-1dt  +  noise  if  r.*2  (3  3) 

The  signature  of  hypothesis  1  is  the  constant  V  and  if 
observed  long  enough  the  operator  would  deduce  the 
correct  response  by  averaging;  i9.,  The  operator 

response  must,-  however,  be  expeditious  and  further,  the 
modal  variable  may  change  anyway.  Suppose  that  the 
scenariodynamics  are  giverLby  - 

Q*|.O.r  0.1|  (3.4) 

[0.9  .0  9) 

The  mean  sojourn  in  mode  1  is  to  sec  (1/0.1)  while  the 
mean  sojourn  in  mode  2  is  1.1  sec  (1/0  9).  Equation  (3.4) 
implies  that  the  system  is  reluctant  to  leave  Oj,  and  the 
operator  knows  it. 

The  decision  maker's  response  is  clearly  dependent 
upon  the  clutter,.  The  sharp  edges  of  modal,  transitions 
are  masked  by  noise.  The  operator  realizes  that  these 
changes  a>e  inevitable,  but  the  ODM  may  have  difficulty 
discerning  actual  transitions  from  anomalous  variation  in 
the  observation  noise.  Figure  3.1  shows  a  sample  of.  the 
output  of  the  ODM  when  the  scenario  has  a  single  jump 
toe«, 

■  o.  when  teA  (3  5) 

e2  when  teAc 

where  A*(o.5,1.0).  This  intervaLis  indicated  in  Figure  3.1 
along  with  the  ODM  response.  The  noise  level  is  small 
(r»0.01),  and  the  response  is  unequivocal.  The  delay  in 
identifying  an  eo~>ej  transition  Is  negligible.  There  are 
no  sign.ficant  false  alarms,  but  the  false  indication  of 
change  are  more  evident  during  sojourns  in  e n-  This  is  a 
natural  consequence  of  fact  that  the  mean  lifetime  in  e2 
will  be  far  shorter  than  that  in  e1 . 

As  the  noise  is  increased  (r»0.1),  hypotheses 
evaluation  becomes  more  challenging  (Figure  3  2).  The 
delay  in  detecting  a  transition  is  now  on  the  order  of  0.1 
sec.  The  volatility  in  mode  2  increases  significantly.  If 
the  amplitude  of  the  noise  is  increased  still  further  (see 
Figure  3.3),  the  hypothesis  evaluation  block  no  longer 
effectively  responds  to  the  stimuli  at  A  all,  and  tends 
toward  the  stationary  distribution  for  {$.}  which  would 
be  obtained  in  the  absence  of  observations. 


Figures  3.1  *3.3  give  a  quantitative  indication  of  how 
an  increase  in  exogenous  clutter  manifests  itself  in 
increased  Indecisiveness  in  the  ODM.  The  ODM  moves  in 
a  continuous  fashion  from  assured  response  to  capricious¬ 
ness  as  r  increases.  These  figures  also  indicate  that  the 
volatility  during  the  midst  of  a  sojourn  time  is  a  direct 
function  of  the  expected  lifetime  of  the  associated 
feature  in  all  but  the  highest  noise  case. 


«.  »  Time 

Figure  3.1  Sample  function  of  when  the  noise 
intensity  is  low  (  r*  01  ) 


*  i  Time  > 

Figure  3.2  Sample  function  of  when  the  noise 


intensity  is  moderate  (  r  a  0,1  ) 


Time 

Figure  3  3  Sample  function  of  when  the  noise 
intensity  is  high  (  r  a  10) 


3  A  plot  of  (dt)t  is  shown  as  the  solid  rectangle,  and  (^)t  is  shown  dotted 

4  A  natural  index  for  scalina  clutter  is  the  ratio  of  the  size  of  the  modal  jump  over  the  Vr.  In  this  example 
this  index  would  be  2/0.1  *20. 
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To  study  the  way  in  which  encounter  dynamics 
influence  the  personality  of  the  DDM,  consider  Figures 
3  2,  3  4,  and  3  5.  These  figures  show  the  response-^  the 
DDM  to  changes nn  Q  with  a  fixed  value  of  r  (r*0.1)  and 
h  (h  =(1.-1))  in  addition  to  the  G  matrix  oven  in  (3.4\. 
two  other  matrices  were  studied 


considered,- ie..  the  dimension  of  <>t  must  be  greater  than 
two.  With  two  hypotheses,  changes  in  h  can  be  mimicked 
by  changes  in  r. 

To  investigate  separability  of  the  hypotheses,  the 
feature  state  was  three  dimensional  and  the  see  nano 
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(3.7) 


The  beha/ior  when  ty*ej  does  not  'ary  radically  with  the 
changes  in  Q.  fn  each  case  e«  is  the  long  fived  mode, 
and  the  detection  of  is  made  exped.tiously.  There  is 
an  increase  in  uncertainty  in  detecting  e2  when  the  time 
scale  of  the  problem  is  changed  (compare  Figs.  3  2  witn 
3.5  for  a  time  scale  variat'on  of  five).  A  short  lived 
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Figure  5  4*  Sample  function  of  Vl  when  the  ‘lifetime 
in  mode  1  i$  shorter  (ti  »2.0  ,  T2»l«l ) 


Figure  3.5  Simple  function  of  when  the  lifetime 
in  modo  2  is  shorter  (t|  «20  ,  ^2  *0.2) 

The  behavior  of  the  DDM  as  image  discermbitity 
changes  is  of  fundamental  interest.  Expensive  operator 
enhancements  are  justified  by  an  improved  ability  to 
differentiate  hypotheses  that  lack  definition  in  tne  image. 
Such  sensor-processor  modifications  directly  influence  h, 
and  through  this  intermediary  they  are  reflected  in  the 
response  of  the  model.  To  study  hypothesis  distinguish 
ability  as  distinct  from  simple  changes  in  exogenous 
clutter,  at  least  three  distinct  hypotheses  must  be 

5  S*{l,2,3}andet  isinR3. 

®  fn  Figs.  3  6-3.9,  is  shown  solid  and  bg  is  shown  dotted. 


(3  8) 

_  .25  *0  5J 

The  noise  had  a  constant  fn  tensity  (r«001).  Operator 
acuity  is  delineated  by  h.  Figures  3.6  through  3  8  show 
the  decision  maker’s  response  for  different  h-vectors 

H  m  (-1 .0,0.0, 1 .0)  in  Fig.  3  6  /3  9) 

(-1 .0, -0.5.1  ;0)  in  Fig.  3.7 
(*1.0,*0.9,1.0)  in  Fig.  3  8 

in  all  ortho  cases  indicated  in  (3  9),  the  features 
which  define  hypotheses  8«  and  e3  are  clearly  marked 
(hj«*i.o  and  h3«1 0).  Based  upon  the  results  presented  in 
Fig.  3.1,  these  two  alternatives  are  dearly  distinguishable 
in  clutter  of  the  intensity  indicated.  It  is  the'  behavior  of 
the  DDM  as  a  function  of  the  signature  of  the  second 
hypothesis  e2  (h2)  that  is  of- most  concern  here.  In  Fig. 
3.6,  each  oT  the  hvpotheses  has  an  easily  perceived 
marker.  The  scenario  Is  that  given  by  (3.4)  with  the 
renumbering  of  hypotheses  $2**>e3.  yvhen  an  eo->et 
transition  takes  place,  both  and  increase.  The 
mean  drift  rate  in  (2.3)  has  changed  from  -1.0  to  1.0. 
The  hypotheses  evaluation  block  quickly  recognizes  that 
a  change  fn  drift  has  occurred  (in  approximately  0.25 
sec.),  but  can’t  tell  which  of  the  alternatives  Is  the 
correct  one  since  both  are  identified  with  an  increased 
drift.  It  takes  another  quarter  of  a  second  for  the 
hypothesis  e2  to  be  discarded.  Aftei  identifying  e«,  the 
quiescent  interval  is  relatively  uneventful. 

Tho  e )->»«  transition  at  1.0  sec.  is  interesting 
because  tho  DDM  responds  so  expeditiously.  This  would 
not  be  expected  on  tho  basis  of  (3,7)  since  e«  is  not  a 
particularly  short  lived  state.  The  prompt  response  is  due 
primarily  to  chance  fluctuation  in  the  exogenous  noise. 
The  sample  function  of  (n.)  is  such  that  has  notably 
descended  at  U0.96.  This  docroaso  is  reflected  In  a 
corresponding  increase  in  the  likelihood  that  e3  is  the 
operative  hypothesis.  Even  though  this  change  was 
incorrect  because  the  ostensible  transition  had  not  yet 
occurred,  tho  DDM  began  to  move  in  the  direction  of 
hypothesis  3,  and  was  thus  well  situated  for  the  actual 
event.  Under  these  fortuitous  circumstances,  the  DDM 
appears  to  bo  omniscient. 

In  Figure  3.7,  the  distinguishable  of  e«  and  e2 
has  been  reduced.  Tho  same  broad  outlines  of  tho  DDM 
response  again  manifest  themselves,  with  the  confusion 
surrounding  the  e3-->e«  transition  increasing  s»gnifi« 
canity.  It  now  ta*os  0  3  sec.  for  the  DDM  to  moderate. 
Tho  same  sample  function  for  (nt)  was  used  In  all  of 
these  tests.  Hence,  the  anomatous  behavior  near  to  1,0 
reoccurs  througnout  these  simulations. 

As  tho  values  of  hj  and  hp  become  closer,  the 
distinguishable  of  and  ep  decreases  with  easily 
predicted  consequences  Figure  3  8  shows  the  change  in 
the  DDM  brought  about  by  this  narrowing  in  the 
differentiation  of  tho  hypotheses.  When  jh«  h2Mr  as  it 
is  in  Fig.  3.8,  the  probability  ot  correct  detection  of  the 
transition  to  e^  becomes  too  low  to  bo  acceptable  even 
when  the  interval  ovei  which  observation  takes  place  is 
relatively  long  Collaterally,  the  identification  of  a 
transition  to  e *  becomes  even  faster  when  the  DDM  has 
not  dearly  identified  the  earlier  transition. 
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In  this  section  a  simple  parametric  study  of  the 
hypothesis  evaluation  block  of  the  DDM-'has  been 
presented.  An  indication  of  the  behavioral  flexibility  of 
the  DDM  is  apparent.  The  next  section  gives  an  indica¬ 
tion  of  how  this  flexibility  can  be  used  to  describe  the 
response  of  a  test  subject. 


4  OPERATOR  RESPONSE  CHARACTERISTICS 

As  slated  earlier,  the  adequacy  of  the  normative- 
descriptwe  model  of- a  human  decision  maker  must  be 
established  empirically.  The  previous  section  has  indicated 
in  some  detail  the  performance  attributes  of.  the  input- 
output  model  (23H2.6).  In  the  SHOR  paradigm  the 
decision  maker  responds  to  new- data  by  modifying  the 
likelihoods  of  the  various  hypotheses  which  delineate  the 
encounter.  The  DDM  provides  an  aigonthmic  description 
of  the  precise  way  in  which  this  is  done. 

The  hypothesis-  evaluation  portion  of  the  DDM  is 
difficult  to  venfy  because  this  appraisal  is  an  internal 
activity  of  the  decision  maker,  and  is  normally  reflected 
only  indirectly  by  his  actions.  Nevertheless,  to  better 
understand  the  limitations  ol  the  DDM,  a  scene  recogni¬ 
tion  task  of  the  type  to  be  encountered  in  the  TOV 
application  was  given  to  a  representative  operator.  The 
experimental  facilities  were  rudimentary,  and  the 
operational  environment  of  the  TOV  operator  could, not 
bo  reproduced.  The  experimental  protocol  can  be  des¬ 
cribed  as  follows.  A  set  of  photographs  wore  taken  at 
the  Camp  Pendleton  Marine  Base  in  California.  They  were 
appropriately  juxtaposed  to  from  a  panoramic  view  of  the 
terrain  as  seen  from  a  fixed  location.  The  scene  con¬ 
sisted  of  rather  open  terrain  containing  scrub  brush 
along  with  a  scattering  ol  discrete  objects  at  vanous 
fhhgas.  The  actual  object  set  contained  jeeps.  Land 
Vehicle,  Tracked  (LVTs),  out  buildings,  tanks,  and  various 
natural  structures  similar  in  appearance  to  the  foregoing. 
The  vehicles  had  different  aspect  angles  with  respect  to 
the  viewer  and  had  a  variety  of  visual  appearances. 

.  ,  To  tos*  trio  dynamic  response  of  a  decision  maker,  a 
single  category  of  objects  was  made  that  of  primary 
concern.  In  the  exponment,  the  operator  was  asked  to 
identify  the  presence  of  a  tank  in  a  changing  scene,  and 
to  consider  all  other  events  as  being  inconsequential,  At 
one  level  then  the  operator  could  be  viewed  as  companng 
a  simple  hypothesis  (tank  present)  with  a  single  alterna¬ 
tive  (tank  absent).  Actually  both  hypotheses  are  com¬ 
posite,  with  the  latter  containing  many  well  defined 
subsidiary  hypotheses.  Hence,  this  simple  structure  with 
*•{1.2)  rs  not  sufficiently  rich  to  capture  the  scenario  as 
Viio  docrsion  makor  porceives  it. 

.  There  was  considerable  visual  ambiguity  since  other 
object  classes  share  many  features  with  a  tank  when 
viewed  at  a  distance.  Indeed,  anything  with  an  angular 
shape  could  bo  confused  with  the  primary  target  class  at 
f.rst  glance,  it  was  necessary,  therefore,  to  introduce  a 
third  operative  hypothesis  (secondary  object  present)  to 
account  for  the  decoys.  Surprisingly,  given  the  intricacy 
of  the  scene,  further  additions  to  S  were  not  found  to 
be  necessary.  It  should  be  noted  that  the  ODM  permits 
augmentation  to  the  modal  sot  in  a  direct  manner  if  the 
actions  of  the  decision  maker  warrant  such  an  increase 
in  dimension. 

To  inject  scene  dynamics  into  what  is  fundamentally 
a  static  encounter,  a  movable  camera  was  made  to  pan  a 
horizontal  slice  in  the  picture  at  a  fixed  angular  rate  A 
local  image  was  displayed  on  a  monitor  for  the  operator 
to  view.  Thus,  static  objects  appeared  in  the  monitor  at 
random  times  with  random  clarity  but  with  duration  fixed 
by  the  linear  dimension.  The  scan  rate  thus  determined 
the  turn  scale  of  changes  in  the  events  to  which  the 
operator  responded.  A  frequent  modal  change  is  achieved 
at  a  high  scan  rate  At  low  scan  rates,  the  operator  has 
more  tune  to  contemplate  and  distinguish  the  relevant 
objects  from  clutter. 
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Tse  subject  was  gwa  a  Pf  $6*  was  cce  degree 
eS  feetore.  toad  was  2tfcsd  to  fasten  toe  rad  to 
crfrw»  ter  teres  d  cctedgce  toe  a  tsgss  «s 
ccreaced  in  toe  teags  dispiteysd  ca  toe  ccdSx  76s 
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sciat  pcSfcn  riS  (be  bns  votege  reyessdag 
cehrSy  fta:  iters  was  act  a  targe:  «teua  * s  M  d 
wear,  sad  reacrasa  vcbage  reprssictoig  ctrzstj  t&  a 
tzrA  aras  displayed  ea  toe  eerahor.  An  fcsscuedate 
pcsatcn  was  asreouatewheo  toe  scene  was  ETtogtccs. 


firprs  4.1  dspiays  a  sample  tadSoo  o!  toe 
at<a7s  ctspbnss-  As  ceScnej  eater.  Se  eitn 
seqoexe  can  be  viewed  as  eoasistoig  cf'aa  atereadon 
besreen  <£sS»  medal  hypaotoeses.  The,  acted  tee 
castes  dbting  wfcch  a  te—et  s  on  toe  mooter  are 
ntera-n  toe  {gcre  by  toe  dc5ed  reetengles.  Let  toe 
euea  era  a  te*  is  berig  cbsentd  by  fc»1.  Decoys  are 
sretedy  dsSogusbed  by  tee  dasted  reciaogSss-wift  toe 
cnees? enSag  even:  dented  by  r.*Z  The  reaaridor  of 
toe  rterval  eseteted  o!  open  teds  and  unstomtored 
ctete.  and  Css  is  dented  fy/t*3- 

Frore  a  cursory  review  cl  tie  pteure.  tie  tread 
cudnes  d  tie  dectexi  mater's  behavioral  peertertes 
shown  o  Figure  4.1  are  easFy  pretSoted.  During  sojourns 
n  regens  o!  rteSveSy  epen  terrain,  tisre  is  He 
operator  cordusen.  The  output  of  tie  joy  sScfc  shoo'd  be 
essenfiaSy  aero  during  such  phases. 

As  tie  peters  was  scanned,  there  were  regions  in 
wench  coated  and  rSsSogtehabie  objects  were  en¬ 
countered.  aid  the  subject  attempted  to  identoy  there. 
The  scanning  teecdon  ts  such  that  an  object  enters  the 
subjects  visual  ted  frere  the  right  of  the  screen.  When 
an  object  appears  on  the  monitor,  the  operator  w3 
eiSa Sy  be  uncertain  as  to  the  obpet  dassfeation.  If 
the  object  has  a  cfisteict.  angular  shape  that  separates  it 
tore  the  more  rSSusc  background,  the  operator  wS 
reaSze  that  a  modal  change  has  taJtcn  place  but  may 
delay  making  a  confident  SdenSKcaSon.  The  subject 
rnrScates  this  contusion  by  moving  the  rod  to  an  inter- 
medate  position  which  is  roughly  proportional  to  the 
probably  that  the  reject  is  in  the  primary  category.  In 
an  object  sparse  region,  the  operator  v.fl  concentrate  on 
an  unusual  shape  as  it  moves  across  the  screen,  and 
make  more 'definitive  judgments  on  the  proper  dassifica 
•Jon,  Some  ol  the  things  in  the  scene  are  quite  decep¬ 
tive.  Careful  study  is  required  to  distinguish  these  decoys 
from  targets.  The  presence  ol  these  "near  targets' 
produces  significant  faise  alarms- _ 


to  z asset  rogcro  to  toe  pcOure.  a. group  ci  stelae 
ctjecos  tea  is  cfcie  prteteby.  VitSe  toere  s  cents’  a 
steaiaa  a  witch  erss  frzo  eras  cbetub  is  wteia  doe 
SSB  c!  vs*  d  tee  camera.  «6sa  ebjetes  oat  is  rapid 
succasteoa.  the  cfcs ernes  cerer  tas  fee  Sue  to  focus 
dsfy  ca  toe  object  ad  fcani  Instead,  toe  dsdsos 
mater  ceccses  preoccupied  wte  toe  seqoecee  tenTL  and 
lapses  css  as  cesetded  state  is  wfticb  toe  ctjccos  are 
ecs  eteady  rSfessSassd. 

In  Figure  4.1  toe  eperator  response  is  shews  ateig 
wte  toe  reports  of  target  and  rteccys.  The  operator 
response  is  related  to  {OjV  in  toe  neteden  ci  (2j5).  The 
artoepa ted  peediarifies  of  toe  (tedeen  Coates's  response 
dzatorste  appear  in  toe  sampte  tardea  Open  areas 
are  dearly  recogriaed  as  so*  tor  toe  most  part. 
aSioosh  sores  nasaral  cbecto  do  cause  esetosta  at 
certain  IghJ  angles.  VAaS  is  mure  cterestog  is  the 
response  ct  toe  operates  to  tenets  and  ptdatoe  targets 
FreSrdabfy.  the  operator  has  modi  more  sSSouby  n 
dSerenSadrg  toe  hypotoeses  when  toe  objects  appear 
more  treqrtentfy  than  when  they  are  sopa-ated  by 
emended  intervals. 

A  smuteted  response  cl  toe  hypothesis  evaba&n 
pardon  of  toe  DOM  is  shown  in  Figure  4.2  The  most 
nctabie  dderence  between  toe  stetdated  and  too  actual 
response  is  that  toe  emulated  sampSe  funefien  is  loca2y 
much  more  vote Se  than  is  toe  firman.  This  is  not 
surprising.  Equation  (2.6)  is  an  <to  equation,  and  solu¬ 
tions  to  such  equations  are  qjste  irregular  on  any  short 
time  scate.  The  decision  mater’s  evaluation  cl  a  situation 
is  probably  not  Ready  so  changeable,  and  even  i  it 
were,  toe  physteo~al  lags  which  occur  in  translating  a 
mental  view  of  a  scene  into  a  shaft  positron  would 
smooth  the  votaSSy  and  preclude  its  measurement 
Furthennore.  a  pcineng  system  under  the  tSrecfion  of 
the  operator  has  a  low  pass  character  as  vrel  Hence,  the 
local  volaaty  is  not  an  important  issue  in  operator 
mode Eng. 

With  this  caveat  the  respxmse  ol  the  DDM  has  the 
■human”  oecufiairfics  that  were  predicted  and  measured 
This  smSantp  ot  response  manifests  itself  ctcarly  m  the 
object  rich  portion  of  the  scan.  The  rapid  modal 
variation  ts  represented  in  the  DDM  by  a  Q  matrix  with 
high  modal  transition  rates.  As  the  modal  variation 
becomes  more  frequent  the  response  of  the  DDM 
becomes  more  indecisive. 
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Figure  4.2  Sample  function  for  the  test  scenario 
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A  toms i  6taia  frsqcxsS/  pfeys  a  eenssi 

rote  fa  a  C3  asdajugteg.  Ifator tctozsy  c  fa  <25odt  to 
&Ssezs  hfa  chanytorrtfcs  fa  as  anavtcaly  canyhS? 
career.  He  is  capade  d  S3  cany  dfiew  txbzfca 
£2 1  <  fa  tad  to  optoe  hfa  ps ssca  fa  so  aosiad 
toa.  Tfe  paper  co fades  cos  aspect  d  hfa  teggase 
dsate&s  aad  fadedes  toe  capabSy  and  vtr- 
saSty  ct  toe  hypcftesfa  evatafeo  pcctcn  d  toe  00U 
Some  iey  human  psafeies  hare  been  observed  fa 
ess  cSfag  toe  model  The  fadedswecess  and  cmser- 
eScy  coder  wfuto  toe  decision  maker  cast  perfcrm  hfa 
assigned  tasks  marvfcss  6SCJ  fa  toe  sfasdaSon  study.  As 
has  bean  pefctod  etc.  toe  peeper  response  d  toe  DOM  fa 
depended  ca  toe  correct  seecScn  d  toe  medef  para¬ 
meters.  The  srnuCadons  ndcato  toat  consvderabfe 
fceedsa  cess  fa  shaping  toe  respense  ctoaraclerisfcs. 
fcdecfaacness  fa  a  rapfcJy  changing  scenario  can  be 
prcdnMd  bjr’facreasfag  toe  site  d  toe  elements  fa  toe  Q 
maohe.  I  ie  e  cere  hjpetoeses  are  dSruS  to 
dKerendato.  toe  associated  elements  d  toe  h  vector 
should  be  cade  dose. 

SiuaSon  evahrarion  fa  only  one  cenponent  cl  toe 
operator's  fcneten  fa  toe  C3  system  The  complete  DOM 
reqotes  a  characterization  cf  toe  Op6or.srResponse 
portion  o!  toe  model.  This  Koch  transfetos  toe  vector  cf 
EkeShoods  provided  by  toe  hypetoesfa  evafcsdc o  block 
into  an  appropriato  acton.  This  Modi  was  studied  fa 
{11J.  but  was  incompletely  deSneatod.  Tics  fa  a  topic  of 
can-entstody. 
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ASSZS&g 

Good  information  structures  imply  a 
proper  framework  for  analysis.  In  the 
classical  method  of  analysis  one  must 
elicit  numerical  inputs  of  probability 
and  utility  with  a  high  degree  of 
precision.  This  is  often  perceived  as  a 
disadvantage.  Through  approximate 
reasoning  the  need  for  precise  inputs 
say  be  relaxed.  The  deduction  of 
imprecise,  yet  meaningful,  conclusions 
can  be  made  from  a  set  of  imprecise 
premises.  Such  reasoning  is  neither 
very  exact  nor  very  inexact.  It  can; 
however,  play  a  basic  role  in  decision 
making  by  providing  a  way  of  dealing 
with  complex  problems.  This  role  is 
examined  in  a  simple  example  where  one 
of  two  possible  decisions  is  to  be  cade. 

SCENARIO 

Consider  a  Naval  force  preparing  for 
an  air  strike  against  a  land  target, 
which  is  a  hostile  cruise  missile  site 
blocking  a  friendly  strategic  sea  lane. 
The  site  is  embedded  within  a  U-shaped 
mountain  range.  The  elevation  and 
ruggedness  of  the  mountains  provide 
the  missile  site  a  natural  protective 
barrier  on  three  sides.  The  mountains 
open  to  a  rugged,  arid  plain  strewn  with 
large  boulders  and  rock  formations. 

Defenses  located  on  the  plain  are 
estimated  as  moderate  to  heavy.  At 
least  5  well-placed  surface-to-air 
missile  sites  are  known  to  exist.  There 
may"  be  more.  The  defenses  located  in 
the  mountains  arc  estimated,  with  much 
uncertainty,  to  be  light,  i.e.,  they 
consist  of  possibly  2  missile  sites. 

The  mission  planners  decide  that  for 
the  mission  to  be  successful  75%  or  more 
of  the  target  must  destroyed.  The 
strike  will  involve  33  attack  aircraft, 
each  equipped  with  4  air-to-surface 
missiles.  By  approaching  the  target 
from  over  the  mountains  there  is  a  good 
chance  of  avoiding  defenses  located  on 
the  plain  and  encountering  only  the 
light  defenses  in*  the  mountains;  losses 


could  be  light.  However,  there  is 
uncertainty  about  the  success  of  the 
mission.  .The  target  will  be  obscured 
for  all  possible  attack  angles;  direct 
bits  will  be  difficult  to  achieve.'  By 
approaching  the  target  via  the  plain  or 
range  opening  there  is  a  good  chance  of 
encountering  moderate  to  heavy  defenses. 
Aircraft  losses  could  be  moderate  to 
heavy.  The  pro_bability  of  destroying 
the  target  is  better  since  the  attack 
angles  pose  a  lesser  visibility  problem 
to  the  pilots.  The  question  to  be 
resolved  by  the  mission  planners  is, 
WHICH  ROUTS  OFFERS  THE  BEST  CHANCE  OF 
MISSION  SUCCESS  AND  FEWEST  LOSSES? 

FUZZY_ DECISION  ANALYSIS 

We  sake  use  of  3  propositions  from 
the  calculus  of  fuzzy  sets.  They  are: 

(a)  The  degree  to  which  element  a 
belongs  to  set  A  and  element  b  belongs 
to  set  B  is  equal  to  the  smaller  of  the 
individual  degrees  of  membership. 

uAflS'a'b)**DinIuAta)  'uB(b)J  (1) 

(b)  The  degree  to  which  element  a 
belongs  to  set  A  or  element  b  belongs  to 
set  B  is  equal  to  the  larger  of  the 
individual  degrees. of  membership. 

'JAyB(a,b)>DaxluA(a,,UB(bJ1 

(c)  The  degree  to  which  a  belongs  to 
not  A  is  1  minus  the  degree  to  which  a 
belongs  to  A. 

u_A(a)-l-uA(a)  (3) 

The  above  relations  are  used  to 
deduce  the  fuzziness  on  an  output  given 
the  fuzziness  on  an  input.  In  general, 
if  u(y)  is  the  degree  to  which  y  belongs 
to  the  set  of  possible  outputs  and  u(x.) 
is  the  degree  to  which  x,  belongs  to  tne 
possible  set  of  inputs,  Then  by  (1)  and 
(2) 

u(y) »nax{rainluj  (x^)  ,u2(x2,. .  ,un(dn)  J  ) 

y*f(x)  (4\ 
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Tze  bracketed  expression  in  (4)  is 
tfce  extent  to  which  the  set  of  inpcts  x 
belongs  to  the  possible  set  of  ssch 
inpcts.  It  is  only  as  large-  .as  the 
smallest  of  the  separate  degrees  sen- 
bersbip  of  tfce  conponents  of  x.  Since 
there  nay  be  a  different  degree  of 
oenbersbip  for  each  x  satisfying  f{x)«y, 
tfce  degree  to  vbich  y  belongs  to  the 
possible  set  of  oatpct  values  is  tfce 
naxinun  degree  of  senhersbip  of  x  over 
all  such  x. 

Sfcovn  in  Pignres  1  and  2  are  tvo 


Ve  begin  tfce  fczxy  set  analysis  by 
quantify  lag  tfce  descriptors  of  Figure  2. 
Henbersfcip  functions  for  snail  chance 
°p(?s)  and  coed  chance  o-Cp^j/^are 
reasoned  as  shown  in  Figure  5.  J3y  (3) 
fair  chance  Op(pF)  is, 

OpCp?)  -1“  f  OpC?s)  *op(Pq)  l 

S iailarly,  the  nenbsrsbip  functions  for 
losses  L-#  l.  and  success  S  are 
estiratetT  as  shewn  in  Figures  1  and  5, 
respectively. 


decision  analysis  diagrans  vbicb  support 
the  cission  scenario  described  above. 
Figure  1  depicts  the  classical  netbod  of 
analysis,  which  subscribes  to  precise 
estinates  of  probability  and  utility. 
Figure  2  exemplifies  the  fuzzy  set 
netfcod  of  analysis-  Probabilities  are 
reasoned  as  snail  chance,  good  chance, 
etc.  Dtilities  are  reasoned  as  heavy 
losses,  nission  failure,  etc. 


Vsizg  U)  the  zerbersbip  fractions 
for  the  eipected  voices  S,  rad  2,  are 
cozpated  in  terns  of  aircraft  losses  and 
aission  saccess.  For  inpots  L_,  l_  -.-.d 
fj,  ve  have,  a  ^ 

c|el«xWBlDpfp^.BP(Rj  ;naaE). 
el‘^H+?C1L+aT?S“?G)1« 

c2*?S1L4PG1Kfil"Ps‘?G,1B 
vhere  ps  and  pG  arc  shorthand  notations 
for  up(pc)  and  uP(pG),  respectively.  ,Xn 
the  cos^jtations  sampler  values  of  the 
variables  p  and  1  are  selected  from  the 
curves  of  Figures  3  and  4.  All  possible 
combinations  of  the  selected  values  fom 
the  input  set.  The  nin-aax  rules  then 
determine  the  respective  aeabership 
functions  of  the  computed  outputs.  The 
expected  values  E,  and  E~,  in  teras  of 
aircraft  losses,  dte  shown  in  Figure  6. 


Fig. 6. 


Similarly,  the  nenbership  functions 
for  E.  and  E~  with  p.^  and  pG  nodifying 
inputs  s  and  x  are  deceraineo'froa 

u (e) «nax {rain  f Up(p^)  ,up(pG)  ,us's) , 

el"PS£'  Pgs+  £ 

02»ps3+pG8t(1-ps-pG) f 

Sample  values  of  p,  s  and  f  are  taken 
from  Figures  3  and  5  where,  again,  all 
possible  input  combinations  are  formed. 
The  resultant  outputs,  in  terms  of 
mission  success  (or  failure) ,  are  shown 
in  Figure  7. 


Pig. 7. 


DISCUSSION 

Referring  to  Figure  6  the  highest 
membership  for  E.  and  E?/  respectively, 
shows  2  and  3  aircraft  losses.  In  terns 
of  mission  success  (Figure  7)  the  mem- 
ship  function  for  expected  value  E.  is 
interpreted  to  mean  that  about  72f  of 
the  target  will  be  destroyed.  This  may 
also  be  interpreted  as  mission  failure. 
The  success  suggested  by  is  only 
slightly  better,  i.e.,  751.  Ttc  appears 
that  the  plain  route  to  the  target  off¬ 
ers  the  possibility  of  slightly  greater 
mission  success  but  at  a  cost  of  one 
more  aircraft. 

Computations  involving  the  prob¬ 
abilities  shown  in  Figure  1  yielded 
results  nearly  Identical  to  those 
computed  by  the  fuzzy  set  method.  How¬ 
ever,  a  sensitivity  analysis  of  the  es¬ 
timated  probability  inputs  of  Figure  1 
showed  a  marked  change  in  outputs. 
Changes  in  probability  estimates  as 
snail  as  ±0.1  in  several  branches  re¬ 
sulted  in  outputs  showing  mission  fail¬ 
ure  where  previously  mission  success  was 
the  probable  output.  The  fuzzy  set 
method  provided  for  a  kind  of  sensitiv¬ 
ity  analysis  at  the  outset  by  allowing 
the  estimated  inputs  to  take  on  a  range 
of  values.  All  possible  combinations  of 
these  values  were  considered  as  the  in¬ 
put  set.  Clearly,  linguistic  quanti¬ 
fiers  as  prescribed  by  the  fuzzy  set 
method  of  analysis  can  play  a  basic  role 
in  dealing  with  complex  problems. 
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ABSTRACT 

We  consider  a  binary  detection  problem,  when  the 
data  are  obtained  from  ra  distant  sensors,  and  modelled  as 
stationary  Gaussion  processes,  with  different  spectra.  We 
also  assume  that  inaccurate  versions  of  the  true  statistical 
models  are  utilized,  and  we  develop  upper  bounds  to  the 
probability  of  error,  based  on  the  Chemoff  bounding 
approach.  Those  bounds  also  converge  to  the  asymptotic 
probability  of  error  as  the  number  n  of  data  points  increases 
to  «».  Conditions  for  sustaining,  in  spite  of  mismatch, 
exponential  convergence  of  the  error  probability  to  zero 
with  n  arc  determined. 


INTRODUCTION 

There  has  been  much  interest  recently  in  the  signal 
detection  problem  for  data  available  from  multiple  sensors 
(11  -  (7J.  In  this  paper  we  develop  bounds  to  the  probabil¬ 
ity  of  error  for  binary  detection  from  multisensor  data, 
when  inaccurate  versions  of  the  actual  statistics  are  incor¬ 
porated  into  the  decision  rule.  We  specifically  investigate 
the  error  probability'  for  detection  in  Gaussian,  stationary 
processes  with  inaccurately  known  spectra. 


SUMMARY  OF  RESULTS 

Suppose  that  m  sensors  arc  utilized  for  deciding 
between  two  hypotheses,  Hj ,  Ho  Let  x£  =  (xkj  ■  •  ■  be 
the  data  vector  for  the  kth  sensor,  distributed  according  to 
the  probability  density  function  fjk(xg)  for  j=0,l  under 
Ho,  Hj,  correspondingly.  Suppose,  also,  that  g;<(xk)  is  the 
"inaccurate"  version  of  ^(xg)  that  is  used  in  the  decision 
rule.  We  will  assume  throughout  this  paper  that  the  data 
from  different  sensors  arc  statistically  independent.  This 
assumption  will  be  removed  in  a  subsequent  paper 
Because  of  the  independence  between  distinct  sensors,  the 
likelihood  ratio  test  is: 

m 

•  Decide  Hi  if  m*1  •  £  qk(xg)  >  T  (1) 
k=l 


where: 


qk(x5)  =  n-‘ 


log 


gitW) 

gok<*5> 


(2) 
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is  the  "mismatched”  log  likelihood  function  of  the  kth  sen¬ 
sor. 

Let,  for  j=0;l: 

Pj(f,g.n)  =  Probability  of  erroneously  deciding  Hj  using 
{gjc)  and  based  on  n  measurements. 

We  will  utilize  the  Chemoff  bounding  technique,  and 
subsequently  relate  the  bourd  to  "large  deration  theory.' 
[8],  [9J,us 

The  basic  Chemoff  bound  is: 

Po(f.g.n)  =  IMm-'  5>t>TIIU 
M 

SEoCxpItfnT1  £  z*~T)j  = 

leal 

=  II  Eo  cxp[im“*‘  (2fc-T)J  (3) 

til 

P,(f.g.n)  =  Prtm_l  2  zk  ^TlHi] 

fc*t 

£E,  exp[-t(m_l  £  Zk-T)l= 
ui 

=  n  E1  CXP  H™'1  (Zfc-T)l  (4) 

ksl 

for  t20,  E,  «  expectation  under  Hj  Note  that  the  bound  t3j 
is  less  that  1  for  some  £0,  if  ard  only  if: 

m"1  XEoZk<T  (5) 

k=l 

Similarly,  (4)  is  less  than  1  for  some  120,  if  and  only  if 

m*1£Eizk>T  (6) 

fc*I 


Let,  now: 

zk  =  n“*  log  lgik(Xfc)/gok(Xk)J  (7) 

be  the  mismatched  log-likelihood  function  for  the  kth  sen¬ 
sor,  and  s=t  n-,20.  Straightforward  calculation  provides  us 
with  the  following  expressions: 

Eo  exp(tm",(7jt-T)l=  /  fCtk(xJ){glk(xSVgokUE)lVm 
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dx*  ■  exp(-snT/m).  (*) 

e,  M^-of'^-T))  = J  ruitiM&kWVfttWir^ 

dxg  ’  «p(saTAa)  (9) 

Eo  Zk  =  n‘!  J  (ok  (x?)  log  fgikCxkVgokCxkJldXk  (10) 
El  Zk  =  n-’ J fIt  (x£)  to*  fet(x|yga(x5)]dxE  (11) 
*  Define  the  functionals:  - 

rr1  log/fCxEXg.iCxSJfeiCxE)]’*'  ixZ  (12) 

Taking  logarithms  of  (3),  (4)  and  using  (S),  (9),  (12).  we 
find  the  bounds^ 

n  1  log  Po(f.g.n)  *  £  Oklfo.gik.gok.n.sHT-  (13) 
k*l 

n"!  logPi(f,g,n)£  £  QtKik»giktgOk«n,-s)  +  sT.  (14) 

fc»i 

We  observe  that  if  Gj  denotes  the  derivative  of  G*  with 
respect  to  s.  then,  from  (10),  (12),  (7): 

Gkffbk.gik.gOfc.n.0]  =  m_I  Ho  z k.  (15) 

Gk(fik»gik.gOkm.01  =  m'1  Ej  Zfc.  (16) 

Hence,  if  (5)  is  satisfied,  the.slopc  of  the  upper  bound  (13) 
at  s=0  is  negative,  and  the  bound  is  zero  at  s=0.  Similarly, 
if  (6)  is  satisfied,  the  slope  of  the  upper  bound  (14)  at  s=0  is 
negative,  and  the  bound  is  zero  at  s=0.  Also,  both  bounds 
(13)  and  (14)  arc  convex  with  respect  to  s. 

The  tightened  Chemoff  bounds  (13),  (14)  arc: 

n~l  IogP0(f,g,n)Sinf  £  Gk[f<>k,gik,g0k.n.sHT.(i7) 

*  k»l 

n"1  log  Pi(f.g.n)  ^ inf  £  Gk[fik.gik.gck.n .-sJ+sT(18) 

*  kal 

Suppose,  now,  that  for  the  class  of  statistical  models  we 
consider,  the  limits: 

lim  Gklfjicgik.gOj.n.s)  ^  Gk(fjk,gik,gok.~.$)  (19) 

exist,  fork»l,...,m,jrO,l 
Suppose,  also  that: 

iiH  S 1 0®  >»e  fgik<x5)/g0fc(xg)jdxg<T  (20) 

lim  n"1  £  J  fik(xj)  log  (gu(xE)/gok(xi!)I<ixj!>T  (21) 


Then,  uahzing  the  results'  of  Large  Deviation  Theory,  J8J. 
|9],  wufind: 

log  Po(f.gm)  = 

inf  £  Gkifbk.gikigCk»-.sFsT.  (22) 

*  w 

lim  n’1  leg  Pj  (f.g.n)  = 

B*>» 

£  Gi[fik.rik.&k.^}+  sT  (23) 

It  is  interesting  to  observe  that  the  bounds  (1?),  (18) 
become  the  exact  asymptotic  error  probabilities  as 
This  is  the  essence  of  Large  Donation  Theory  (8J,  J9J. 

We  will  now  concentrate  on  a  major  class  of  stausti- 
cal  models  for  which  the  limits  (19),  (20),  (21)  exist  This 
is  the  class  of.Gaussian,  statior^ry  random  processes  with 
zero  means  and  different  spectra.  Consider  three  multivari¬ 
ate  Gaussian  probability  density  functions 
f(xn),  g(x°),  go(xn)  with  zero  means  ana  covariance 
matrices  F,  Q ,  Co.  We  calculate  ihe  integral  of  eq  (12): 

CIf,gi.gan.0)=n'1  log  Jf(xn)[g,(x”)/6o(x”))0dxn= 
=-y(n-’  log  IFi’rtC.-OCS1 1  -if1  log  IFj1 1  - 

-  9  o'1  log  ICj'l  +  0  o'1  logics' ']  (24) 

Taking  the  limit  as  n-H*»,  and  using  the  results  of'tlOJ, 
[11],  we  find: 

X 

-2G[f,g,.Eo,~,0]=(2B)-'  J  (logic1  (X)*eci 1  (kyBci1  (X))- 

-  log  r1  (X)-0  log  ci'(X)  +  9  log  Co1  (X))dX  (25) 

where,  f(X),C|(X),Co(X)  arc  the  three  spectra  corresponding 
to  f.gi.go,  and  it  is  assumed  that  they  are  strictly  positive 

for  all  Xej-rc.n).  Using  (25)  for  k=l . m,  and  assuming 

that  for  the  ktli  sensor  the  true  spectra  arc  (foic(X),fik(X)} 
under  Ho.Hi,  and  the  assumed  spectra  arc  (gok(X),  gik(X)j 
under  Ho.Hj,  we  can  evaluate  the  rates  in  (22),  (23). 

The  necessary  and  sufficient  conditions  in  order  for 
Po(f,g,n)  and  Pj  (f,g,n)  to  converge  exponentially  to  zero, 
are  that  the  derivatives  of  (22),  (23)  at  $=0  arc  negative, 
which  arc  equivalent  to  (20),  (21).  The  derivative  of  G 
with  respect  to  0  at  0=0,  is: 

x 

-2G'(f,g1,Eo,~.0=OM2 XT'  /  (fWtcl'O.Ko’O.)]- 
-n 

-logco(X)ci'(X))dX.  (26) 

The  condition  of  negative  slope  at  s=0  of  (22)  is. 
n  m 

(2k)'1  j  2  (f»(2.)tgu(2.)  -  got (2)1  - 

k*l 


log  gcfc(MgTx(2))dX  +  2T  >  0  (27) 


The  condition  of  negative  sl^pe  *1  s=0  of  (23)  is: 
r.-.a  f. 

(2 *r‘  J  Z(fik(>.)feIk(>)-gaW}-  . 

log  gft(X)gT}(X)]d?.-  2T  >  0,  (2?) 

Conditions  (27),  (28)  guarantee  exponential  convergence  of 
Po.Pj  to  zero,  correspondingly.  It  can  be  shown  that  if  (27) 
is  not  satisfied,  then  P0  converges  to  1  as  n-**>.  Similarly, 
if  (28)  is  not  satisfied,  Pj  converges  to  1.  The  proof  of  the 
latter  fact  is  not  given  here,  but  it  will  appear  in  the 
expanded  version  of  the  paper. 

Let  us  define  the  spectral  distance  measure: 

I(f.g)=<2 s)-'  )  (f{J.)g-‘(X)-l- 

-X 

logf(X)g-'(>.))dX  (29) 

Because  of  the  identity  x-l^logx,  it  is  seen  that 
l(f,g)>0  with  equality  if  and  only  if  f(X)  =  g(X)  for  almost 
all  XcHr.Jtj.  After  some  algebraic  manipulations,  condi 
tion  (27)  is  expressed  as: 

Z  Kfok.gtk)  - 1  (fa.  get)  +  2T  >  0  (30) 

fc=t 

Similarly,  condition  (28)  is  expressed  as: 

Z  Wlk.  gik)-(fik.  gok)”2T>0  (31) 

k*t 

Combining  (30)  and  (31),  we  sec  that  the  necessary 
and  sufficient  condition  for  exponential  convergence  of  the 
error  rate  to  zero,  is  the  satisfaction  of  the  double  inequal¬ 
ity: 

2-1  ZKfik.  gtk)-I(fik.gOk»T> 

k*1 

>  2“*  Z  !(*<&.  gok)  -  Itfft.  gik)-  (32) 

k»l 

As  long  as  the  leftmost  side  of  (32)  is  larger  than  the 
rightmost  side,  we  can  always  pick  a  threshold  T  between 
those  two  numbers  to  achieve  asymptotic  convergence  of 
the  error  rates  to  zero.  For  the  special  case  of  matched 
statistics,  we  have  f^  =  gik,  fa  =  £<*,  and  the  condition 
.(32)  becomes: 

r1  2  Ufik.  f«)  >T>  -2-'  s  I(fck.  flk)  (33) 

k»t  kcj 

We  note  that  (33)  can  always  be  satisfied  for  some  T, 
because  the  leftmost  side  is  nonnegative,  and  the  rightmost 
side  nonpositive.  Thus,  in  the  "matched"  case,  exponential 
convergence  hinges  only  upon  the  choice  of  T, 

To  evaluate  the  actual  rates  of  convergence,  we  need 
to  use  expression  (25)  for  k=l,...,m  into  (22),  (23)  and 
minimize  with  respect  to  s. 


CONCLUSIONS 

We  haw  obtained  the  rates  of  convergence  of  error 
probabilities  in  multiscnsor  detection  for  a  binary 
hypothesis,  and  we  determined  the  conditions  of  exponen¬ 
tial  convergence  in  the  presence  of  mismatch  The  condi¬ 
tions  arc  necessary  and  sufficient. 
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ABSTRACT 

Command  and  Control  (C?)  systeos  are  likely 
to  consist  of  hierarchically-organized  processing 
clusters  requiring  interoperability  aaong 
heterogeneous  components,  decentralized  real-time 
processing  control,  very  large  database 
processing,  survivability  through  reconstitution 
and  reconfiguration,  and  some  level  of  security 
assurance.  To  address  these  concerns,  RADC  has  an 
on-going  research  and  development  program  in  the 
area  of  secure  distributed  systems  with  the 
premise  that  the  functionality  and  security  of  tho 
C2  systems  can  be  enhanced  through  the  use  of 
formal  specification  and  verification  technology. 
Tho  program’s  notable  achievements  during  the  last 
year  are  presented  in  a  tabloid  fashion. 


INTRODUCTION 

Why  do  we  need  secure,  or  trusted, 
distributed  systems?  Command  and  control  systems 
of  the  future  are  likely  to  consist  of 
hierarchically  organized  processing  clusters 
requiring  interoperability  aaong  heterogeneous 
components,  decentralized  real-time  processing 
control.  very  large  database  processing, 
survivability  through  redundancy,  reconfiguration, 
and  reconstitution,  and  some  level  of  security 
assurance. 

With  increased  hacker  and  insider  threats, 
running  system  high  is  no  longer  good  enough. 
Furthermore,  security  engineers  have  found, 
through  experience,  that  the  higher  levels  of 
assurance  oust  be  designed  in;  good  security 
mechanisms  cannot  simply  be  added  in  later  phases 
of  system  development. 

What  do  we  mean  when  we  say  a  system  is 
multilevel  secure  (MLS)?  A  multilevel  secure 
system  if  one  for  which  assurance  of  the  adequacy 
of  its  hardware  and  software  mechanisms,  or 
controls,  is  sufficient  to  enforce  its  policy, 
that  is,  the  rules  governing  its  use  for 
simultaneously  processing  oultiplo  classifications 
and/or  categories  of  information  by  users  with 
various  clearances  and  needs-to-know. 

Tho  set  of  mechanisms  is  referred  to 
collectively  as  the  TCB,  or  trusted  computing 
base.  Assurance  is  a  measure  of  an  evaluator’s 
confidence  that  the  security  features  are 


correctly  implemented  and  protected  from 
tampering. 

Assurance  is  achieved  by  means  of  some 
combination  of  hardware  protection  features, 
advanced  software  design  and  implementation 
technology,  project  management  and  source  control 
procedures,  code  inspection,  penetration  testing, 
and  formal  verification.  Functionality  is  usually 
thought  to  be  synonymous  with  features;  but  in  a 
secure,  or  trusted  system,  assurance  is  at  least 
as  important  a  part  of  functionality  as  features 
are. 

The  degree,  or  level,  of  assurance  is 
designated  by  8n  alphanumeric  code  as  defined  an 
DOD  5200.28-STD.  "Trusted  Computer  System 
Evaluation  Criteria"  (1).  Level  D  denotes  minimal 
o?no  protection.  Levels  Cl  and  C2  denote  varying 
dogrees  of  discretionary  (need-to-know)  protection 
assurance.  Levels  Bl.  B2,  and  B3  denote  varying 
degrees  of  mandatory  (classification/category) 
protection  assurance.  A1  is  currently  the  highest 
rating,  denoting  Verified  Design.  For  each  of 
these  evaluation  classes,  the  Criteria  specifies  a 
detailed  set  of  assurance  requirements,  as  well  as 
a  sot  of  required  security  foatures.  Thus  "B2 
assurance"  means  that  which  is  achieved  by 
following  tho  assurance  requirements  in  tho  B2 
section  of  the  Criteria. 

RADC's  research  and  development  program  in 
secure  distributed  systems  has  three  thrusts: 
distributed  operating  systems  dosign  and 
prototyping,  secure  distributed  systeos 
specification  and  verification  techniques  and 
methodologies,  and  secure  database  management. 

The  rest  of  the  paper  describes  some  of  the 
work  on-going  or  planned  in  each  of  these  areas. 
More  detail  can  be  found  in  the  references. 

DISTRIBUTED  OPERATIC  SYSTEMS 

To  address  the  problem  of  decentralized 
processing  control  and  interoperability  of 
heterogeneous  components,  work  is  on-going  in  the 
area  of  specification  and  verification  of  secure 
distributed  operating  systems  (SDOSs),  In 
September  i987,  the  first  (Concept  Exploration) 
phase  in  the  development  of  a  secure  distributed 
operating  system  was  completed,  in  which 
multilevel  security  issues,  as  they  relate  to 
distributed  operating  system  design,  were 
investigated  12,  3,  4).  The  Cronus  DOS,  which  is 
described  in  a  companion  paper  {53 •  was  used  as  a 
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baseline. 

The  goats  of  the  project  were  two-fold. 
First,  there  was  the  desire  to  understand  better 
the  problems  associated  with  developing  an  SDOS 
that  dec onstrates  a  set  of  higK-level 
-requirements,  such  as  availability  and 
scalability.  There  is  a  large  set  of  problems 
that  need  to  be  addn^ssed  in  this  context,  many  of 
which  are  interrelated  and  cannot  be  considered  in 
isolation.  The  intent  was  to  qualitatively 
evaluate  the  relative  importance  and  difficulty  of 
addressing  each  of  these  probleas  using  four 
criteria:  performance,  functionality, 

feasibility,  and  usability.  Such  an  analys^  s  was 
expected  to  yield  insight  into  the  trade-offs 
faced  by  the  designer  of* any  SDOS. 

This  project  was  viewed  as  a  first  step  in 
the  development  of  an  SDOS  that  incorporates 
advanced  distributed  systea  technology,  including 
high-iovel  resource  management  and  structured 
software  architectures.  Therefore,  the  second 
goal  of  the  project  was  to  produce  preliminary 
security  documentation  in  accordance  with  the  A1 
(Verified  Design)  evaluation  criteria  and  to 
explore  possible  implementation  strategies.  Thus 
the  contractor  produced  a  security  policy,  a 
formal  mathematical  model  of  the  security  policy, 
a  functional  description  of  the  security  features 
and  DOS  support  mechanisms,  a  detailed  top-level 
specification  of  the  TCB,  and  portions  of  the 
formal  top-level  specification  of  the  TCB,  using 
the  Gypsy  specification  language. 

SDOS  POLICY 

The  purpose  of  a  system's  security  policy  is 
to  define  the  meaning  of  security  within  tho 
system.  That  is,  the  policy  defines  the 
requirements  for  the  prevention  of  unauthorised 
disclosure  of  sensitivo  information  (i.e., 
confidentiality),  the  protection  of  the  accuracy 
of  critical  systea  hardware,  software,  and  data 
(i.e.,  integrity),  and  prevention  of  denial  of 
service  or  loss  of  critical  services  when  required 
(i.e.,  assured  service).  Since  every  host  in  a 
heterogeneous  system  will  have  its  own  definition 
and  implementation  of  security,  a  global  security 
policy  is  necessary  as  a  foundation  for  allowing 
different  hosts  to  interact  securely.  The  task  of 
connecting  a  host  into  SDOS  involves  reconciling 
the  local  security  policy  with  the  global  security 
policy,  determining  the  assuredness  of  software 
running  on  tho  host,  and  selecting  the  appropriate 
security  attributes  of  the  host. 

A  security  policy  may  be  defined  at  many 
different  levels  of  abstraction.  The  sore 
abstract  the  le.el,  the  closer  the  policy 
corresponds  to  one’s  intuitive  understanding  of 
the  meaning  of  security;  the  less  abstract  tho 
level,  the  greater  the  policy's  complexity  and  the 
greater  the  correspondence  between  it  and  the 
secure  system's  implementation.  Since  both 
understandability  and  detail  are  important,  a 
policy  was  produced  which  has  two  parts:  (1)  a 
high-level,  generic  part  that  is  independent  of 
any  particular  system,  and  (2)  a  lower-level, 
system-specific  instantiation,  applying  the 
generic  par1-  to  the  particular  case  of  SDOS,  and 
including  other  system-specific  requirements. 


The  generic  policy  is  based  on  the 
proposition  that  message  passing  is  an  appropriate 
model  for  describing  interactions  in  a  secure 
distributed  computer  systea.  The  i  ^stract  nature 
of  the  generic  policy  is  useful  for  gaining  an 
intuitive  understanding  of  secure  information 
flow.  The  core  of  the  generic  policy  is  based  on 
the,  property  of  restrictiveness.  It  places  a 
constraint  on  possible  information  flow  passing 
through  MLS  entities  in  terms  of  histories  of 
message-passing  operations.  Entities  that* satisfy 
the  restrictiveness  property  separately  are 
assured  to  satisfy  the  property  as  a  group  of 
interacting  entities.  This  composability  property 
allows  the  system  policy  to  be  decomposed  into  the 
policy  on  individual  components  of  the  systea. 

The  composability  property  is  desirable  for 
command  and  control  systems  for  several  reasons. 
First  of  all,  as  mentioned  earlier,  as  the  command 
and  control  function  becomes  both  decentralized 
and  integrated,  there  is  a  desire  to  protect  the 
investment  in  existing  software  and  hardware  by 
networking  systems  together. 

Conversely,  it  is  difficult  to  verify  large, 
complex  systems.  Being  able  to  divide  the  systea 
into  smaller  components  makes  the  job  of 
specification  and  verification  easier. 

Thirdly,  a  characteristic  of  distributed 
systems  is  the  presence  of  concurrent  processes, 
which  leads  to  a  non-deterministic  state.  Current 
specification  and  verification  methods  depend  on 
being  able  to  treat  the  systea  as  a  state  machine. 
Being  able  to  view  the  system  as  a  composite  of 
states  makes  proving  the  security  of  the  systea 
possible. 

Until  recently,  there  have  been  two  basic 
approaches  to  stating  that  a  systea  is  secure. 
Tho  first,  referred  to  as  the  non-interference 
property,  requires  that  state  changes  initiated  by 
a  given  user  not  affect  the  outputs  received  by 
another  user. 

The  second  approach,  referred  to  as 
non- deducibility,  requires  that  it  be  impossible 
for  a  user,  through  observing  events  visible  to 
him.  to  deduce  anything  about  the  sequence  of 
inputs  made  by  a  second  user  unless  the  level  of 
the  second  user  is  lower  than  the  level  of  the 
first. 

The  non-interference  property  is  only 
composable  for  (1)  forward  branching  architectures 
(that  is,  a  process  may  not  receive  input  from 
more  than  one  source  and  there  is  no  feedback), 
(2)  deterministic  systems,  (3)  uninterruptable 
systems,  and  (A)  systems  with  uobourued  buffers. 

Deducibly-securo  systems  ore  eonposable  only 
if  unsolicited  write-ups  are  disallowed.  (An 
unsolicited  write-up  occurs  whenever  tho  systea 
makes  a  high-level  output  at  a  time  when  there  has 
been  no  high-level  input  requesting  it.) 

The  new  restrictiveness  property  (6.  7J 
overcomes  the  composability  limitations  of  the 
non-interference  and  non-deducibility  properties. 
The  restrictiveness  property  requires  that  even  if 
one  pooled  all  information  based  on  the  behavior 
of  the  process  at  level  1  or  below,  one's  ability 
to  deduce  the  existence  or  non-existence  of  inputs 
at  higher  (or  incomparable)  levels  is  limited. 
That  is,  given  a  particular  set  of  inputs  at 
higher  levels,  there- is  at  least  one  other  trace. 
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Tb*  issusfittd  security  jclicy  rule*  at*, 
diridtd  rccjily  sntj  three  rciatary, 

discretionary.  ccrfijsttfca.  The  staiKs^r 
policy  if  a  straight-forward  ^jlimia  cf  tie 
tfseric  policy  to  tie  entities  feffuei  for  tie 
SDC5  in  that  it  csassoix  tie  flew  cf  informatics 
ca  the  Safjf  cf  CCD  security  levels.  S«  er^7 
subject  ard  ehject  id  tie  fjftts  bax  a  label 
associated  with  it.  Tie  dixcre-ic-nary  policy  is 
dffijsed  to  central  tie  ese  cf  tie  DOCS' e  abstract 
operations  cm  tie  basis  cf  elite:  identities*  cr  a 
atr'r  De<i-to*fcw.  The  cemflgura  tins  ycllqf 
defines  tbs  systes's  security  •cecfijsrKioS'  *  is 
tens  cf  "  a  set  cf  “policy  parameters"  (such  as  ** 
vhetber .  the  policy  is  to  bit  tamperproof  cr 
experimental  and  vbetier  auditing  is  cabled  cr 
disabled).  Tie  configuration  policy  also  control* 
tbe  sodifiatioa  cf  those  parameters,  both  fcy 
system  csers  and  ly  changes  to  tie  cmferZyimg 
network  connectivity.  Sa  tie  security  policy 
ctn  be  tailored  to  prcdcce  &'  family  cf  seccrity 
policies  to  cover  txricc*  site  requirements, 
syste*  development  phases,  cr  sissies  phases. 

Another  aspect  of  host  integration  is  tie 
implementation  cf  SDCS  services  necessary  to  allcw 
tbe  host  and  tbe  distributed  system  .  to  be 
interconnected.  These  services  nsst  be 
implemented  with  scf fxcieot  asscrasce  ho  preride 
ml  ti  level  seccrity.  This  scans  they  sssi  hare  a 
32  asscrasce  rating  at  a  giaisaa.  Tbe  asscrasce 
of  these  services  detersines  tbe  asscrasce  cf  tie. 
SDOS.  Thss.  33  or  A1  are  sore  desirable  goals. 

In  a  distributed  systes.  vbose  cocpccects  are 
inplesented  ca  cany-  different  cospeters.  it  is 
csefcl  to  talk  about  the  assurance  level  cf  each 
security  feature.  or  tbe  asscrasce  cf  the 
individual  component*  that  implement  each  seccrity 
feature,  rather  than  the  assurance  cf  the  systes 
as  a  whole. 

It  is  a  fundamental  property  cf  assurance 
that  the  assurance  cf  a  component,  C.  can  be  no 
greater  than  tbe  asscrasce  of  the  components 
"below"  C.  Below  is  loosely  defined,  sect  that  a 
component  is  below  C  if  (1)  C  depends  ca  it  for 
proper  operation  (e.g..  C  calls  it),  or  (2)  it  is 
able  to  access  C's  databases  (e.g..  it  is  in  a 
lover,  core  privileged  ring). 

In  a  traditional.  single-best,  layered 
operating  systes.  the  relationship  between 
components  is  clear,  straightforward,  and  obvious. 

The  coupon eats  in  lower  layers  or  rings  are  below 
those  in  higher  layers  or  rings.  In  a  distributed 
operating  systes,  tbe  relationship*  between 
cosponcnts  are  such  sore  conplex.  Differenr- 
c  exponents  can  be  ptysicelly  located  in 
equally-privileged,  mutually- suspicious  protection 
dosains  (e.g..  separate  computers).  Further,  the 
logical  relationship  between  cosponcnts  can  be  the 
reverse  of  their  physical  relationship.  For 
example.  in  a  layered  communications  protocol,  a 
higher  layer  cay  do  encryption  and  then  pass  the 
encrypted  data  to  a  lower  layer  that  need  toot  be 
trusted  since  it  has  no  security  function.  Of 
course,  the  lover,  insecure  layer  cust  not  be  able 
to  access  the  higher,  secure  layer's  databases. 
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Circs  tie  above  cossideratissnr.  as 
fmpleuemtalfcs  strategy  for  tie  J32S  csss  be 
cissts  tin  allows  each  cf  tbe  required  security 
features  ^s  te  implemented  is  a  ccpcotst  taring 
the  appreprfarte  level  cf  arsersmee. 

1=  adiztics  to  security  features  ax* 
assurance.  tbe  tine  and  cent  cf  fmplememtaticm  cf 
tbe  SICS,  preuerxaticn  cf  investment  is  existing 
Jppliati^s  and  operating  systes  software,  and  any 
specialized  requirements  cf  tie  application  to  ie 
rrs  cs  dbe  23C5  scat  all  considered. 

Therefore,  th*  concept  expl era  ersn  contractor 
started  with  tie  sedel  cf  an  existing, 
object-oriented  DCS.  Crones,  and  considered 
alternative  implementation  strategies  that 

could  provide  tte  sane  user  functionality  as 
Crones,  ia  a  secure  fsnreestst. 

Cronos  runs  o  -  krtercgesecc*  bests,  ia  a 
layer  above  existing  operating  systems  such  as 
WH  (Th)  and  TO.  Tbe  existing  operating  sys ten 
is  called  tbe  constituent  operating  systes  (CSC). 
Tbe  bests  ccessnfcate  ever  insecure  networks  such 
as  Ethernet  and  AEPAaet. 

Strategy  I  consists  cf  adding  security 
features  to  tbe  existing  DCS.  This  fcas  tbe 
obvious  disadvantage  that,  since  tbe  underlying 
operating  systems  of  Crones  bare  only  C2 
assurance,  tbe  resulting  STCS  could  Lave  &o  note 
than  C2  assurance.  This  is  unacceptable  because 
KLS  inplies  at  least  32  assurance.  This 
alternative  is  sectioned  only  for  completeness. 

Strategy  II  consists  of  porting  tbe  DOS  to  a 
J£S  CCS  (having  assurance  of  at  leas*  32  and 
preferably  33  or  better),  and  then  adding  tbe 
appropriate  seccrity  featcres.  This,  would  involve 
partitioning  tbe  DOS  into  security-relevant  and 
non-security-relevant  parts,  and  making  tbe  forcer 
part  of  the  Trusted  Computing  3ase  (TC3).  This 
strategy  has  two  variants:  Strategy  1I-A  involves 
writing  a  KLS  COS  that  provides  exactly  those 
features  seeded  to  support  SDOS.  Strategy  I 1-3 
involves  using  an  existing  KLS  CCS.  and  building 
ZLCS  ca  top  of  i% 

Strategy  II  has  the  advantage  of  being  US, 
but  it  has  tbe  disadvantage  of  losing 
l»- erogeaeity  and  losing  ievestnent  in  existing 
application  software.  Strategy  II-A  has  the 
additional  disadvantage  of  long  develcpecnt  tine 
and  high  cost  for  tbe  CDS.  while  Strategy  II-3 
evoids  these,  with  zero  COS  development  tine,  and 
COS  development  cost  shared  by  all  tbe  customers 
who  purchase  rights  to  the  existing  KLS  COS.  In 
addition,  the  existing  COS  would  have  at  least 
some  software  development  tools  that  run  on  it. 
and  possibly  also  scee  useful  application 
software.  Strategy  Xl-B  is  clearly  preferable  on 
cost  grounds;  Strategy  II-A  would  only  be  chosen 
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if  =®  *m stable  existing  KS  CCS  cold  ie  fccmd. 

Strategy  III  irxslw  tie  etc  cf  ttcrre 
fras-taJs  cr  access  machines  eo  cccneet  existing 
^2-ateJ  CCS  to  c  istttcre  -ettrsi. 

Xtzdizerj  cctarsls'vcdd  he  irpltnertad  is  tie  MS 
access  ra^inrt.  while  d-jeretia^y  cmtrnlx 
*ec!i  be  sylecui  £m  tie  C2  tests.  This 
strategy  i»  tie  advantages  cf  preserving 
hetercgerdcy  amd  preserving  tie  Investments  is 
tie  existing  SOS,  tie  *?;lvatir=j  that  r=n  ca  it, 
eu5  *11  tie  snile  software  development  tools  and 
application  software  tilt  runs  cs  tie  existing 
CCS*.  It  has  tie  additional  advantage  cf  lever 
CCS  development  cost  tias  either  alternative  is 
Strategy  II.  Ssaerer.  it  ias  tie  disadvantage  cf 
set  pjoriiitj  fer  ary  MS  bests.  This  sales  sere 
classes  cf  «CCS  application  systems  rerjr  awkward, 
if  set  impossible.  to  implement. 

Strategy  17  is  a  hybrid  cf  Strategies  II  asd 
III-  It  involves  cie  cf  a  MS  CDS.  cs  which  SDCS 
*  .true  vccld  be  bcilt.  which  ctxld  test  eitber 
as  a  seenre  frest-ttd  to  connect  existing 
single-level  systems.  cfc  as  am  KLS  SDOS  best, 
mumming  £005  application  software.  Ibis  combines 
tie  advantages  cf  Strategies  II  and  III: 
preservatico  cf  heterogeneity  and  investment  is 
existing  applicatics  scftvare,  and  provision  for 
IC5  SDC5  bests.  -  Implementation  cost  would  be 
seuewbar  higher  than  that  cf  Strategy  II  alone, 
bet  set  significantly  so.  if  tbebyirid  nature  of 
tiis  strategy  vere  is  tie  dec ign  fres  tie 
begissisg.  Ibis  strategy  has  ere  additional 
advantage  ever  eitber  of  Strategies  II  or  III: 
existing.  mom-distributed  application.  that  seed 
to  be  interfaced  to  a  distributed  system.  bet 
which  carrot  be  charged  for  teasers  such  as 
eztrere  age,  world  require  sot  orly  security  is 
the  interface  sachise.  bet  also  scee 
son- security-related  processisg.  to  convert  old 
data  forrats  asd  ccesoaicatioQ  protocols  into 
those  used  by  modem  networks  asd  hosts.  Tbe 
hybrid  KLS  5005  saebire  provides  both  capabilities 
is  one  secbice. 

Strategy  IV  has  two  variant z,  correspor disg 
to  JI-A  and  1 1-3.  The  hybrid  software  could  be 
built  either  ©a  an  US  COS  written  as  part  of  SDOS 
development  (IV-A).  or  os  as  existing  KLS  COS 
(IV-B).  As  with  Strategy  II-B.  IV-B  is 
preferable,  provided  that  a  suitable  existing  KLS 
COS  can  be  found. 

Strategies  III  asd  IV  share  aa  isportant 
advantage:  tbe  ability  to  connect  insecure  DOS 

bests  to  the  SDOS.  There  will  always  be  core 
specialized  hosts,  such  as  very-high-speed  CFOs, 
or  LISP  cacbices,  whose  use  is  essential  to  the 
success  of  the  spplication.  but  which  are  unlikely 
to  ever  have  a  KLS  operating  system.  The  access 
cacbine  approach  allows  for  connection  of  such 
hosts  to  the  SDOS. 

Strategy  II  has  the  serious  disadvantage  of 
loss  of  heterogeneity.  This  scans  that  the  entire 
SDOS  rust  be  cosposed  of  one  type  of  CPU,  running 
one  KLS  COS.  All  investsent  in  existing 
application  is  lost,  unless  they  can  be  ported  to 
tbe  new  COS.  Ko  provision  is  r ait  for  connecting 
specialized,  insecure  hosts  to  the  SDOS.  (Porting 
SDOS  to  several  KLS  COSs,  and  possibly  vriting  KLS 
COSs  for  several  types  of  CPU,  would  be 
prohibitively  expensive.) 


Strategy  17  provides  fer  heterogeneity 
without  incurring  the  cost  cf  S3C5  (and  possibly 
CSSi  development  for  several  different  Cl*. 
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Given  tie  above  analysis  prodsced  during  tie 
Concept  Exploration  Phase,  tie  next  phase  cf  tie 
COS  development  is  to  take  these  results  and 
attempt  to  Demonstrate  and  Validate  ties  by 
developing  a  33  prototype. 

33  rears  that  the  TC3  containing  tie  security 
mechanism  rust  he  isolated  from  the  rest  cf  the 
operating  sjstes  and  nurt  be  mall  enough  to  be 
subjected  to  analysis  and  tests.  It  rest  enforce 
mandatory  and  discretionary  access  controls  and 
assure  object  reuse.  It  rust  support  a  trusted 
cccnnicitiea  path  between  itself  and  users  for 
use  when  a  positive  7C3-to-user  correction  is 
required,  such  as  at  login.  It  rust  record  and 
maintain  audit  data.  A  covert  channel  asaysis 
rust  be  conducted  and  a  determination  made  of  the 
caxfnnn  bandwidth  cf  each  identified  channel. 

The  security  policy,  formal  model,  and 
detailed  tcp-level  specification  from  tbe  first 
effort  will  be  refined,  and  an  informal  proof  will 
be  produced  to  shew  that  the  implemented  7C3 
corresponds  to  the  DUS. 

The  7C3  must  also  provide  cetvcix  security 
services  in  tbe  areas  of  communications  integrity, 
assured  service,  and  compromise  protection. 

At  tbe  same  time,  the  SDOS  rust  provide  tbe 
distributed  operating  system  functional  services 
described  in  the  previous  presentation. 

Proposals  for  this  effort  are  currently  (June 
1938)  being  evaluated.  Ve  hope  to  have  contract 
award  by  the  end  of  September  1988  and  the 
demonstration  by  January  1991. 

SPZCIFICATION/VERIPICATION  TECHNOLOGY 

Tbe  second  major  thrust  in  our  secure 
distributed  systems  research  and  developsent 
program  is  in  the  area  of  specification  and 
verification  technology.  This  area  includes  the 
development  of  tools  to  handle  distributed  systea 
properties,  integration  of  security  engineering 
into  tbe  software  developsent  life  erde,  and  the 
accreditation  of  systems. 

TOOLS 

Current  specification  and  verification 
methodologies  do  not  adequately  handle 
characteristics  inherent  in  distributed  systems 
such  as  temporal  properties,  fault  tolerance,  and 
adaptation.  A  process  can  fail  to  make  progress 
because  it  is  continually  bypassed,  or  starved,  by 
the  scheduler. 

A  group  of  processes  can  fail  to  make 

progress  because  each  is  waiting  for  one  or  more 

of  the  others  to  take  some  action  and  thus  they 

become  deadlocked.  A  process  can  fail  to  make 

progress  when  it  continually  chooses  to  do 
internal  actions  and  stops  attempting  to 
communicate  with  its  environment.  This  ;s  called 
divergence. 

A  system  cf  one  or  more  processes  is 

non-determinictic  if  the  trace,  or  history,  of  its 


ectfow  CKszet  be  jrdicttd  with  certainty  from 
the  trxce  cf  it*  i^s».  Ibis  ca  c*^<  preblos 
it  *7=cbre=iricj  processes  ci  with  race 
conditions.  viere  tbsr  tsisj  of  sdefsler  :e;s«*tt 
;rodcces  *  siteatiea  similar  to  the  starvaticm 
condition. 

Is  battle  nanagtsent,  the  timing  of  crests 
will  be  *  critical  factor.  It  =*y  be  desirable  to 
specify  that  test  process  vill  take  priority  ever 
otter*.  or  that  ease  event  must  occur,  or 
earpiece,  within  a  certaia  length  cf  tise. 

Under  one  ZADC  effort,  the  contractor  ha* 
bees  investigating  the  feasibility  of  using  the 
*t*re-tr*s*itica  model  augmented  with  tenporal 
logic  for  specifying  the  tenporal  properties 
requirement*  of  distributed  xysters  (8). 

Fault-tolerance  is  a  term  readily  applied  to 
hardware  and  is  often  expressed  a* 
neau-tise-to-failcre,  which  is  greatly  influenced 
by  environmental  factor*.  A  measure  of 
faalt-tole~ance  v&ich  depend*  only  on  the  systes 
design  would  be  preferred  for  a  seccre  systes.  VTe 
contend  that  there  are  two  basic  approaches  to 
generating  the  fault-tolerance  specification  for  a 
systes. 

The  first  subsumes  the  fault-tolcrance 
properties  into  other  correctness  concern*.  One 
then  verifies  that  the  systes  produces  correct 
behavior  even  in  the  presence  of  certain  kinds  of 
faults.  Thus  the  specifications  for 
fault-tolerance  take  whatever  fora  the  other 
correctness  requirements  take. 

Toe  second  approach  to  fault-tolerance 
specification  attespt s  to  isolate  the 
fault-tclerance  property  froa  other  correctness 
concerns.  A  systes  is  fault-tolerant  if  its 
behavior  in  the  presence  of  faults  is  acceptably 
equivalent  to  its  behavior  without  thes.  A 
cccparisco  of  possible  behavior  i*  needed,  rather 
than  a  focus  on  the  correctness  of  any  one 
particular  behavior.  Using  this  second  approach 
for  forsal  verification  will  not  necessarily 
require  that  other  correctness  properties  be 
additionally  verified.  This  is  an  important 
advantage  of  this  approach  since  the  costs 
involved  in  producing  formally  verified  software 
increase  with  the  number  of  independent  properties 
to  be  proved,  and  these  costs  can  be  significant. 

The  contractor  working  this  problem  has 
produced  a  formal  correspondence  between 
fault-tolcrance  specifications  produced  under  the 
second  approach  and  specifications  for  multilevel 
security  that  can  feed  into  tools  development 
efforts  (9l. 

The  third  distributed  system  characteristic 
we  are  investigating  is  adaptation.  Adaptation  is 
desirable  to  guirantee  survivability  cf  mission 
critical  functions.  The  loss  or  addition  of 
system  modes  or  processing  components  will  result 
in  system  reconfiguration  or  reconstitution. 
During  battle,  timely  response  may  become  more 
important  than  secrecy.  These  types  of  changes 
are  impeded  in  conventional  security  policies 
where  any  chango  requires  a  new  specification  and 
reverification. 

One  study  effort  that  is  currently  in 
progress  is  investigating  how  such  changes  in 
policy  are  allowable  (10] .  The  goal  is  to  be  able 
to  call  a  system  secure  for  all  the  different 


policies  tsder  which  the  system  may  operate,  and 
if  the  actual  charge  between  policies  is  made 
securely. 

Existing  automated  tools  for  the  formal 
specification  and  verification  cf  secure  systems 
are  designed  for  single-site  systems.  As 
mentioned  before,  they  do  mot  adequately  handle 
characteristics  inherent  in  distributed  systems. 
Kor  do  they  provide  features  found  in  sost 
software  engineering  environments  or  database 
design  tools. 

based  on  a  study  of  existing  tool s  and  the 
requirements  of  distributed  systems,  we  would  like 
to  bring  together  the  best  of  these  three 
disciplines  in  a  single.  integrated  Secure 
Distributed  System  Designer's  Workbench  (11], 
Without  such  a  workbench,  verified  distributed 
system  design  is  not  possible,  or  at  best,  can  be 
done  for  only  relatively  simple  systems. 

Some  candidates  for  specif ication/- 
verificatica  tools  include  TED,  a  universal 
Theorem  Prover  Editor  developed  by  the  University 
of  Illinois,  the  Enhanced  Hierarchical  Development 
Methodology  being  developed  by  SRI  International, 
and  the  Gypsy  Verification  Environment  developed 
at  the  University  of  Texas  at  Austin. 

Possible  candidates  for  software  engineering 
tools  include  SR  (Synchronising  Resources),  a 
concurrent  programming  environment  developed  at 
the  University  of  Arizona,  and  PolyAnna.  a 
high-order  specification  language  based  on  Anna,  a 
language  for  annotating  Ada  programs. 

Possible  candidates  for  database  design  tools 
include  DDEW/DBD,  the  Database  Design  and 
Evaluation  Workbench/Database  Designer  developed 
at  Coeputer  Corporation  of  America.  ATV,  the 
Abstract  Database  Transaction  Programming  Language 
Transaction  Verifier  developed  at  the  University 
of  Massachusetts  at  Amherst,  and  Excelerator 
developed  by  Index  Technology,  Inc. 

SOFTWARE  DEVELOPMENT 

Software  is  rapidly  becoming  the  larger  part 
of  the  cost  of  major  command  and  control  systems. 
As  a  result,  software  development  standards  such 
as  2167A  (12)  have  been  developed  to  ensure  that 
software  meets  its  requirements.  Such  standards, 
however,  do  nor  include  provisions  for  providing 
assurance  that  the  software  meets  the  security 
requirements  as  per  the  TCSEC.  Nor  is  there  any 
guidance  as  to  how  the  two  standards  are  to  be 
used  in  concert. 

One  RADC  contract,  which  is  investigating 
software  life  cycle  issues  with  respect  to 
security  requirements,  has  identified  eight 
leverage  points  in  the  software  development 
process  that  appear  to  have  critical  impact  on  the 
security  of  large  command  and  control  systems 
(13).  These  are  visibility,  protocols, 
downloading,  configuration  .^ntrol,  monitoring  and 
measurement,  environment,  communication,  and 
verification. 

Visibility  is  especially  critical  during  the 
specification  and  design  phases.  Security 
requirements  are  usually  in  competition  with  other 
requirements  such  as  functionality  and 
performance.  Security  requirements  are  often  not 
visible  at  critical  decision  times,  *;incc  there  is 
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so  established  tracking  process  during  the 
software  development  process-  Visibility  is 
farther  complicated  by  the  fact  that  there  ray  be 
differest  cccstitueacies  for  different  seccrity 
requirements.  That  is,  one  agency  say  be 
primarily  interested  in  assuring  confidentiality 
with  little  concern  about  integrity  or  assured 
service.  while  another  agency  say  be  sore 
interested  in  assured  service.  One  way  to  ensure 
that  security  requirements  have  appropriate 
visibility  is  to  establish  a  security  review  board 
early  in  the  process,  which  is  composed  of 
representatives  frea  all  the  user  agencies.  It  is 
also  important  to  sake  an  early  determination  of 
whether  the  security  requirements  are  within  the 
state-of-the-art  or  not,  which  could  have 
unexpected  impact  on  cost,  schedule,  or 
performance. 

Because  C2  systems  of  the  future  will  be 
highly  distributed,  communication  will  be  at  the 
heart  of  the  system.  Consequently,  protocols  will 
be  pervasive.  Some  standards  already  exist,  such 
as  TCP/IP  and  ISO/OSX,  but  it  is  likely  that  new 
protocols  will  need  to  be  developed,  which  is  a 
difficult  process.  Protocols  provide  bridges 
across  system  and  organizational  boundaries,  which 
makes  them  vulnerable  to  security  attacks.  to 
facilitate  security  analysis  at  the  protocol 
level,  it  is  important  to  identify  protocols  early 
in  the  design,  put  protocol  development  under 
configuration  control,  subject  protocols  to 
security  design  review,  and  subject  protocols  to 
security  analysis,  testing,  and  verification. 

One  of  the  most  vulnerable  times  in  the 
system  development  process  is  at  downloading, 
i.e.,  changing  over  to  a  new  version  of  the 
system.  The  new  version  may  be  faulty  resulting 
in  loss  of  communication  or  frequent  restarting. 
Since  it  is  virtually  impossible  to  distribute  new 
versions  of  the  system  to  all  nodes  at  exactly  the 
same  time,  different  nodeq  will  be  running 
different  versions.  If  those  versions  arc 
incompatible,  the  result  will  be  a  partition  of 
the  system.  The  downloading  channel  itself  is 
subject  to  penetration.  Thus,  special  attention 
must  be  given  to  ensuring  that  only  authorized 
sources  are  permitted  to  download  software. 
Conversely,  ovorly  suspicious  nodes  will  refuse  to 
be  controlled,  and  thus  downloading  cannot  be 
accomplished.  Consequently,  special  attention 
needs  to  be  given  to  the  development  of 
downloading  mechanism  and  proceures  to  ensure  that 
they  do  not  contain  security  flaws  and  to  ensure 
that  certification  and  accreditation  are 
maintained. 

Two  problems  exist  with  respect  to 
configuration  management  which  impact  the 
specification,  implementation, 
certification/ accreditation,  and  maintenance 
phases  of  the  system  development.  One  has  to  do 
with  the  system  complexity  and  the  other  with  its 
sensitivity.  A  C2  system  is  a  collection  of 
subsystems.  As  such,  no  configuration  control 
system  currently  exists  to  handle  compound 
systems.  Once  software  has  been  entered  into  the 
baselino  configuration,  it  is  not  easily  removed. 
This  is  true  for  tools,  such  as  compilers,  as  well 
as  pieces  of  code.  Few  verified  tools  exist. 
Consequently,  it  is  practically  impossible  to 


guarantee  the  correctness  of  all  tools  emd 
components  used  in  the  software  development 
process.  The  resnlt  is  a  false  sense  of  integrity 
frem  careful  control  of  what  may  be  an  initially 
flawed  module.  To  minimize  these  vulnerabilities, 
it  is  important  to  define  an  overall  configuration 
control  policy,  review  the  procurement  of  tools 
for  vulnerabilities,  and  consider  using  improved 
versions  of  tools  as  they  become  available  during 
the  software  development  process. 

An  important  feature  of  a  C2  system  to  ensure 
health  of  the  system  is  the  monitoring  and 
measurement  functions.  such  as  message 
acknowledgements.  These  feedback  channels, 
however,  nay  violate  the  security  policy.  To 
avoid  this  conflict  of  interests,  it  is  vital  that 
the  monitoring  and  measurement  functions  be 
designed  into  the  system  from  the  beginning  and  be 
subjected  to  the  same  kind  of  security  analysis  as 
the  other  communications  paths. 

From  a  software  security  point  of  view,  it  is 
desireable  to  use  the  most  qualified  people  and 
the  strongest  set  of  tools.  From  a  personnel 
security  point  of  view,  it  say  be  necessary  to  do 
software  development  in  a  closed  environment  with 
a  limited  set  of  (cleared)  people.  Consequently, 
there  is  a  delicate  balance  between  security 
derived  frem  control  over  personnel  and  the 
quality  of  the  environment  in  which  the  software 
development  takes  place.  There  is  a  similar 
tension  between  the  mandated  use  of  Ada  (tm)  and 
the  lack  of  Ada  support  tools.  To  maintain  a 
proper  balance,  it  is  essential  that  the  selection 
of  computing  equipment  and  the  associated  software 
development  environment  be  reviewed  prior  to 
inclusion  in  the  software  development  plan  and  the 
software  test  plan,  and  any  limitation  adequately 
justified  with  respect  to  the  integrity  and 
confidentiality  of  the  code. 

Development  of  large,  complex  C2  systems  will 
necessarily  be  distributed  across  distance  and 
organizations.  Shared  access  to  documents  permits 
better  version  control  and  peer  review. 
Communication  between  developers,  there,  is 
crucial  to  avoid  divergence,  but  is  often 
inhibited.  Formal  and  informal  reviews, 
workshops,  and  networking  can  facilitate  this 
communication.  The  networking  can  take  many  forms 
including  electronic  nail  and  teleconferencing  via 
asynchronous  forums  and  synchronous 
"telemeetings". 

Security  enaylsis  of  large  software  nodules 
is  too  tedious  to  do  manually.  Consequently, 
verification  of  the  complete  correctness  of  a  C2 
system  is  well  beyond  the  state-of-the-art. 
However,  automated  formal  verification  is 
potentially  within  the  state-of-the-art  for 
certain  aspects  of  the  code,  such  as  information 
flow  properties  and  starvation  states.  These  arc 
important  to  ensure  that  there  are  no  unintended 
signalling  channels  and  that  the  system  will  not 
cease  to  function  for  lack  of  included  in  the 
software  development  plan  for  critical  sections, 
or  functions,  and  for  selected  properties,  such  as 
fault-tolerance. 

ACCREDITATION 

Systems  that  process  classified  information 
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must  go  through  a  security  accreditation  process 
to  determine  *f bather  sufficient  procedures  end 
necha  sites  are  in  place  to  protect  the 
information.  The  accreditation  decision  is  made 
by  a  Designated  Approving  Authority  (DAA)  who  is, 
or  acts  on  behalf  of,  the  operational  entity 
responsible  for  the  system. 

The  DAA  is  cost  eftea  the  "cvner"  of  the 
systea,  including  the  data  it;  processes,  and  cust 
possess  the  ability/  to  control  the  resources 
necessary  to  maintain  the  validity  ©£  the 
accreditation.  The  DM  begins  with  inputs  form 
the  system  certifiers,  who  have  evaluated  the 
systea  against  some  standard  criteria  such  as  DOD 
5200. 23- STD ^  "DCD  Trusted  Computer  Systea 
Evaluation  Criteria",  and  gives  it  a  rating.  The 
certifying  agency  is  usually  NSA. 

The  DAA  cust  then  compare  and  balance  the 
mission  functional  requirements  against  the 
security  assurance  provided  by  the  systea.  Are 
the  assurances  necessary?  Are  they  adequate?  Do 
they  ispede  other  mission  critical  functions?  How 
much  risk  is  the  DM  willing  to  take  to  ensure 
other  functional  capabilities?  In  the  end,  it  is 
a  management  decision  weighing  acceptable  risk  and 
acceptable  functionality. 

The  complexity  of  a  large,  ccaplex  command 
and  control  system  and  the  amount  of  interaction' 
with  systems  outside  of  its  operational  control 
make  it  difficult  to  identify  a  single  overall 
DM.  The  accreditation  of  subsystems  and 
components  within  a  large  command  and  control 
system  itself  may  involve  multiple  accreditors, 
representing  the  different  organizations  involved 
in  specific  subsystems.  The  determination  of 
relationships'  among  the  various  accrediting 
authorities  and  the  subsystem  DMs  is  vital  to  the 
success  of  the  accreditation  program  and  must  be 
resolved  early  in  the  systea  development  process. 

The  fact  that  most  command  and  control 
systems  are  developed  in  an  evolutionary, 
incremental  fashion  further  complicates  the 
accreditation  process.  Current  procedures  dictate 
that  every  change  requires  recertification  and, 
thus,  reaccreditation. 

Accreditation  is  also  complicated  by  the  fact 
that  the  resources  aay  be  distributed  among  fixed 
ground,  mobile,  and  space-abased  facilities.  In 
particular,  some  form  of  remote  upgrade  and 
maintenance  is  needed  for  space-based  and  other 
unmanned  components.  Using  8n  electronic  remote 
upgrade/maintenance  mechanism  creates  both  great 
technical  and  managerial  concerns  with  respect  to 
accreditation.  Management  of  changes  authorized 
for  human- accessible  systems  is  complicated  but 
can  usually  bo  handled  procedurelly.  Management 
of  changes  accomplished  via  an  electronic 
mechanism  becomes  quite  complex.  The  key  to  tho 
problem  is  knowing  that  the  change  made  to  the 
system;  was  indeed  the  authorized  change.  It 
cannot  be  tracked  procedurally. 

Another  accreditation  issue  is  that  of 
adaptive  policies,  which  were  discussed  earlier 
and  present  accreditation  problems  similar  to 
evolutionary  development  and  distribution  of 
resources. 

/vcMevcments  to  date  on  the  accreditation 
study  effort  includ  identification  of  issues  {14} 
and  the  development  of  a  framework  for  developing 


an  accreditation  plan  based  ca  ts  abstract  system 
architecture  and  an  applitari^a^specific 
interpretation  of  DOD  5200.28-STD  (15). 

? 

DATABASES 

Database  systems  are  tsa  integral  component  of 
currewt  and  future  C2  information  and  decision 
support  systems.  It  is  predicted  that  today** 
military  commander  or  decision-maker  will  rely 
upon  dat set  and  information  stored  in  electronic 
databases  for  battle  management  functions.  In. the 
truest  sense  of "the  word,  database  technology  has 
advanced  to  the  point  where  it  is  being, infused 
into  operationally-oriented  system  environments. 
As  more  and  more  data  is  stored  in  databases  the 
problem  of  protecting  data  and  information  arises. 
The  recent  West  German  hacker  sccndal  Ic  proof 
that  our  nation's  computer  and  database  systems 
are  inadequately  protected"  against  hostile  and 
malicious 1  attacks. 

Within  the  Air  Force,  as  in  the  Department  of 
Defense  as  a  whole,  the  number  of  computerized 
databases  in  use  is  increasing  116].  A  number  of 
missions  which  use  database  management  systems 
(DBMS)  technology  are  involved  with  processing  at 
least  sene  classified  data.  The  natural  mixture 
of  data  within  these  systems  is  such  that  the 
various  data  may  be  classified  at  different 
security  levels.  L 

The  problea  of  handling  multilevel  data 
within  the  DBMS  environment  is  compounded  by  the 
fact  that  typical  commercial-off-the-shelf  (COTS) 
DBMS's  arc  not  built  with  adequate  controls  to 
enforce  DOD  security  doctrine.  The  current  method 
by  which  most  organizations  control  access  to 
information  is  known  as  "system-high"  processing 
mode.  In  this  node,  all  personnel  who  have  access 
to  any  database  containing  some  restricted  data 
must  be  cleaved  to  see  all  of  the  information  in 
the  system.  It  is  a  well-known  fact  that 
"system-high"  ic  both  vulnerable  and  expensive. 

In  response  to  the  aforementioned  problems, 
the  Air  Force  Study  Board  established  a  Summer 
Study  on  Multilevel  Data  Management  Security.  The 
study  was  conducted  12-30  July  1982  at  Woods  Hole, 
Massachusetts.  Group  1  identified  three 
architectures  with  the  potential  to  meet  security 
and  performance  requirements  for  the  near-term. 
The  different  architectures,  Integrity-Lock, 
Kernel ited,  and  Distributed,  employ  tho 
technologies  of  cryptographic  sealing,  secure 
operating  systems,  and  back-end  DBMS's, 
respectively.  Group  2  of  the  Summer  Study  dealt 
with  the  problem  of  constructing  a  secure  military 
tivssa go  system.  Group  3  of  the  Summer  Study  had 
tho  charter  to  investigate  long-term  solutions  to 
the  DBMS  security  problem.  Group  3 
recommendations  included  developing  a  security 
model  whereby  data  i6  protected  at  the  view  level. 
The  group  investigated  potential  strategies  for 
dealing  with  inference  and  aggregation  and  also 
began  studying  tho  utility  of  knowledge 
engineering  techniques  to  assist  in  maintaining  a 
secure  DBMS  processing  environment. 

Since  1974,  the  Romo  Air  Development  Center 
(RADC)  has  been  very  active  in  sponsoring  research 
programs  aimed  at  designing  and  prototyping  a 
family  of  trusted  DBMS's.  The  research  program 
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sponsored  by' RAD C  can  be  logically  partitioned 
into  four  major  arearf  of  emphasis: 
architectures/mechanisms,  and*  *sd  tools, 

outosat*fd/expert  database  design  tools,  and  data 
integrity. 

ARCHIT2CTURES/K2CHANISKS 

Early  RADC- work  ia  the  architectures  area 
include  tbe  Hwke-Schaefer  model  [17J,  tLa  System 
Development  Corporation  "Secure  D3KS  ^techniques" 
effort  [18] ,  ;jcd  the  Integrity-Lcck  prototype. 
The  Hinhe-Schaefer  vork  vis  a  landmark  study  ia 
which  a  cecure  relational  DBMS  was ‘designed  to 
operate  on  the  secure  KGLTXCS  operating  system 
kernel.  DBMS  relations  weie  classified  at  the 
column  (attribute)  level  with  each  attribute 
decomposed  into  MJLTICS  protection  segments. 

Concurrent  with  the  initiation  of  the<  1982 
Air  Force  Summer  Study,  RADC  signed  &  three-year 
contract  with  Systea  Development  Corporation  to 
develop  a  secure  DBMS  design  methodology.  The 
effort,  entitled  "Secure  DBMS  Techniques", 
culminated  in  a  manual,  top-down  design 
methodology  providing  a  systea  designer  with  a 

toe1  for  nakicg-,high-Ievel  architectural  choices 
independent  of  any  security  policy  or  COTS  DBMS 
product.  The  final  report  of  the  effort 
identifies  eight  generic  secure'DBMS  architectures' 
and  eight  key  decision  attributes  with  their 
associated  metrics.  The  decision  attributes  are:- 
ability  to  counter  security  yulnerabilites, 

relative  performance,  simpl4city  of  thisted 

software,  simplicity  of  untrusted  software, 

minimizing  number  of  aachines/disks  per  security 
level,  security  policy  support,  ability  to  support 
user  authentication  within  the  DBMS,  and 
minimization  of  R&D.  The  overall  design 
aethodology  allows  a  designer  to  specify  key 
decision  and  design  criteria  with  the  output  being 
a  family  of  candidate  architectures  which  aeet 
certain  critical  design,  criteria.  . 

The  Integrity-Lock  prototype  effort  [19]  was 
a  20-oonth  contract  with  the  MITRE  Corporation. 
In  the  Integrity-Lock  concept,  a  database  entity, 
either  a  relation,  tuple,  attribute,  or  field,  is 
tagged  with  an  unforgeablc,  encrypted  checksum  or 
signature  as  the  entity  is  input  into  the 
database.  When  &  database  entity  is  retrieved,  it 
is  taken  freo  the  disk  and  passed  to  a  trusted 
coeputational  component  which  recalculates  the 
entity* s  checksum  to  ensure  that  the  data  has  not 
been  changed  or  tampered  with.  MITRE  developed  a 
proof-of-concept  prototype  by  retrofiting  the 
7ntegrity-Lock  mechanism  onto  a  COTS -DBMS.  Based 
upon  the  initial  proof-of-concept,  tho 
Integrity-Lock  is  being  iepleaented  at  an 
operational  Air  Force  flite. 

An  outgrowth  of  the  early  RADC-cponsored 
research  in  architectures  as  well  as  the  positive 
results  of  the  1982  Air  Force  Summer  Study  led  to 
the  research  in  four  other  axchitectural 
approaches:  secure  distributed  data  views 

(SeaView),  LOCK  data  views,  secure 
entity-relationship  DBMS,  and  secure  back-end 
DBMS.  In  August  1985,  RADC  awarded  a  contract, 
entitled  "Secure  Distributed  Data  Views" 
(SeaView),  to  SRI  International  and  their 
subcontractor,  Geaini  Conputers,  to  design  a  Class 


A1  secure  DBMS  where.' data  is  accessed  through  user 
views.  Thus  far  in  the' effort  the  contractors 
have  produced  a  security  policy,  formal  model,  and 
formal  t op  level  specification  (F7I45)  for  an  A1 
secure  relational  DBMS  [20,  21,  22 J.  Work  is 

progressing  on  the  developaent  -  ©f  an 
implementation  specification  and  proof-of-concept 
demonstrations 

The  SeaView  architecture  is  basically  a 
two-level  architecture.  At  the  top-level  is  tbe 
extended ‘trusted  computer  base  (TC3).  which  is 
responsible  for  enforcing  discretionary  access 
control  and  consistency  policies  for  multilevel 
relations.  The  underlying  layer  of  the  SeaView, 
architecture  is -the  general-purpose  TC3  which  is 
responsible  for  ■'enforcing  access'*  control  policies 
on  storage  objects.  Simplistically,  the 
abstraction  of  aultilevel  user  views  and  database 
relations'  is  decomposed  into  single-level  storage 
objects  and.  .  stored  under  the  auspices  and 
protection  of  the  tamperproof general^  purpose 
TCB.  .The  demonstration  systea  plans  to  use  Oracle 
as  'the  database  engine  and  GEMSOS  as  the 
underlying  TC3. 

SeaView's  major  accomplishments  include:  (1) 
a  security  policy  and  policy  interpretation  thst 
define  what  security  means  for  a  database  systea. 
(2)  a  multilevel  relational  data  model  that  can 
accommodate-  element-level  granularity  of  security 
labels,  (3)  a  foreal-model  that  defines  security 
properties  that  define  8  secure  state,  and 
transition  properties  that  further  restric. 
allowable  transitions,. (4)  initial  definition  of 
multilevel  SQL  database  language,  (5)  rules  for 
determining  the  appropriate  label  for  derived 
data,  (6)  rules  for  labeling  incasing  data,  and 
(7)  tho  formulation  of  the  concept  of 
polyinstantiation  which  refers  to  the  simultaneous 
existence  of  multiple  data  objects  with  the  same 
namo,  where  tho  multiple  instantiations  are 
distinguished  by  access  class,  thereby  preventing 
low-level  users  from  inferring  the  existence  of 
high-level  objects. 

In  December  1985,  RADC  swarded  a  contract, 
entitled  "LOCK  Data  Views",  to  Honeywell  to  design 
a  Class  A1  securo  DBMS,  for  tho  Logical 
Coprocessing  Kernel  (LOCK).  Tho  LOCK  provides  a 
platform  upon  which  tho  secure  DBMS  will  be,  built. 
Simply,  the  LOCK  can  bo  described  as  a  general 
purpose  A1  architecture  which  provides  for 
security  enforcement  in  a  hardware  kernel.  Since 
LOCK  is  providing  the  foundation  for  tho  secure 
DBMS "application,  it  is  believed  that  the  amount 
of  verified  DBMS  code  con  be  kept  to  a  oinoun. 

The  secure  DBMS  architecure  for  the  LOCK  is 
structured  such  that  all  access  to  the  database  is 
through  user  views.  The  heart  of  the  LOCK  Data 
Views  architecure  is  the  pipeline.  The  three 
systea  pipelines  are  the  query/response,  data 
input/upda.e,  and  database  def  mition/metadata 
pipelines.  These  pipelines  combine  with 
discretionary  and  mandatory  access  control 
mechanisms  to  ensure  the  trustworthiness  of 
database  processing.  The  LOCK  Data  Views  effort 
has  produced  a  security  policy  and  implementation 
specification  with  work  continuing  on  the  formal 
model  and  FTLS. 

The  secure  entity-relationship  (E-$)  data 
model  effort  completed  m  May  1988.  The 
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contractors,  AOG  Systems  Corporation  and  Gemini 
C^mters.  developed  a  security "  polity,  formal 
sodcl,  descriptive  top  level  specif icaticn,  and 
functionaV  description  for  a  Class  B3  secure  DBMS 
(23  J.  7fc&  cote  of  this  effort  was  the  E-R  data 
model.  This,  nod el  is  a  semantic  data  nod el  and 
describes  the  real  world  in  tersii.  of  entities,, 
attributes,  and  relationships. 

An  entity  is  a  data  structure  which  describes 
some  thing,  concept.,  or  phenomenon  which  can  be 
naned.  ^  An  attribute  pr  property  -  is 
characteristic  cf  an  entity.  For  example, -  the 
-entity  EMPLOYEE  could:  have  the  following- 
properties:  ,f.  ID#,  HAKE,  SALARY,  and  RANK. 
Fxnally^.a  relationship  is  a  data  structure  which 
describes  an  association,  between  entities. ,  For 
example,  a  simple  .E-R  database  could  have  a 
relationship  WORKS-ON  which  associates  employees 
ytnd  the*'projects  they  work  on. 

The  effort  culminated  with  a  demonstration  of 
a  sicple  E-R  DBMS  on  top  of  the  CEMSOS  TCB'.  The 
demonstration  portrayed  the  functionality  of  the 
data  code*  and  how  a  user  could  add,  delete,  and 
codify  various-  E-R  data  structures. 

Unisys  Corporation  is  under  contract  with 
RADC  to  develop  a  security  policy,  tozcsl  model, 
DTLS,  and  implementation  specification  for  a  Class 
B3  secure >DBKS  architecture.  This  effort  is  based 
or/  the  oultiple  back-end  DBMS  approach.  In  this 
approach,  a  cultilevel  database  is  physically 
segregated  ea  different  back-end  database 
machines.  The  backbone  of  this  architecture  is  a 
secure  local  area  network  with  all  access  to  the 
database  passing  through  users  workstations 
interfaced  to  the  network. 

For  example,  a  us^r  at  a  workstation  subaits 
a  multilevel  query  or  request  to  the  workstation. 
The  workstation  passes  the  query  to  a  trusted 
frbnt-cnd  conputer,  such  as  a  Gemini  processor, 
which  then  examines  the  que;y  and  decoaposes  it 
into  its  single-level  constituent .  parts.  The 
singe-level  subqueries  arc  then  passed  to  the 
appropriate  back-end  DBMS’s  where  partial  results 
are  computed.  Partial  results  are  brought  back 
into  the  front-end  trusted  processor  .where  fins! 
query  processing  and  packaging  occurs. 

This  effort  is  based  upon  COTS  components  and 
it  if  believed  that  this  architecture  represents  a 
feasible,  viable  approach  (24,  25].  A  major  issue 
with  this  approach  includes  how  to  handle  the 
interaction  of  DBMS,  network,  and  processor  TCB’s. 
It  is  also  important  to  examine  how  data 
replication  issues  impact  multilevel  query 
processing  and  update  capabilities. 

EMERGING  TECHNOLOGIES 

In  addition  to  the  architectural  research 
programs  descibed  above,  two  emorging  technologies 
come  to  mind  which  have  direct  applicability  to 
the  military  database  environment.  Each  area 
warrants  consideration  in  the  context  cf 
multilevel  security. 

First,  is  the  rapidly  advancing  technology  of 
object-oriented  databases.  Object-oriented 
databases  are  touted  as  being  capable  of  meeting 
the  military's  future  database  processing  needs, 
especially  in  terms  of  handling  multimedia  data 
types  such  as  text,  images,  time,  knowledge,  and 


conventional  data. 

The  second  area  cf  importance  is  that  of 
kncvledge-base  management  systems  (KBKS). 
Numerous  research  has  been  conducted  by  DOS  in  the 
area  of  KB  MS's  and  some  systems,  such  as  the 
Navy's  Force  Requirements  Expert  System,  are 
beginning  to  see  operational  use.  If  KB MS 
technology  is  to  be  infespd  into  DOD  operational 
environments  it  is  important  that  security  issues 
be  examined  and  that  security  be  designed  into 
systems  from  the  beginning. 

AUDITING 

In  the  area  of  auditing  for  secure  DBMS 
processing  environments,  very,  little  work  has  been 
done  to  date.  Auditing  is  important  in  terms  of 
providing,  the  capability  to  contact  Independent 
review  and  examination  of  system  records  and 
activities  126],  Auditing* is  a  true  challenge  in 
the  database  environment  with  its  numerous 
transactions  and  overall  dynamism.  For  a  database 
system  to  be  considered  secure  it  must  contain  an 
audit  capability  that  not  only  captures  ail 
security-relevant  events  and  transactions  but  also 
provides  a  security  officer  with  the  facilities 
for  reducing  the  otherwise  voluminous  audit  trail 
into  a  coherent  and  understandable  system  history. 

RADC  believes  that  the  time  is  ripe  for 
developing  prototype  audit  systems.  Technology 
advances  in  the  areas  of  workstations,  graphics, 
windows,  and  expert  systems  provide  the  technology 
baseline  for  designing  snd  evaluating  audit 
software.  An  important  issue  in  the  development 
of  a  reliable  and  efficient  audit  system  is  how  to 
build  a  generic  audit  shell  with  extensible 
features  to  capture  application-specific  audit 
requirements. 

DATABASE  DESIGN 

Another  area  of  extreme  importance  is  that  of 
providing  Computer-Aided  Software  Engineering 
(CASE)  support  to  the  design  of  multilevel 
databases  (27).  The  exercise  of  designing 
databases  is  a  very  complex  process.  A  database 
designer  typically  performs  a  requirements 
analysis,  describes  transactions  ,.nd  functional 
dependencies,  and  finally  develops  conceptual  and 
logical  schemas.  The  total  process  is  extremely 
labor  intensive  and  error-prone.  When  one  factors 
in  the  implications  of  multilevel  security  into 
large-scale  military  databases  it  is  easy  to  sec 
that  the  potential  exists  for  making  mistakes  in 
the  database  design  which  could  lead  to  aggravated 
inference  and  aggregation  problems. 

Over  the  past  few  years,  RADC  has  sponsored 
research  in  the  area  of  automated  database  design 
tools,  specifically  the  Database  Design  and 
Evaluation  Workbench  (DDEW)  developed  by  Computer 
Corporation  of  America.  Recently  RADC  has  been 
involved  with  efforts  to  examine  the  use  of  expert 
systems  and  know ledge- engineering  techniques  to 
analyze  database  design  structures  for  inference 
and  aggregation  problems  (28). 

The  goal  of  the  RADC-sponsored  research  is  to 
design  a  set  of  tools  which  enable  a  database 
designer  to  logically  design  a  multilevel  database 
and  based  upon  both  the  security  requirements  of 
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the  environment  and  the  semantics  of  usage  to 
analyze  the  database  for  potential  security 
vulnerabilities. 

DATA  INTEGRITY 

"Tie  final  area  of  research  is  that  of  data 
integrity.  Data  integrity  means  cany  things  to 
cany  people.  In  a  C3I  environment,  data  integrity 
is  critical  since  polluted  or  maliciously  modified 
data  can  have  catastrophic  effects  on  the  outcoae 
of  a  mission.  As  part  of  KADC's  research  program 
in  the  architectures  and  mechanisms  area,  data 
integrity  issues  have  been  initially  investigated. 
However,  more  research  and  experimentation  is 
required  to  better  understand  how  data  integrity 
fits  into  the  secure  DBMS  environment. 

RADC  is  currently  examining,  in-house, -how- to 
te3t  various  data  integrity  mechanisms,  including 
polyinstantiation,  referential;  entity,  semantic, 
and  Biba  integrity.  The  results  of  RADC’s 
internal  investigation  yill  be  factored  into 
upcoming  architecture  prototype  contracts.  In 
terms  of  data  integrity  concerns,  the  concept  of 
polyinstantiation  stands  out. 

As  "stated  earlier,  polyinstantiation  is  the 
simultaneous  existence  of  multiple  objects  with 
the  same  name  at  different  access  classes.  The 
key  and  security  label  of  the  tuple  actually 
constitute  the  multilevel  key.  It  can  be  seen 
that  the  concept  of  polyinstantiation,  if 
implemented  in  a  secure  relation  DBMS,  can  result 
in  a  number  of  similar  tuples  visible  to 
high-level  database  users. 

This  situation  can  result  in  a  very  confusing 
view  of  the  database  for  a  high-level  user. 
Therefore,  user  interfaces  and  multilevel  query 
language  tools  must  be  developed  to  allow  a 
high-level  user  to  browse  a  set  of 
polyinstantiated  tuples  and  retrieve  the  correct 
result.  It  is  intended  that  all  of  the  integrity 
mechanisms  developed  by  RADC  architecture 
contractors  will  bo  extensively  tested  and 
evaluated  before  being  included  into  operational 
secure  DBMS  environments. 

CONCLUSION 

Command  end  control  systems  can  be  considered 
the  nerve  system  of  our  nation’s  armed  forces.  C2 
systems  are  necessary  in  all  environmental 
settings,  namely  peacetime,  crisis, 
anti-terrorism,  and  wartime  modes  of  operation. 
As  computer,  communication,  and  surveillance 
technology  continue  to  improve,  more  data  than 
ever  is  being  collected  and  stored  in  electronic 
information  systems.  With  an  increase  in  our 
ability  to  automate  military  decision-support 
systems  comes  an  increase  in  the  vulnerability  of 
the  critical  data  stored  and  processed  within  that 
system.  The  recent  West  German  hacker  incident  is 
visible  proof  that  our  nation’s  military  computer 
systems  are  vulnerable  to  hostile  attack.  Also, 
as  evidenced  by  the  Walker  spy  scandal  and  other 
similar  cases,  the  insider  threat  is  real. 

The  realization  that  a  threat  does  indeed 
exist  has  led  RADC  to  define  a  comprehensive 
security  R4D  program  in  the  technology  area  of 
distributed  systems.  This  program  deals  with 


distributed  operating  systems,  trusted  system 
engineering,  and  database  management.  Since  the 
information  stored  in  automated  information 
systems 'is  used  to  cake  critical  national  security 
decisions,  it  is  important  that  the  data  be 
available,  uncorrupted,  uncoaprcaised,  and 
correct. 

The  noted  military  strategist  Carl  von 
Clausewitm  developed,  in  the  1800's,  the  concept 
of  "friction"  in  war.  In  his  classic  book.  On  War 
[29j.  Clausewitz  states,  "Everything  is  very 
simple  in  war,  but  the  simplest  thing  is 
difficult.  These  difficulties  accumulate  and 
produce  a  friction  of  which  no  one  car.  form  a 
correct  idea  who  has  not  seen  war."  Friction  can 
be  viewed  as  the  uncertainty  of  war  based  upon 
unforeseen  occurrences,  situations,  or  phenomena. 
One  of  the  major  reasons  for  automating  our  C2 
systems  is  to  help  alleviate  this  friction. 

If  our  nation’s  C2  systems  are  to  meet  the 
goal  of  providing  correct  and  reliable  information 
to  decision-makers  and  thus  lessen  the  effects  of 
friction,  it  can  be  seen  that  the  characteristics 
of  confidentiality,  integrity,  and  availability 
become  just  as  important  as  other  system 
architecture  concepts  and  drivers.  In  conclusion, 
with  accurate  and  uncompromised  information 
in-hand,  cur  nations  key  strategic  and  tactical 
decision-makers  have  an  important  asset  by  which 
to  lessen  the  effects  of  friction  on  the  complex 
process  of  military  planning  and  decision  making. 
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ABSTRACT 

The  ASPEN  project  is  a  DARPA-sponsored 
multiprocessor  architecture  investigation, 
initially  focused  at  evaluating  the 
effectiveness  of  the  binary-tree  form  of 
multiprocessor  topology  at  a  broad  class  of 
structural  pattern  recognition  applications. 

Several  example  applications  have  been 
demonstrated  on  the  initial  processor 
designed  and  built  as  part  of  this  project 
including:  a)  several  real-time,  speech 
recognition  applications  (with  continuous 
speech  as  input),  b)  K-mcans  clustering,  and 
c)  several  kernels  of  linear  algebra  as  well  as 
linear  programming.  Other  applications 
studied  and  simulated  on  the  architecture 
include:  a)  bipartite  graph  match  problems, 
which  occur  in  sensor  fusion  and  target 
tracking,  and"  b)  synthetic-aperture-radar 
processing. 

Physical  realization  of  the  architecture  has 
resulted  in  the  highest  processor  density 
reported  in  the  literature,  viz:  2 
gigaflops/cubic  foot.  By  application  of  newer 
technology,  including  wafer-scale  packaging, 
a  40  gigaflops/cubic  foot  capability  is 
planned.  This  figure  of  merit  is  clearly 
significant  for  embedded  Command-and- 
Control  processors. 

INTRODUCTION 

Many  Command  and  Control  problems 
require  the  availability  of  very  fast 
computing  technology,  and  often  the 
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circumstances  mandate  tight  restrictions  on 
power,  volume,  and  weight.  Avionics  and 
space-based  applications  are  perhaps  the 
most  stressing  in  physical  constraints,  but 
these  parameters  are  important  in  any 
deployed  mobile  environment.  Indeed,  if 
the  premium  paid  to  achieve  compactness  is 
not  significant,  even  applications  in  a  benign 
environment  clearly  benefit  from  an  easily 
portable,  compact  processor  implementation. 
The  processor  technology  developed  as  part 
of  the  DARPA-sponsored  ASPEN  project 
provides  an  approach  to  meeting  these 
objectives  while  providing  a  very  powerful 
approach  to  implementing  many  of  the 
kernels  of  processing  required  for  CC 
decision  aids. 

The  kernels  of  processing  of  many 
application  areas  requiring  fast  embedded 
processors  are  amenable  to  solution  by  highly 
parallel  processor  architectures.  The  key  to 
understrnding  a  processor  architecture  is 
understanding  the  class  of  applications  at 
which  it  is  targeted.  A  brief  list  of 
application  drivers  for  the  ASPEN  project  is 
worthwhile: 

a.  Linear  programming  is  the  core  of 
many  allocation  problems,  and 
Gaussian  elimination  is  normally  the 
approach  for  solving  the  set  of 
simultaneous  linear  equations 
embedded  in  this  process.  A  technique 
for  achieving  an  N-fold  acceleration  of 
this  process  with  N  processors  is 
outlined  in  the  Applications  section. 

b.  Several  distinct  Command  and  Control 
applications  can  be  abstracted  as 
bipartite  graph  match  problems. 
Finding  the  optimal  mapping  of  the 
elements  of  one  set  (or  graph)  onto 
points  in  another  set  according  to  some 
cost  criteria  is  the  objective.  This  is 


exemplified  by  relating  two  or  more 
target  files  derived  from  two  different 
surveillance  sensors  i.e.sensor  fusion, 
or  may  involve  relating  objects 
detected  by  the  same  sensor  in 
successive  looks.  (Objects  detected  in 
successive  frames  of  an  IR  detector,  or 
in  successive  stages  of  a  mobile  tactical 
passive  sonar  survey  are  examples  of 
the  latter.)  For  these  and  many  other 
examples,  a  highly  parallel  processor 
structure  that  can  support  an 
associative', memory  mode  of  operation 
is  the  key  to  relating  large  sets  of  data. 
This  match  process  may  be 
implemented  by  distributing  the 
elements  of  one  set  among  several 
distinct  parallel  processors,  and  then 
broadcasting  elements  of  the  second  set 
to  all  processors  to  enable  performing 
simultaneous  match  operations, 
including  detection  of  a  "no  match” 
circumstance.  Unlike  the  classical 
associative  memory  in  which  some 
form  of  exact  match  is  sought,  any 
relationship  definable  by  a  stored 
program  can  be  used. 

c.  In  what  may  be  viewed  as  a  dual  to 
broadcasting  data  to  an  ensemble  of 
processors  for  fast  parallel  matches 
outlined  above,  the  fast  determination 
of  maximum,  minimum,  or  more 
generally  the  "k  best"  among  a  data  set 
is  a  key  kernel  in  many  CC  processing 
steps.  Assuming  the  elements  of  the 
data  set  arc  distributed  among  the 
parallel  processors,  the  max/min  search 
can  be  achieved  in  logarithmic  time 
with  a  binary  tree  topology,  and  the 
search  for  successively  ranked  elements 
ran  proceed  with  a  new  result  each 
instruction  cycle  if  proper  hardware 
and  software  capabilities  are  included. 
Rank  order  of  threat  evaluation  in 
fast-evolving  anti-aircraft  engagements, 
and  determination  of  the  k  best 
template  matches  in  support  of 
pursuing  multiple  hypotheses  in 
structural  pattern  recognition  are  two 
representative  examples  of  how  this 
operation  plays  an  important  role. 

d.  Gustering  is  an  essential  step  in  many 
applications  where  a  large  amount  of 


noisy  data  items  must  be  related.  EW 
and  large-area  passive  sonar 
surveillance  are  two  examples  of  where 
the  number  of  signal  detections  will  in 
general  be  much  greater  than  the 
number  of  platforms  generating  the 
signals.  Therefore/linking  items  in  the 
data  set  (signal  detections)  is  essential 
to  understanding  the  information,  both 
for  reasons  of  grouping  signals  from 
non-threat  platfonns  and  deriving 
further  classification  information  as  a 
result  of  knowing  the  combination  of 
signals  from  a  given. platform.  In  its 
simplest  form,  clustering  is  the  match 
process  described  earliei.  More 
generally  however,  clustering  involves 
starting  with  data  items  represented  by 
a  scatter-plot  in  an  N-dimensional 
space,  and  algorithmically  determining 
the  most  probable  number  of  entities 
(platfonns  in  the  examples  cited)  that 
the  measurements  represent.  "K- 
means"  clustering  refers  to  assuming 
successive  values  of  K  as  the  number  of 
entities  represented,  and  finding  the  K 
centroids  that  yield  minimum  total 
variance  for  each  value  of  K. 

Signal  Understanding  refers  to  a  broad  class 
of  problems  in  the  automatic  pattern 
recognition  and  interpretation  of  sensor  data 
that  encompasses  many  of  these  processing 
kernels,  and  was  therefore  chosen  as  an  area 
in  which  to  implement  demonstrations  to 
investigate  the  effectiveness  of  a  highly 
parallel  processing  capability.  As  described 
in  [1],  the  pattern  recognition  process 
involves  measurement  of  a  set  of  relevant 
features  from  the  signal  in  question  (speech, 
sonar,  imagery,  or  radar),  and  then  a 
companson  of  the  feature  set  with  a  library 
of  stored  reference  templates  also  expressed 
in  the  same  features.  Thu  unknown  signal  is 
then  classified  as  that  reference  to  which  it 
best  matches.  This  is  illustrated  in  Fig.  1. 
The  comparison  process  may  in  general  be 
hierarchical  as  a  pattern  may  be  expressed  as 
a  composite  of  many  primitive  elements,  and 
may  involve  pursuit  of  multiple  hypotheses 
as  a  multi-stage,  sequential  decision  process 
keyed  by  contextual  information  is 
implemented. 
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Speech  recognition  is~a  specific  instantiation 
of  many  of  these  concepts.  Fortexample,  in 
speech  recognition  one  typically  measures 
features  that  characterize  the  short-term 
acoustic  spectra  of  the  spoken  words  [21; 
these  features  are  then  compared  to  a 
reference  library  of  statistical  modejs  that 
enable  matching  to  occur  despite  significant 
distortion  in  the  rate  of  speech  (specifically 
Hidden  Markov  models),  and  classified  as 
that  reference  that  has  maximum  likelihood. 

In  syntax-directed  level  building,  the  word 
models  are  augmented  by  syntax  rules,  such 
that  pattern  classifications  arc  not  performed 
in  isolation  but  rather  guided  by  the  K-best 
hypotheses  regarding  what  is  said  before  and 
after  the  word  in  question  together  with 
constraints  imposed  by  syntax  rules  regarding 
what  sequences  are  allowable.  This  speech 
recognition  demonstration,  implemented  on 
the  ASPEN  system  to  ran  in  real  time,  was 
chosen  to  illustrate  the  concepts  of 
contextual  pattern  recognition  and  an 
approach  to  efficient  implementation  of  this 
on  a  parallel  processor  structure  as  outlined 
above. 

ARCHITECTURE  OVERVIEW 


The  AT&T  BT-100  processor  is  a  network  of 
processing  elements  (PE)  interconnected  in  a 
binary  tree.  Each  PE  comprises  a 

programmable  digital  signal  processor, 
memory,  and  a  communications  processor, 
as  shown  in  Figure  2.  Each  board  comprises 
a  7  PE  subtree  plus  an  expansion  PE.  The 
expansion  scheme,  as  described  by  Leiserson 
in  [3J  and  illustrated  in  Figure  3,  allows  one 
to  build  larger  trees  from  identical 
submodules.  The  interconnection  scheme  is 
recursive  since  interconnecting  two  modules 
of  the  type  shown  in  Fig,  3  yields  a  resultant 
module  that  again  comprises  a  subtree  and 
one  expansion  PE  with  a  total  of  four 
backplane  buses,  just  as  the  initial  modules 
had.  Thus,  a  tree-machine  has  attractive 
scalability  characteristics,  In  particular,  the 
PEs  remain  the  same  as  the  tree-size 
increases,  as  do  the  board-level  modules, 
and  larger  configurations  can  be  realized  in 
the  field  by  simple  insertion  of  modules  and 
moving  backplane  jumper  blocks. 
Furthermore,  the  interconnection  overhead 


IS  small,  with  respect  to  both  hardware,  and 
software,  leading  to  compact,  low-cost 
machines. 

An  important  choice  in  the  BT-100 
development  was  implementing  the  PE  with 
a- digital  signal  processor  (DSP),  which  is  a 
microprocessor  that  is  particularly 'effective 
at  fast  floating-point  arithmetic.  DSP  chips 
are  often  perceived  as  serving  a  more 
specialized  functional  market,  but  when 
capable  of  both  integer  and  floating-point 
arithmetic  and  accompanied  by  a  full 
higher-order-language  compilcr/optimizer, 
they  perform  well  in  a  variety  of  applications 
not  restricted  to  signal  processing.  The 
AT&T  DSP32  [4]  which  is  being  used  as  the 
PE  for  the  BT-100  provides  32-bit  floating¬ 
point  arithmetic,  8  or  12.5  ■  megaflops  in 
currently  available  devices,  and  all  of  the 
software  support  items  listed  above.  No 
support  devices  (co-processors,  I/O  chips, 
etc.)  other  than  memory  arc  required  for  the 
DSP32  operation.  The  DSP32  has  been 
benchmarked  Oil  u»c  Whetstone  benchmark 
at  6.5  mcgawhctstoncs,  using  the  C 
compilcr/optimizer  described  in  [5], 

SOFTWARE  ARCHITECTURE 

The  binary  tree  hardware  architecture  is 
scalable  in  two  specific  senses.  First,  the 
PEs  do  not  change  as  the  size  of  the  tree 
increases,  remaining  3-port  devices 
communicating  with  only  a  parent  and  two 
children.  Second,  the  4-port  Leiserson 
module  is  also  unchanged  as  the  tree  size 
increases,  regardless  of  the  number  of  PEs  in 
the  module.  Moreover,  the  BT-100  software 
architecture  leads  to  an  operating  system  and 
application  programs  that  are  also  scalable, 
in  the  sense  that  the  code  is  independent  of 
the  size  of  the  tree. 

There  have  been  many  proposed  software 
paradigms  for  tree  machines,  the  most 
general  and  flexible  of  which  program  each 
PE  individually  in  a  MIMD  mode  and 
achieve  interprocessor  communications  via 
tree  neighbor  protocols.  One  of  the  major 
results  of  our  work  has  been  the 
demonstration  that  a  restricted  programming 
paradigm,  described  below,  suffices  for 
many  applications  of  interest.  This  result  is 
important  since  it  provides  a  scalable 
software  environment,  in  which  processing 


and  global  communications  are  orchestrated 
via  function  calls  from  a  serial  host  program. 
For  a  large  class  of  applications,  this 
approach  provides  a  much  simpler  software 
environment,  in  which  the  processors  are 
controlled  as  a  set,  rather  third  individually, 
and  thus  the  program  complexity  remains  the 
same  as  the  tree  size  increases. 

For  fast,  economical,  and  reliable 
implementation  of  Command  and  Control 
decision  aid  systems,  such  an  emphasis  on 
simplicity  in  software  structure  is  essential. 

The  major  parallel  construct  is  a  sliced 
procedure,  in  which  identical  programs  arc 
executed  simultaneously  in  each  PE,  but  on 
different  data  sets.  The  multiple  executions 
of  this  single  program  can  follow  different 
instruction  streams,  (though  within  the  same 
program),  depending  upon  the  data.  These 
potentially  different  instruction  streams  are 
forced  to  converge  and  synchronize  at  the 
completion  of  the  sliced  procedure,  (also 
called  a  barrier  synchronization).  This 
concept  can  be  described  as  Single  Program 
Multiple  Data  (SPMD)  processing.  Within 
the  classical  SfMD  and  MIMD  concepts 
defined  by  Flynn  [6],  the  SPMD  can  be 
viewed  as  data-driven  MIMD,  or 
alternatively  as  coarsc-grain  SIMD. 

In  support  of  the  SPMD  processing  mode, 
we  use  several  global  burst  communications 
functions  that  extend  the  concepts  developed 
by  Bentley  and  Kung  [7|.  These 
communications  are  invoked  by  function 
calls  from  the  host  and  arc  examples  of 
traffic-specific  interprocessor 

communications.  The  interconnection 
hardware  and  software  has  been  designed  to 
optimize  these  global  operations,  applying 
the  concept  of  "reduced  instruction  set"  to 
interprocessor  communications.  Broadcast 
transmits  data  from  the  host  to  enabled  PEs. 
MinResolve  identifies  the  PE  in  the  tree  with 
the  minimum  value  of  some  variable.  The 
Report  command,  typically  following  a 
Resolve,  transmits  data  from  the  identified 
PE  to  the  host.  There  are  several  variants  of 
each,  covering  integer  and  real  data  types, 
and  argle  and  block  data  sets. 

This  software  design  provides  another  type 
of  scalability  to  tree  machines,  namely 
program  scalability.  The  data  flow  within 


the  tree  is  controlled  by  the  host 
independent  of  the  size  of  the  tree,  and  each 
PE  runs  the  same  code.  Therefore,  the 
source1  code  for  an  application  (e.g.  pattern 
matching)  is  essentially  unchanged  when 
additional  patterns  and  additional  PEs  arc 
added.  This  software  scalability  makes  a 
tree  processor  easy  to  program.  For  pattern 
recognition  in  particular,  so  long  as  the 
number  of  PEs  is  scaled  proportional  to  the 
problem  size,  it  will  be  shown  that  the 
execution  time  remains  essentially  the  same. 
The  communications  complexity  grows,  in 
the  abstract,  only  as  logjN.  In  many 
practical  situations,  this  term  appears  only  as 
a  pipeline  fillup  time.  Examples  include 
block  broadcasts  and  reports,  in  initiation  of 
sliced  procedures,  and  in  k-best  resolve 
operations  for  large  k.  This  leads  to  the 
concept  of  scalable  algorithms,  i.c.,  ones  in 
which  the  source  code  remains  the  same  as 
problem  size  grows,  and  in  which  execution 
remains  the  same  if  one  scales  the  hardware 
proportionally. 

APPLICATIONS 

A  brief  description  of  a  number  of  example 
applications  is  useful  to  explain  some  of  the 
concepts  outlined  above. 

Before  expositing  specific  examples,  a 
comment  regarding  the  use  of  an  binary  tree 
structure  as  an  associative  memory  is  in 
order.  In  one-dimensional  match  problems 
(e.g.  coaelating  radar  returns  with  targets  in 
track,  with  range  as  the  only  dimension),  the 
processing  load  in  a  conventional 
uniprocessor  implementation  can  clearly  be 
reduced  by  sotting  the  lists  to  be  matched 
prior  to  comparison,  and  in  the  radar 
example,  range  sorting  is  a  de  facto 
consequence  of  the  receipt  of  returns.  In 
many  modem  Command  and  Control 
problems,  however,  data  items  are 
characterized  by  multidimensional 
descriptors  (e.g.  in  signal  detection: 
frequency,  bandwidth,  stability,  amplitude, 
azimuth,  etc.)  such  that  one-dimensional 
lists  do  not  suffice. 

Solving  a  set  of  N  linear  simultaneous 
equations,  as  in  the  core  of  the  simplex  or 
Karmarkar  approaches  to  linear 
programming,  can  be  accelerated  by  the 
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number  of  PEs  using  a  paradigm  similar. to 
that,  used  for  pattern  recognition.  Assume  a 
•distinct  equation  is  stored  in  each  P£:  (This 
assumption  is  generalized  by  using  the  notion 
of  virtual  PEs  where  multiple  virtual'  PEs  are 
mapped  o.hto  each  physical  PE.)  Then  the 
inner-loop  of  Gaussian  elimination  comprises 
the  following  steps: 

a.  Resolve  to  find  the  largest  coefficient  in 
the  next  column  of  the  matrix  to  be 
processed  (i.e.  identify  the  pivot 
element); 

b.  Report  the  equation  in  which  that 
coefficient  appears  to  the  root  PE,  and 
Broadcast  that  equation  to  all  PEs. 

c.  Then  all  PEs  perform  simultaneous 
pairwise  eliminations  of  the  variable  in 
question  (i.e.  corresponding  the 
column  selected)  using  the  resident 
equation  and  that  just  broadcast. 

The  result  after  N  iterations  of  the  above 
loop  is  the  complete  solution,  rather  than  an 
upper  triangular  matrix. 

If  communication  cycles  to  move  a  number 
one  layer  up  or  dewn  the  tree  structure  as 
part  of  the  broadcast  and  resolve  operations 
occur  at  the  same  rate  as  the  arithmetic 
operations  (add,  multiply),  then  this 
approach  yields  an  acceleration  of  .65  N 
times  as  fast  a  single  PE  not  required  to 
perform  these  communication  steps. 

K-means  clustering  is  one  of  several 
algorithms  for  starting  with  a  scatter-plot  of 
data  (c.g.  templates  representing  different 
pronunciations  of  the  same  word  in  speech 
recognition,  detected  signals  in  EW  or 
ASW)  and  linking  the  data  items  into 
probable  groups  based  on  some  distance 
metric.  The  algorithm  involves  an  inner 
loop  as  follows.  Assume  the  data  vectors  to 
be  clustered  are  distributed  across  the  PEs, 
and  that  K  tentatively  selected  centroids  are 
held  in  the  Host.  (Again,  for  description 
purposes,  the  data  vectors  arc  held  one  each 
in  virtual  PEs,  with  as  many  virtual  PEs  per 
actual  PE  as  the  data  set  requires.)  The 
Host  Broadcasts  the  centroids  one  at  a  time, 
and  the  distances  to  all  data  vectors  are 
computed  in  parallel  in  the  respective  PEs. 
The  resultant  list  of  K  such  distances  in  each 
virtual  PE  at  the  end  of  this  part  of  the  inner 


loop., 'ire  scanned  to  find' the  minimum,  i.e. 
find  the  centroid  and  hence  cluster  with 
which .  that  data  vector  is  associated. 
Cpntroids  are  then  recomputed  via 
summation  of  all  vectors  just-associated  with 
each  cluster.  Convergence  of  this  process 
leads  to  a  solution  for  the  K  clusters.  K  nay 
be  stepped  through  multiple  values,  and 
these  values  are  evaluated  by  computing  the 
ratio  of  intra-cluster  to  inter-cluster  variance, 
a  process  also  amenable  to  parallelization. 
Assuming  the,  number  of  PEs,  N,  exceeds 
the  number  of  data  items,  again  ah 
approximate  N-fold  acceleration  occurs. 

Parallel  dynar.de  programming  is  applicable 
to  a  wide  range  of  structural  pattern 
recognition  operations.  In  [8],  the 
application  of  parallel  dynamic  programming 
to  speech  recognition  is  described.  Dynamic 
programming  applied  to  structural  pattern 
recognition  involves  a  graph  search  with 
following  steps:  evaluate  alternative  paths, 
select  the  best,  then  make  the  transition. 
Evaluation  of  alternatives  is  performed  in 
parallel  on  BT-100,  and  selection  of  the  best 
path(s)  is  performed  in  log  time  by  the  tree. 
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TO/FROM  PARENT  PE 


the  POTENTIAL  APPUCATIOMS  OF  NEURAL  NETWORKS 
AND  NEUROCOMPUTERS  IN  C3l 


RONALDS.  WRIGHT 

CHIEF ENGINEER,  NEW  VENTURES  DEPARTMENT, 
FERRANTI  COMPUTER  SYSTEMS  LIMITED, 
BRACKNELL.  BERKSHIRE.  ENGLAND 


ABSTRACT 

One  A.I.  technology-  the  Expert,- System,  is  finding 
practical  application  in  C3-I  systems.  However,  it  can  be 
argued  that  Expert  Systems  do;n6f  exhibit: intelligence  and 
that  any  rule-based  system  is  limited  and  even  vulnerable. 
In  the  last  few  years  the  ‘New  A.l“  or' “Sixth  Generation 
Computing'  has  emerged;  based  on  the.  brain -lij<e  properties 
of  highly  connected  processing  elements.  This  may  reprsse'nt 
the  basic  technology  of  intelligence^  and  has  the  potential  to 
have  a  dramatic  impact  on  C3-f  systems,  allowing  autonomy 
and  adaptability.  However,  .little  Is  really  known  about  how 
to  design  and  structure  such  systems  and  the  physical 
technology  has  yet  to  be  evolved.  This  paper  suggests  areas 
of  application^!  connectiomst  computing  architectures/ but 
concludes  that  aKthls  time  the  requirements-  of  C3-I  are 
ahead  of  the  available  technology.  It  suggests’ areas  whore 
research  should  be  focussed,,  partly  from  the  background  of 
the  European  ALVEY  and  ESPRIT  Information  Technology 
research  programmes.  It  now  appears  certain -that  the 
technology,  will  evolve,  if  gradually, _ and  C3-I  systems  will 
change  dramatically,  and  with  it  the  roles  of  the  associated 
human  operators. 


DEVELC^£NLC^iMVAL  COMMAND  AND  CONTROL  svsrms 

Since  the  1950’s  wo  have  seen  the  Increasing  use  of 
digital, processing  techmquesto  present  a  tactical  situation 
picture  to  the  ship’s  o-imbat  toams,  but  these  systems  give 
little  support  to  the  crew  to  help  them  assess  the  .situation 
-and  make- approbate  command  decisions.  The  Shuman' 
operator  is  still  an  essential  component  in  most  current 
Command  and pontrol  systems.  However,  we  are  beglnn’ng  to 
see  applications  where  the  situation  or  performance 
requirements  preclude  the  use  of  human  operators-in-the« 
loop/  for  example  In  the" controLol  ship’s  close-in-weapon 
systems  (ClWS)  and  space  Battle  Management  station  for 
Ballistic  Missile  defence. 

The  technology  of  the  Fifth  Generation  of  computer 
systems,  which  addressed  the  representation  and  processing 
of  knowledge,  appeared  to.-  offer  a  means  of  providing 
intelligent  support  (n  Command  and  Control. processes, 
particularly  by  the  uso  of  Expert  Systems  fRef  4].  papers 
presented  at  the  earlier  MIT/ONR -workshops  (Refs,  i  to  3] 
have  described  the  use  of  Expert  Systems  in  command  tasks 
such  as  task  force  disposition  at  sea.  flying  programmes  and 
EW  management.  These  systems  have  a  rule-based  approach, 
and  enable  procedures  and  experience  to  be. built  Into  a 
system.  Expert  Systems  are  thus  really  a  design  dsdpline; 
they  do  not  give  the  system  a  creative  intelligence.  In  fact, 
unless  they  are  carefully  designed  they  may  give  the  system 


,an  unwanted  rigidity  and: predictability.  Over  the  last  five 
.years  such  systems  have  been  trialled,  with  both  the  British 
and  US  naviescDut  we  are  still  some  two  to  three  years  away 
from  having,  such  systems  Incoporated  in  operational 
equipment?  ,  “ 

Naval  officers  and  their  children  new  look  to  digital 
computers,  usually  in  the  form  of  a  pocket  calculator,  for 
thelr.r.umerte  calculations.  ’  For  our  symbolic  expressions 
the  mighty  pen  is  being  replaced  by  Use  more  powerful  word 
processor.  Soon  we  can  expect  the  naval  officer  to  look  to  his 
.Expert  System  as  his  planning  and  diagnostic  aid.  What  we 
how  seek  is  help  for  the  operator  In  his  other  creative 
functions,  such  as  situation  assessment  and  decision  making. 
Such  help  appears  to’be  at  hand  in  the  form  of  neural 
networks  or  neurocomputers. 

What  properties  has  the  human  bram  got  that  makes  it 
so  essential  In  Command  and  Control? 

It  has  awareness  of  what  Is  going  on,  partly  by  reference 
to  its  own  built-in  world  model. 

An  ability  to  focus  on  the  essentials  of  a  situation,  direct 
Its  attention  selectively,  work  with  Incomplete  or  uncertain 
Information. 

It  has  short  and  long  term  memory,  with  an  ability  to 
associate  relevant  Information.  It  is  particularly  good  at 
recalling  temporal  and  special  patterns  and  sequences,  such 
as  music  and  road  routes. 

U  can  exw»J«*  Judgement  and  make  decisions, 
responding  to  real-time  dead-lines. 

It  has  wishes  and  works  towards  goals  -  it  caresl 

ft  is  adaptive  and  creative. 

On  the  negative  side: 

It  can  be  distracted  and  get  t‘red  and  inattentive. 

It  can  become  confuswf  and  get  the  wrong  end  of  the  stick 
(sometimes  because  of  limitations  of  its  work!  model). 

It  can  be  emotional  and  illogical  under  stress. 

tt  is' fallible. 

Jt  can  become  ill,  be  injured  and  die  (for  example  as  a 
result  of  NBC  warfare). 

It  needs  a  finite  time  to  respond, 
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It  comes  complete  with  a  body  that  has  to  be  fed,  watered 
and  housed. 

So,  in  some  military  systems  we  need  to  augment  the 
human  bram  or  replace  it.  Here  can  I  introduce  my  First 
Law  of  Neural  Networks: 

’Human- Intelligence  will  only  increase  by  improved 
human  teaching  techniques  and  the  development  of  real 
.creative  artificial,  intelligence.* 

Figure  1  shows  the  the  human  brain  in  partly  exploded 
form.  There  is  nothing  else  like  it  in' the  >  known  universe. 
As  this  illustration  shows,  it  has  'a^- highly  complex 
architecture.  It  has  been  studied  and  probed  by  specialists 
from  many  disciplines  and  a  vast  quantity  of  research  papers 
and  books'written  about  it. 

But  if  we  ask  the  question:  ’Do  we  really  know  how  it 
works?*,  the  honest  answorJs  that  we  only  have  a  few  clues. 
(Refs.  5  and  6J. 

One  level  at  which  some  progress  has  been  made  is  at  the 
level  of  tho  parts,  particularly  the  nerve  cell  or  neuron. 
This  little  fellow  (Fig.  2),  which  is  just  about  resolvable  by 
tho  human  eye.  has  -  inputs,  tho  dendrites,  by  which  it 
receives  Information  and  a  cell  body  which  is  tho  processing 
element,  which  processes  the  information  to  give  an  output 
(in  the  form  of  an  electrical  pulse)  whfclWt  sonds  to  other 
neurons  and  cells  along  its  single  axon.  Tho  axon  separates 
into  a  number  of  smallfibres.thal  have  terminals  or  buttons 
Each  of  these  terminals  forms  a  functional  connection  to 
another  cell,  the  synapse. 

As  far  as  we  know  a  neuron  communicates  with  other 
neurons  (or  muscle  or  gland  cells)  only  by  way  of  these  tiny 
synaptic  (unctions.  A  given  neuron  In  tho  brain  may  have 
several  or  many  hundreds  or  connections  to  othor  neurons. 

If  the  human  brain  has  to11  neurons 

It  might  then  have  10^  synapses  « 

And  factorial  t0?4  as  the  number  of  possible  connection 
arrangements.  It  appears  that  It  is  in  this  massive  potential 
interconnectivity  that  the  brain  has  Its  ability  to  store  and 
process  information 

One  approach  to  understanding  how  the  bram  functions 
Is  by  computer  modelling  at  tho  neuron  level.  Figure  3 
shows  a  simple  model  of  a  singlo  neuron  having  four  Inputs 
and  one  output. 

The  Inputs  are  connected  to  summing  units  through  a 
device  that  applies  a  set  of  synaptic  weights.  The  output 
depends  on  the  magnitude  of  the  Inputs  modified' by  the 
synaptic  weights  and  the  transfer  characteristic  of  the 
•summer*,  which  represents  our  neuron  cell  body  or 
.processing  element,  Tho  neuron  fires  with  Its  output  going 
high  when  the  summed  inputs  exceed  a  threshold  This 
neuron  could  be  adjusted  or  ’trained1  to  fire,  for  example, 
when  any  two  or  more  of  its  inputs  are  in  the  high  state.  It 
Is  a  simple  matched  filter. 


An  artificial, network  can  be  formed  by, interconnecting  a 
number  of  neurons  (Fig.  4)  and  current  research  work  is 
directed  to  defining  types  of  artificial  network  and  network 
elements  and  investigating  how  such  networks  can  be 
adjusted  or  trained  to  do  specific  functions  such  as  pattern 
recognition.  For  example,  the  network  illustrated  can  be 
adjusted  to  classify  a  four  bit  input  pattern. 

Artificial  networks  are  not' constrained^ to  just  mimio 
the  networks  and  components  of  the  human  brain.  A  number 
of  types  of  network  have  been  postulated  and  evaluated, 
mainly  by  modelling  on  some  form  of  . special  processor  or 
supercomputer  which  at  some  level  uses  serial  Von  Neumann 
type  operations. 

Such  networks  (conn  echo  mst  networks)  are  typified  by 
their: 

network  topology 

activation  rule 

learning  (programming)  rule 

dynamics 

There  is  now  a  considerable  but  confusing  amount  of 
literature  describing  over  thirty  different  classes  of 
networks.  (Refs.  7  and  8). 

The  above  discussion  has  used  tho  terms  neural  network 
and  neurocomputer  without  defining  them.  It  appears  to  bo 
generally  accepted  that  a  noural  network  is  the 
interconnected  set  of  physical  components  such  as  has  been 
illustrated  in  Figure  4,  and  it  could  bo  put  in  a  black  box 
with  a  sot  of  input  and  output  terminals.  A  neurocomputer 
will  contain  one  or  more  neural  networks,  but  also  provides 
its  user  with  means  of  specifying,  controlling,  running  and 
monitoring  the  neural  network.  A  virtual  neurocomputor  is 
similar,  but  the  neural  network  is  modelled  or  emulated 
rather  than  being  a  direct  physical  representation,  and  the 
modelling  may  not  be  in  real-time 


It  appears  certain  that  Neural  Network  technology  will 
have  an  Impact  on  future  defence  systems,  bu*  whore  they 
will  be  best  applied  and  how  they  will  be  realised  technically 
is  a  matter  ot  some  speculation  (Ref.  9). 

The  pragmatic  designer  ot  Command  and  Control  systems 
will  want  to  know; 

Where  neural  networks  can  advantageously  be  applied. 

Which  type  of  network  to  use  fn  a  particular 
application. 

How  to  design  networks  into  a  system  and  predict  their 
performance  (architectures,  tools  and  design 
methodology). 

How  to  implement  the  networks  In  hardware  and 
programming  terms. 

How  to  test  and  qualify  the  result^  system. 
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One  approach  would  be  a  top-down  functional 
decomposition  of 'the  system  requirements,  provided  that 
some  means  of  identifying  the  functions  which  lend 
themselves  to- neural  network  implementation  could  be 
established.  The  difficulties  of  dividing  the  C2  process  into 
component  parts  were  addressed  by  Levis  and  Athans  last 
year  [Ref.  10).  However,  the' simple  conceptual- model  of 
Fig.5  will  serve  our  present  purposes  We  can  anticipate 
that  in  the  immediate  future' progress  can  be^made  by 
contacts  between  people  conversant  with  C-2  design  and 
people  who  are, beginning  to  get  an  appreciation  of  the 
applicability  of  different  types  of  Neural  Network  from 
hands-on  modelling;  What  is^ needed  is  an  explicit 'design 
methodology.  As  a  contribution  I  offer  my  Second  Law  of 
Neural  Networks: 

•Any  process  which  is  better  performed  by  a  human  or 
animal  brain  than  by  a  computer  is  a  potential  application 
for  Neural  Networks*. 

I  leave  you  to  apply  this  law  io,the  Command  and  Control 
processes. 

The  rest  of  the  system  designers*  requirements ’are  still 
in  a  process  of  evolution,  and  indeed  some  aspects  and 
problems  have  not  yet  been  defined  or  addressed.  They  thus 
form  an  area  for  research  and  development.  Thi>'is  not  to 
say -.that  practical  implementations  of  Neural  Networks  are 
not  already  possible.  In  fact,  it  has  been  the  success  of  some 
experimental  applications, of  neural  networks'in  areas  where 
conventional  A.I.  and  symbolic  and'numeric  computing  has 
been  found  wanting  that  has  led  to  the  current  resurgence  of 
interest  In  Neural  NetworH  techniques. 

One  way. In  which  progress. can  bo  made  Is  to  focus 
expertise  in  Neura!  Networks  onto  one  or  more  potontlally 
realisable  applications,  f ortunatoly  the  second  phase  of  tho 
European  Strategic  Programme  for  Rosoarch  and 
Development  In  Information  Technology  (ESPRIT)  is  being 
launched  In  1988  and  a  number  of  consortia  of  Industrial  and 
research  organisations  have  proposed  projects  invoking  the 
study  and  demonstration  of  the  applications  of  Neural 
Networks.  Among  tho  applications  proposed  are  data  fusion, 
situation  assossment,  decision  support,  planning  and 
optimisation,  all  directly  relevant  to  Command  and  Control 
processes.  The  UK  Government  j$ .  also  Initiating  a 
programme  of  collaborative  research,  as  a  successor  to  their 
earlier  ALVEY  programme,  which  includes  an  investigation 
of  neural  computing.  In  1987  DARPA  Initiated  a  study  at 
MIT's  Lincoln  Laboratories  into  the  potential  defence 
applications  of  Neural  Networks,  with  a  view  to  defining  a 
major  research  programme, 

AH  these  initiatives  Indicate  that  most  of  the  needs  of 
the  system  designer  are  likely  to  be  researched  and 
developed.  One  downstream  problem,  which  may  not  yet  bo 
receiving  the  attention  it  deserves,  Is  how  you  test  and 
validate  a  system  incorporating  Neural  Networks. 
Conventional  computer  systems  are  vulnerable  to  failure  of  a 
single  computer  component  or  software  bug,  leading  us  to 
resort  to  redundant  dissimilar  software.  Neural  Networks, 
by  their  massively  parallel  organisation,  are  inherently 
tolerant  to  single  or  even  multiple  component  failures. 
However,  they  are  usually  programmed  by  training 
procedures,  so  that  different  neural  computers  trained  for 
the  same  task,  may  not  have  Identical  structure  and 
parameter  values.  Even  if  the  design  is  performed  on  a 


virtual  neurocomputer,  and  the  design  is  manufactured  by 
replicating  identical  neural  networks  and  parameter  values, 
it  is  often  by  no  means  apparent' how“the  network  is 
organised  and  what  'algorithms  It  is  using,  ff  we?give  our 
quality  controller  a  listing  of,  say,  ten  million 
interconnections,  what  fehe  going  to  make  of  it?' ' 

We  ourselves  have  .some  insight' into  this  problem,  as 
people  are  a  form  of-rieurocomputer  and  we  have.been 
training  them  and  assessing  their  capabilities  for  years.  So 
our  neurocomputer  can-bo.  trained,  tested,*  and  gradually 
promoted  Jo  having  increased  responsibility  in  a  similar  way 
to’ human  operators. 

So,  I  Introduce  my  Third  Law  of  Neural  Networks, - 
namely: 

*A  Neural  Notwork/Neu recompute r  is  entitled  to  the 
same  consideration  and  promotion  as  its  human  counterpart* 

CCMMCKS 

Neural  Network-  .  technology  appears  to  be 
complementary  to  numerical  and  symbolic  computing  and 
offers  the  potential  of  helping  or  even  replacing  tho  more 
creative  activities  of  human  operators  in  C3-I  systems. 
Similar  expectations  were  held  for  knowledge  based  systems, 
but  those  have  not  been  fully  realised,  Artificial  Neural 
Networks,  because  of  their  analogy  to  tho  neurons  of  the 
human  brain,  must  have  the  potential  for  ultimately 
producing  artificial  creative  intelligence.  The  immediate 
future  offers  the  possibility  of  mechanising  .applications 
which  can  bo  based  either  on  a  low  level  of  neural  network 
Implementation  or  networks  of  such  a  size  as  can  bo 
represented  on  available  virtual  neurocomputers.  However, 
our  current  dominant  computer  technology  Is  based  on  two- 
dimensional  planar  semi-conductor  technology,  which  does 
not  lend  ilself  to  massive  Interconnectivity.  Thus  large 
fully-implemented  neural  networks  await  major 
development  in  component  technology. 

The  brain  Is  highly  structured  at  various  levels,  and 
these  higher  level  architectures  are  not  fully  understood. 
Most  models  of  neural  networks  assume  a  uniform 
homogeneous  structure,  and  the  significance  of  hetorogeneous 
networks  and  higher  level  architectures  has  yet  to  be 
determined.  Such  considerations  indicate  that  the 
development  of  Neural  Networks  to  extend  the  areas  of 
mechanisation  of  C31  will  bo  a  protracted  and  difficult  task. 
However,  Neural  Networks  may  oventually  represent  the 
high  ground  of  Command  and  Control  technology. 

The  Japanese,  with  thoir  study  of  automated  brain 
functions  In  their  ambitious  "Human  Frontier  Science 
Programme*,  have  quietly  Introduced  the  Sixth  Generation  of 
computing. 

So  I  Introduce  my  Fourth  Law: 

•There  will  be  no  further  computer  generations  after 
the  Sixth,  Just  extensions  of  It.* 

We  have  reached  a  final  frontier  In  man's  computing 
endeavours.  In  a  few  years  time  your  battle  commander  will 
reach  for  his  neurocomputer,  or  more  likely  speak  to  It, 
whenever  he  has  a  tactical  decision  to  make. 
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•Moreover,  as  our  understanding  of:  the  mechanisms  ol 
the  mind  Increases,  it' Will  become  apparent  that  we 
ourselves"  are  just  robots,  complex  and  capable  as  we  are. 
Hopefully  by  then  the  idea  ol  resolving  conflicts  by  engaging 
In  battles  of  robots  against  robots  will  have  become  a  thing  of 
the  past,\and  perhaps  conflicts  will  be  resolved  by  some 
omnipotent  authority,  possibly  In  .the  form  of- a  multr- 
-national  neurocomputer  called  Solomon. 
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ROUTING  IN  RECONFIGURABLE  RADIO  NETWORKS 
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ABSTRACT  l.  VARIABLE  CONNECTIVITY 


In  radio  networks  that  are  subject  to  unpredictable 
topological  change,  it  is  necessary  to  develop  algorithms  for 
effective  routing  of  broadcast  and/or  point-to-point  mes¬ 
sages. 

In  the  past  we  have  addressed  the  problem  of  link  ac¬ 
tivation  and  shown  that  it  is  a  NP-complete  problem  with 
a  good  heuristic  that  can  be  implemented  in  a  dntnbutcd 
fashion. 

In  this  paper  wc  consider  the  question  of  routing.  First 
wc  show  that  the  problem  of  routing  is  related  to  that  of 
link  scheduling.  Also  wo  consider  separately  the  cases  of 
broadcast  versus  point-to-point  traffic. 

In  both  cases  the  problem  acquires  new  dimensions 
when  tho  volatility  of  the  topological  connectivity  map  is 
introduced.  When  the  rate  of  changes  is  extremely  fast 
the  only  available  solution  is  flooding.  When  the  rate 
of  changes  is  too  slow,  there  are  several  shortest-path  al¬ 
gorithms  that  can  bo  used  for  extensive  periods  between 
changes.  Tho  interesting  case  is  when  the  rate  of  changes 
is  moderate.  We  develop  an  algorithm  that  is  adaptive  and 
deadlock-free  that  relics  on  a  query-response  exchange  pro¬ 
cess. 

INTRODUCTION 

The  problem  of  routing  in  radio  networks  differs  from 
routing  in  point-to-point,  hard-wired  netwoiks  in  two  im¬ 
portant  respects:  1)  the  topology  and  connectivity  struc¬ 
ture  of  the  network  is  more  volatile  and  can  change  fre¬ 
quently  owing  to  a  variety  of  factors,  such  as  Hnk/node 
jamming,  antenna  orientation,  node  motion,  etc.,  and  thus 
the  routing  tables  need  to  be  updated  more  frequently 
and,  more  importantly,  through  the  use  of  the  variable 
connectivities  themselves.  2)  The  implementation  of  a 
routing  strategy  must  take  into  account  the  imposition  of 
interference-free  schedules  for  link  activation  and  trans¬ 
mission;  thus,  a  particular  path  may  cease  to  be  preferable 
because  of  increased  delays  that  the  *>chedule  of  transmis¬ 
sions  imposes,  in  other  words,  the  choice  of  a  path  and  the 
choice  of  a  transmission  schedule  depend  on  each  other. 
We  examine  the  problem  of  routing  with  respect  to  these 
two  new  perspectives. 


If  the  rate  of  changes  in  the  topology  of  a  network  is 
extremely  high,  little  can  be  done  in  terms  of  choosing  good 
routing  paths.  The  only  alternative  is  flooding.  Thus  each 
source  node  broadcasts  its  message  to  all  of  its  neighbors 
and  each  of  the  nodes  receiving  this  message  rebroadcast 
it  once,  and  so  on.  Eventually,  if  the  intended  receiver  has 
not  been  disconnected  from  the  source  as  a  result  of  these 
changes,  the  message  will  reach  its  destination. 

On  the  other  hand,  if  the  rate  of  changes  is  extremely 
low,  there  exist  several  good  algorithms  (1)  for  point-to- 
point  routing  such  as  the  distributed  version  of  the  Bcllman- 
Ford  algorithm,  which  can  be  invoked  and  utilized  in  the 
radio  network.  These  algorithms,  in  addition  to  permitting 
alternate  routing  in  case  of  occasional  failures,  have  good 
overall  performance  properties,  since  they  converge  to  min¬ 
imum  distance  (or  delay)  paths.  The  way  m  which  they 
achieve  automatic  and  distributed  recovery  (i.e.,  routing) 
from  failures  is  based  on  a  carefully  ordered  of 

control  message  exchanges  that  was  first  described  in  (2). 

The  interesting  and  unsolved  case  occurs  when  the 
rate  of  changes  is  neither  too  high  nor  too  low.  In  this 
intermediate  situation  flooding  is  neither  necessary  (be¬ 
cause  there  is  sufficient  time  between  connectivity  changes 
to  permit  systematic  searches  for  better  strategies)  nor  de¬ 
sirable  (because  it  creates  unnecessarily  numerous  multiple 
transmissions  that  overload  the  network,  increase  the  de¬ 
lay,  and  reduce  the  throughput). 

On  the  other  hand,  the  invocation  of  the  Bellman* Ford 
or  Merhn-Segal!  types  of  “good"  algorithms  is  not  sufficient 
because  the  rate  of  convergence  of  these  algorithms  might 
be  too  slow  compared  to  the  rate  of  topological  changes. 
Also,  the  rather  substantial  overhead  m  terms  of  control 
messages  that  the  implementation  of  these  algorithms  re¬ 
quires  would  also  tend  to  overload  the  network,  t 

Thus,  there  is  a  need  for  creative  new  schemes  to  ad¬ 
dress  the  routing  problem  in  these  intermediate  situations 
of  connectivity  variations.  Some  algorithms  that  are  based 
on  hierarchies  and  clusters  have  been  discussed  recently  in 
the  literature  [3],  but  none  have  been  sufficiently  validated 
to  enable  an  assessment  of  their  suitability  for  the  environ¬ 
ment  of  interest  described  here. 
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A  new  algorithm  has  been  proposed  that  is  based  on 
a  simple  idea  that  was  described  first  in  (4)  and  that  shows 
promise  for  the  case  of  interest.  To  describe  this  algorithm 
it  is  useful  to  distinguish  two  cases.  First,  consider  the 
case  in  which  the  source  node  (say  i)  .  has  zero  connectiv¬ 
ity  knowledge  about  the  entire  network  when  it  wishes  to 
transmit  a  message  to  a  particular  destination  node  (say 
j).  Second,  consider  the  case  in  which  node  i  discovers 
that  the  connectivity  information  on  which  it  was  basing 
its  routing  decisions  has  undergone  some  unknown  change. 

In  the  first  case  the  idea  of  the  algorithm  is  to  flood  a 
query, message  that  seeks  to  locate  node  3.  The  first  node 
that  possess  information  about  ji’s  whereabouts  responds 
by  flooding  a  reply  message  that  eventually  reaches  t  (and, 
more  importantly,  all  other  intermediate  nodes  which  al¬ 
though  at  the  moment  arc  not  interested  to  locate  j,  do 
so  inadvertently,  and  therefore  possess  the  required  knowl¬ 
edge  later  on  if  and  when  the! need; should  arise.  Subse¬ 
quently,  node  »  utilizes  the  “discovered’*  path  to  set  up  a 
virtual  circuit  for  routing  messages  to  node  j  (incidentally, 
there  may  very  well  be  numerous  alternative  paths  that 
are  so  discovered  as  a  result  of  the  query-reply  process) 
until  it  is  determined  (in  a  manner  to  be  specified)  that 
this  path  is  no  longer  valid  (or,  even,  desirable). 

This  brings  us  to  the  second  case,  in  which  node'i 
possesses  a  wealth  of  information  about  overall  network 
connectivity  (as  a  result  of  the  ongoing  query-reply  phases 
in  which  it  has  participated),  but  knows  that  the  path  to 
j  is  not  valid  anymore  owing  to  one  or  more  topological 
changes  that  have  occurred.  In  this  case,  node  i  floods  a 
new  query,  again  seeking  to  locate  node  j.  the  tempting 
thing  to  propose  is  that  in  this  case  any  node  that  possesses 
what  it  believeo  to  bo  valid  information  about  j  generates 
a  reply  as  in  the  original  phase  and  thus  node  i  acquires 
a  new  path  based  on  this  reply.  In  fact  one  could  argue 
that  if  the  topological  change  was  localized,  the  alternative 
path  will  be  discovered  very  promptly  and  with  very  little 
overhead  in  terms  of  control  message  exchanges.  However, 

1  nurc  care  is  required  because  this  procedure  can  lead  very 
rapidly  to  loops,  unless  special  provisions  and  safeguards 
are  introduced. 

There  are  several  possible  provisions  that  cannot  be 
comparatively  evaluated  a  priori.  One  possibility  is  to 
treat  the  new  request  message  from  node  i  as  in  the  orig¬ 
inal  zero-knowledge  phase.  The  advantage  of  this  simple 
“fix"  is  that  the  danger  of  loops  disappears,  because  the 
original  procedure  can  be,  indeed,  shown  to  generate  loop- 
free  paths.  The  disadvantage  is  that  it  negates  the  very 
intent  of  the  first  phase  which  was  to  “build”  an  informa¬ 
tion  base  that  will  be  useful  and  relied  upon  when  minor 
perturbations  of  the  network  connectivity  map  take  place. 

A1  alternative  method  is  to  use  the  structure  of  the 
Merlin-Segall  protocol  (2)  “in  reverse,”  in  the  sense  that  the 
source,  rather  than  the  destination,  generates  a  “distress” 
message  that  is  propagated  across  the  network  with  a  simi¬ 
lar  careful  ordering  of  transmissions  m  order  to  achieve  the 


discovery  of  a  loop-free  path  that  by-passes  the  location  of 
the  fault. 

Both  alternatives  have  been  considered  and  are  be¬ 
ing  currently  incorporated  in  the  code  that  is  under  de¬ 
velopment  in  the  Communications  and  Signal  Processing 
Laboratory  of  the  University  of  Maryland.  In  both  cases 
there  are  minor  variations  depending  on  what  information 
is  included  in  the  query  and  reply  message  format.  For 
example, -in  the  query  message  it  is  possible  to  incorpo¬ 
rate  only  the  destination  ID  and  the  sequence  number  of 
the  search  or  include  also  the  source  ID.  Similarly,  in  the 
reply  message  it  is  possible  tp  include  an  estimate  of  the 
distance  (or,  more  simply,  the  number  of  hops)  from  the 
destination  in  order  to  permit  optimization  in  the  selec¬ 
tion  of  routing  paths.  In  both  cases,  it  is  essential  that 
time  stamps  be  included  in  order  to  implement  time-outs 
and  decisions  about  when  to  retransmit  in  the  absence  of 
a  reply. 

To  evaluate  and  validate  a  distributed  algorithm  such 
as  the  one  just  outlined  it  is  necessary  to  simulate  it  and 
measure  its  performance,  but  also  to  compare  it  to  the 
alternatives  of  flooding  and  fixed-topology  routing.  This 
task  is  not  simple.  What  is  needed  is  a  simulation  testbed 
that  is  well-suited  to  the  nature  of  the  algorithm  and,  also, 
a  variety  of  representative  topological  variation  scenario  in 
the  presence  of  which  the  algorithm  and  its  rival  alterna¬ 
tives  must  be  evaluated. 

Fortunately,  a  software  tool  which  is  designed  to  assist 
distributed  simulations,  called  JADE,  has  been  developed 
at  the  University  of  Calgary,  has  been  tested  on  similar 
tasks  by  the  Information  Technology  Division  at  the  Naval 
Research  Laboratory,  and  has  been  acquired  by  the  Uni¬ 
versity  of  Maryland  and  is  now  available  to  us.  This  tool  is 
essentially  a  distributed  interprocess  communication  pro¬ 
tocol  that  has  powerful  monitonng  and  synchronization 
capabilities.  It  enables  us  to  perform  preliminary  simula¬ 
tions  of  these  algorithms  in  order  to  assess  some  of  their 
basic  properties.  Subsequently,  a  full-scale  performance 
evaluation  will  be  needed  which  will  take  place  at  NOSC 
and  which  will  be  performed  on  the  NASTEE  testbed  de¬ 
veloped  there. 

2.  CONNECTION  TO  LINK  ACTIVATION 

In  last  year’s  Symposium  we  presented  a  study  of  the 
problem  of  distributed  link  activation  and  scheduling  sub¬ 
ject  to  non  interference  constraints  and  provided  a  distri¬ 
buted  heuristic  for  good  schedules,  given  that  the  opti¬ 
mal  scheduling  problem  is  NP  complete.  Any  schedule  of 
link  activation  in  a  multi-hop  radio  network  involves  the 
reuse  of  channel  resources  by  nodes  that  are  sufficiently 
apart  and  forces  TDMA  hke  transmissions  among  nodes 
that  are  only  one  or  two  hops  apart.  These  TDMA  trans¬ 
missions  inject  delays  between  periodic  uses  of  the  channel 
by  a  given  node,  especially  if  that  node  has  a  high  de¬ 
gree  of  connectivity  (i.e.,  a  large  number  of  neighbors). 
Quite  obviously  then,  the  inclusion  of  a  particular  link  on 
a  routing  path  must  take  into  account  the  additional  delay 
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induced  by  the  schedule.  Conversely,  the  formulation  of 
the  scheduling  problem  must  iake-into  account  the  end- 
to-end  traffic  requirements  and  the  link  flows  that  these 
requirements  and  an  associated  routing  regime  induce.  In 
(5),  the  link  scheduling  problem  was  formulated  based  on 
simplified  broadcasting  traffic  requirements  that  vere  uni¬ 
form  among  all  nodes  and  took  into  account  only  one-hop 
transmissions  among  neighboring  nodes. 

Here  we  attempt  to  provide  the  ultimate  formulation 
of  the  joint  routing-scheduling  problem.  As  a  first-step,  we 
start  from  the  case  in  which  a  given  number  of  messages 
reside  at  the  source  nodes  in  the  network  and  we  wish  to 
develop  a  schedule  of  transmissions  and  a  set  of  routes 
that  will  permit  the  delivery  of  all  of  these  messages  to 
their  destinations  in  minimum  time. 

The  reason  that  this  formulation  is  interesting  is  that 
the  original  scheduling  problem  considered  in  (5]  proved  to 
be  amenable  to  an  efficient  solution  by  means  of  Hopfield 
neural  nets  (6).  In  fact,  the  formulation  of  tiic  augmented- 
routing-scheduling  problem  seems  not  only  to  be  amenable 
to  a  similar  solution  implementation  (which,  it  could  be  ar¬ 
gued,'  has  only  limited  interest  because  it  is  a  centralized 
rather  than  a  distributed  one)  but  also  to  permit  a  dis¬ 
tributed  implementation  by  parallel  use  of  multiple  neural 
nets,  each  one  performing  its  part  of  the  computation  at 
one  associated  node. 

Suppose  that  a  network  described  by  a  graph  G  =* 
A),  where  N  is  the  set  of  nodes  and  A  is  the  set  of  links 
(ordered  pairs  of  nodes),  finds  itself  in  an  initial  condition 
So  described  as  a  matrix  with  enties  x^k,l  =  AT, 
where  is  the  number  of  messages  (packets)  which  at 
time  0  reside  in  node  i'with  ultimate  destination  j. 

We  are  interested  in  obtaining  a  schedule  of  trans¬ 
missions  that  will  lead  the  network  through  a  sequence  of 
states  Sq,Si,S3, to  a  final  state  s*  in  which  x*j  = 

0, Vi,  1-,  for  minimum  it.  A  schedule  consists  of  a  sequence 
C*n  a  1,2,"’  of  triplets  (A„,A,,d„),  where  An  repre¬ 
sents  a  broadcast  mode  in  time  slot  n,  that  is  the  set  of 
nodes  that  are  allowed  to  transmit  in  that  slot,  Dn  repre¬ 
sents  the  set  of  destination  nodes  that  corresponds  to  the 
set  of  transmitting  nodes  An  in  s’ot  n,  that  is  it  identi¬ 
fies  by  destination,  the  type  of  message  that  each  node  in 
An  must  transmit  in  slot  n,  and  d„  represents  the  set  of 
immediate  neighboring  nodes  to  which  the  corresponding 
transmissions  should  be  directed,  that  is  it  represents  the 
set  of  next-step  destinations  for  the  single-hop  transmis¬ 
sions  that  will  occur  in  slot  n. 

Clearly,  we  are  interested  in  obtaining  a  sequence 
that  does  not  have  repetitions  and 
achie/es  minimum  k  through  the  schedule  sequence 
Ct»Cj What  is  important  to  note  is  that  the  dy¬ 
namic  programming  principle  applies.  Namely,  if  the  se¬ 
quence  Ci ,  C%>  •  ■  « ,  Ck  is  optimal  and  corresponds  to  the  se¬ 
quence  of  transitions  5b,  Si,  5z*  *  *  •  »5|,  then  the  sequence 
Cb,*  -  * ,  Ck  must  be  optimal  if  the  network  starts  from  ini¬ 


tial  state  Si,  Of  course,  an  optimal  sequence  must  exist 
since  the  problem  is  finite  but  there  need  not  be  a  unique 
such  optimal  solution. 

This  observation  leads  to  a  classification  of  the  pos¬ 
sible  states  of  the  network  in  terms  of  layers  £*.  >  A;  state 
5  belongs  to  layer  Lt  if  it  can  reach  the  “empty”  all-zero 
state  in  a  minimum  of  k  transitions.  Thus,  the  problem  of 
determining  the  minimum  time  for  emptying  the  network 
from  an  initial  state  corresponds  to  finding  the  layer  to 
which  the  initial  state  belongs.  Furthermore,  the  passage 
from  one  layer  to  the  next  is  achieved  by  one  element  of 
the  schedule  sequence  we  are  seeking. 

The  problem  is  again  NP-compicte.  The  fact, that  a 
neural  net  can  be  constructed  to  achieve  the  minimization 
for  the  much  simpler  problem  of  determining  only  a  maxi¬ 
mal  mode  An  suggests  that  it  may  be  possible  to  construct 
such  a  net  for  solving  the  combined  routing-scheduling 
problem.  So  it  is  of  interest  to  examine  how  the  Hopfield 
net  can  be  constructed  and  what  its  properties  are. 

Of  course  it  should  be  noted  that  solving  the  “empty* 
the-nctwork”  problem  does  not  imply  that  the  general 
routing  problem  is  solved.  In  the  general  routing  prob¬ 
lem  there  is  a  continuous  flow  of  external  inputs  (or  of 
new  packet  generations)  at  each  node.  The  objective  then 
is  to  minimize  the  expected  total  time  of  message  deliv¬ 
ery  to  the  destination.  Of  course,  the  two  problems  arc 
related  and  it  would  be  of  great  interest  to  explore  the*r 
relationship. 

A  Hopfield  neural  net  is  a  dynamical  system  described 
by  the  following  system  of  equations: 

)ml 

where  the  /,’s,  r,  and  the  71,  ’s  (wuich  satisfy  7i,‘  =  T,,) 
arc  constants  and  the  function  ^*)  is  a  nonlinear  func¬ 
tion  whose  shape  resembles  that  of  a  soft  limiter,  i.e.,  it 
starts  at  zero  at  the  origin  and  saturates  to  1  at  some 
value  tto  of  its  argument.  The  remarkable  property  of 
this  system  of  equations  is  that  for  any  initial  condition 
fa,(0,ti2(0),  ,utf(0)]  the  limit  of  $(«,(<))  as  t  -+  co 

is  either  1  or  0,  for  any  «  »  1,***,N«  Another  impor¬ 
tant  property  is  that  among  all  0-1  combinations  m  the 
sequence  g(ui), $(«*),  ,s(un)  the  ones  favored  by  the 
system  are  the  ones  that  produce  local  minima  of  the  func¬ 
tion 

l  *V  N 

/(»i>vj>-  ,#«)  =  ~2  ~  '£,v'1' 

I  <3  2  ,0*1  |3 1 

for 

0  <  v,  <  1, 

To  make  the  problem  of  link  activation  correspond  to 
the  minimization  of  a  function  of  the  form  we  just  exam- 
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ined  (and,  consequently,  to  hope  for  a  neural  net  imple- 
mentation  of  the  solution)  we  need  to  identify  that  func¬ 
tion.  In  the  Hopfield  model  the  index  t  corresponds  to  one 
of  N  interconnected  neurons,  and  Txj,  takes  a  value  that 
corresponds  to  the  “strength”  of  the  connection  between 
neurons  :  and  3.  In 'our  problem  we  identify  each  node 
with  a  “neuron”  and  let 

{1,  if  t  and  j  arc  1  or  2  hops 
away  from  each  other 
0,  otherwise 

where  a  <  0,  and  we  let  if  =:  /  >  0« 

Also,  we  let  p(u;)  be  one  or  zero  depending  on  whether 
node  i  transmits  in  a  given  slot  or  not.  It  is  easy  to  see 
then  that  if  (a)  >  f/J  the  stable  states  of  the  neural  net 
are  those  that  correspond  to  maximal  independent  sets  of 
nodes  in  the  radio  network  connectivity  graph.  But  finding 
maximal  independent  sets  is  equivalent  to  finding  “good” 
link  activation  schedules  (see  (5)). 

The  interesting  thing  in  this  correspondence  is  that, 
although  the  neural  net  function  minimization  takes  place 
over  a  continuum  and  the  link  activation  problem  requires 
a  combinatorial  maximization  over  a  finite  set,  the  prop¬ 
erty  of  the  neural  net  that  forces  its  equilibria  points  on 
the  disercto  set  of  binary  sequences  makes  it  possible  for 
the  solutions  to  the  two  problems  to  coincide. 

Also,  since  in  a  radio  network  a  given  node  is  not 
affected  by  those  nodes  that  are  not  connected  to  it  or  to 
its  neighbors,  the  equations  that  need  to  be  solved  (usually 
by  relaxation  that  simulates  the  net,  which  one  could  also 
build  in  hardware)  by  each  node  are  “local”  since  they 
only  involve  the  uj’s  that  correspond  to  neighboring  nodes. 
This  observation  permits  the  important  conclusion  that 
the  neural  net  solutions  can  be  implemented  distributed!}’. 

CONCLUSIONS 

In  this  paper  we  brought  forth  these  aspects  of  the 
routing  problem  that  distinguish  radio  nets  from  non-radio 
networks.  We  outlined  an  algorithm  for  routing  under 
topological  variations  and  we  formulated  the  joint  link 
activation-routing  problem  in  terms  of  a  combinatorial  op¬ 
timization  problem  that  can  be  efficiently,  and  distribut- 
edly,  solved  via  neural  nets. 
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Wc  consider  a  rmxxlnster  r=ehi-bop  packer  ra£o  jd- 
x-orit.  Each  cluster  employs  a  Basted  rarxJca 

access  algon’Jsj,  and  coosziss  local  tscs  «to  tasra 
their  packets  only  via  the  algoritisa  ia  their  own  daszx. 
The  sj’Scra  also  contains  marginal  users.  who  cay  cansces 
thdr  packets  via  either  one  of  the  algorisms  in  the  r»x> 
clusters. 

For  the  above  jistta.  we  adopc  a  listed  sensing  ran* 
dom  access  algorithm  perclnster  that  hss  been  pcrviocsly 
studied.  This  algorithm  griltrr*  bin2ty,  versus 

noncolll?  on.  feedback  per  slot,  aad  under  the  Poisson  csex 
model  and  in  the  absence  of  marginal  users  its  throughput 
is  0.43.  We  consider  a  dynamic  iruercooixccoa  policy  for 
the  marginal  users,  and  we  then  study  the  system  perfor¬ 
mance.  Specifically.  we  determine  the  stability  reg*w  of 
the  system  and  the  packet  expected  delay.  The  proposed 
interconnection  policy  accelerates  the  marginal  cans, 
presenting  them  with  a  significant  delay  advantage  over  the 
local  users.  Tnis  is  desirable  when  the  marginal  users 
transmit  high  priority  data. 

I.  INTRODUCTION 

We  consider  mobile  packet  radio  C3  topologies, 
where  dynamic  user  clustering  evolves.  The  users  in  each 
cluster  utilize  a  common  single  channel  for  transmission, 
and  they  communicate  with  each  other  via  a  limited  sens¬ 
ing  random  access  algorithm  (L5RAA).  As  the  topology 
evolves  dynamically,  and  for  better  system  connectivity, 
neighboring  clusters  may  overlap.  Users  located  in  the 
overlapping  regions  axe  then  exposed  to  transmissions  and 
feedbacks  from  t<o~*  than  jx.  clusters,  a  generally  time- 
varying  phenomenon  due  10  mobility  of  the  users  *hich 
can  be  exploited  for  the  improvement  in  perfomum  e  of  the 
overall  system.  Let  us,  for  example,  consider  ,*uo  overlap¬ 
ping  clusters,  and  let  us  cal]  the  users  in  their  overlapping 
^8*°°  marginal  users:  let  us  call  the  users  in  cluster  i, 
1=1,2,  which  are  not  located  in  the  over  Mooing  region, 
teLlgSgt  for  cluster  i.  The  local  users  in  cluster  1, 1=1,2, 
comprise  a  Poisson  traffic  with  intensity  y„  i*l,2,  and  they 
communicate  via  the  limited  sensing  random  access  algo¬ 
rithm  LSRAAi,  i=l, 2.  The  users  who  are  margin*]  to  both 
clusters  comprise  a  third  category,  which  we  will  also 

T><u  wort:  *•*«  mooned  jewt?  by  tf*  ON*?  «Mna  NQOOK  J6K-07<i  mi  ik 
AFOSR  ccrttta  UMO-V&WJl 


exxid  by  a  Pixssca  traffic  wch  intensity  7,.  Tfceo  uses 
dawfissotlte  Tbr  users  sa  each  cee  off  the  classes  1 
2=d  2  respectively  cccrnccacgs  via  ccJy  1 he  LSRAAI 
verms  LSRAA2aJge*i±ms,  »S:  fc  te>  docbJe  exposure, 
the csersrad2ss 3 have z chore.  Fcrcccrnsractetica weti 
each  ocher  cd  system  cmrrrrivgv.  they  can  joca  eidrx 
ooe  of  lhe  LSRAAI  rd  LSRAA2  Hffjn&ssz  systems. 
Such  a  choke  may  be  cfcpesrfmg  oa  the  two  duster  feed¬ 
backs  that  the  users  ia  das  3  are  smxdraceocsly  exposed 
ta  The  issue  here  is  tie  design  of  dynastic  algoridms  tirox 
impJtmem  sad*  a  chore,  foe  better  delay  performance  for 
the  users  in  all  three  dassrs. 

We  consider  intercocacctioo  pobeks  for  the  rwo- 
dvster  model  described  above.  One  possibility  could  be  the 
following;  Upon  generation  of  a  new  packet,  each  user  in 
class  3  joes  the  LSRAAI  wkh  probability  p  aad  remains 
there  unril  Hs  packet  is  successfully  translated;  with  pro- 
brfelity.  1-p  he  joins  the  LSRAA2  instead.  The  probability 
p  is  then  chosen  so  that  the  delays  across  the  throe  classes 
(discs  1,  2.  and  3)  are  equalized.  The  above  policy  is 
relatively  simple,  and  compatible  with  all  the  existing 
LSRAAS.  The  disadvantage  is  that  the  marginal  users 
mast  know  the  a  priori  assigned  probabilities  ax  all  tiroes. 
In  the  presence  of  the  dynamically  changing  topologies 
considered  here,  those  probabilities  should  change  dynami¬ 
cally  as  ut*L  and  their  values  should  be  constantly  known 
u,  the  users.  But  this  implies  knowledge  of  the  system 
topological  dynamics  at  all  times,  which  is  cither  vety  hard 
to  obtain  or  requires  a  large  increase  in  system  feedback 
information,  and  thus  in  bandwidth  of  the  system  feedback 
channels. 

For  the  mobile  environments  we  consider  here, 
dynamic  schemes  are  more  appropriate  for  the  marginal 
users  in  the  system.  Such  schemes  only  require  that  the 
marginal  users  know  the  operations  and  characteristics  of 
the  LSRAAs  they  can  join,  no  increase  m  feedback  infor¬ 
mation  is  thus  necessary  then.  In  this  paper,  we  develop 
such  a  scheme  for  the  two-cluster  model,  when  the  local 
LSRAAs  in  each  cluster  are  as  those  in  [1].  We  then  deter¬ 
mine  the  system  stability  region  and  we  simulate  the  delays 
for  each  of  the  throe  user  classes. 

II.  SYSTEM  MODEL 

We  consider  a  two-cluster  packet-radio  system,  We 
assume  that  in  each  of  the  two  clusters,  some  synchronous 
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s3ccs  ctf  fe=j±  ejral »  tbs  dsauo  cf  a  pdsx.  sad  tie 
err*  rp»«  of  fe  asr  rVrbl  abofidasss. 

(2)  ti  exi  <fo=r.  tic  drc^trxl  fcrtxaSmcs  a  faJad 
per  six.  *fc5A  ccrrsjpccds  to  lie  ascoots  bdacsd  by  tie 
local  LSRAA.  7t=s  fhsfock  is  bery.  CbZSsxn  (O 
series  ScoCcEsxa  (SC).  (3)  la  earn  ctes«;c*±  local 
cser  is  r^ssrd  to  accac  tbs  feaSaA  from  tic  local 
cfccrtiead  coatisoocsly,  firm  tbs  time  b£  gsacrsmsacrw 
pario*  to  6c  tirx  tbas  ties  pariccl  is  soccrssfcHy  tasscr:- 
ssd.  We  assess  zrro  jsopzgjrica  deity  ard.  that  bods  the 

Eads  gepri  per  treerres  tie  feedbacks  from  beds 
tbs  local  defers  cccreohr  zed  wkboc:  propzgztiaa  cSsbys. 
As  the  thac  »tes  a  crgbal  eser  geocaers  a  sew  packet, 
be  sera  xaoccodag  the  feedbacks  fitxa  bods  desars  cca- 
tgocedy/esa  he  decades  to  joca  the  operztiocs  of  00c  of 
dser»t>LSHAAs.focthctr22sa=ss3oaofBsp3ckct.  Upoa 
t2sis  &* ^  be  castcss  the  cocceeocs  mochoriag  of 
oc2y  those  fer^byks  that  cccrtspood  to  the  LSRAA  be 
chose,  eehl  his  packet  is  sscctssftilly  gzasagril 

lx  is  assessed  that  the  mobility  cf  the  csers  ta  the  sys¬ 
tem  is  low  cnooea.  sc  that  each  csex  rentes  widria  6c 
same  geographical  rrpoa  (local  or  nnrglaal)  freen  the  time 
be  pxazics  a  packet  to  the  time  ±21  this  packet  is  soccess- 
felly  transmitted.  If  the  local  LSRAAs  in  each  dtxsterkave 
good  delay  characteristics.  then  with  high  probability  this 
time  period  is  relatively  small 

It  is  assemed  that  the  local  traffic  generated  in  cluster 
1.  l-l,  2,  is  a  Poissoo  process  with  intensity  ?•*.  i=l  X  and 
that  the  traffic  generated  by  the  d  argrnal  users  is  another 
Poisson  process  with  intensity  As  found  in  [2],  for  a 
large  class  of  RAAs,  the  stability  region  of  an  algorithm  as 
the  population  size  increases  is  determined  by  its 
throughput  under  the  Poisson  user  modcL 


IIL  THE  ALGORITHMS 

We  assume  that  the  two  LSRAAs  in  the  system  are 
identical  Each  LSRAA  is  the  window  algorithm  in  [1], 
which  achieves  throughput  0.43  and  operates  with  binary  C 
versus  NC  feedback.  This  algorism  has  simple  opera¬ 
tional  characteristics  and  is  very  insensitive  to  feedback 
channel  errors. 

Upon  generation  of  a  new  packet,  a  marginal  user 
imagines  himself  belonging  to  the  systems  of  both  the 
LSRAAs  and  follows  their  algorithmic  steps,  until  the  first 
time  that  he  enters  a  collision  resolution  event  in  one  of 
them.  Then,  he  remains  with  the  latter  LSRAA  system, 
until  his  packet  is  successfully  transmitted. 

Let  time  be  measured  in  slot  units,  where  slot  t  occu¬ 
pies  the  time  interval  (t,  t+1).  Let  xt  O’)  denote  the  feed¬ 
back  that  corresponds  to  slot  t,  for  cluster  j;  j=I,2,  where 
xt(j)=C  and  x,(j)=NC  represent  collision  and  noncollision 
slot  t  in  cluster  j,  respectively.  The  local  LSRAA  in  cluster 
j  is  implemented  independently  by  each  user  in  the  system, 
and  utilizes  a  window  of  length  A.  Let  some  local  user  in 
cluster  j  generate  a  new  packet  within  the  time  interval 
[tlf  |,+I).  Then,  he  immediately  starts  observing  the  feed* 


bade  sryrrrr  (Xifj})^.  begsesug  wids  the  feedback 
Xs,  ®.  Lee  cs  defuse  the  eerpeecc  U©Jia2*  2s  foQcrvs:  ti© 
H  the  fox  time  after  tj.  saeh  dm  x^© = x^g_i  =  NC. 
Then.  as  will  be  expksxd  htio*.  t2©  ccmspootis  to  the 
cadmg  skx  of  a  Ccfoaoa  Rescfctioa  lateral  (GU)  a  dss- 
ter  3.  aad  fit xn  t2©+l  oc.  the  escr  caa  kSestify  tie  coding 
sixs  of  CRTs  raduerd  by  the  algorithm  ia  dvstex  j.  Each 
t,®  ccrrespceds  to  the  cotfisg  slot  of  sane  CRI  in  cfcstex  j. 
rad  Vi©  is  tie  first  after  ti©  such  sJoc  At  t,©.  the  eser 
updates  bis  aerial  instant.  as  fbBows:  tf*=t|  +(*-2)4;  »t 
czH  the  seqoeace  {!?}«.  Lex  fc©  be  such  that 

kG)et>i(D}22.  iP<%©-l-A;  ViSt-l.  and  tf^O-l-A. 
t>—  in  six  tz©+l.  *e  user  etuer*  zCRI  within  te 
LSRAA  of  cfcrsrerj.  and  transmits  his  packet  successfully 
dsiag  cs  process.  Hs  soys  obstr/ing  ihs  JcoJbKk 
sqtax*  (1,0)  a  lie  poia  »beo  ha  pacha  is  success¬ 
fully  trassafcal  If  ihc  user  is  iustasd  ruaguul.  ten  he 
observes  both  feedback  sequences  {x,(l))ta,  21x1 

IhOJes*  ud  follows  the  evolution  of  bech  the  titue 
sequences  lt(I)la2  »nd  {t,(2))o2-  If  ti(l)<ii(2),  then  in 
slot  tfc(l)+!  he  enters  aCRl  within  the  LSRAA  of  cluster  1, 
and  trees  toes  his  packa  successfully  during  its  process.  If 
ti(l>ttU).  ingc>H,  ten  be  joins  a  CRT  in  clusrer  2,  in  slot 
tiPHl.  If  t»(l)=ttP).  then  he  sekess  one  of  the  local 
LSRAAs  Willi  probability  OS.  The  above,  describe  the  fast 
entry  rules,  fa  the  local  and  the  marginal  users;  lha  is, 
how  and  st  hen  each  ne»Iy  generated  packet  first  starts  par 
tjcipalHg  in  some-CRL  Prom  the  description  cf  the  fust 
entry .  j’r.  it  is  deer  that  the  marginal  users  have  an  advan¬ 
tage  ova  the  local  users.  In  partkula.  their  waiting  time 
until  they  fust  enter  some  CRI  is  generally  smalla  man 
that  of  the  local  users;  therefore,  iheir  total  delays  arc  gen¬ 
erally  smalla  than  those  of  the  local  users. 

Consider  the  algorithm  in  clusla  j,  and  let  it  start 
operating  at  time  zero.  Then,  slot  1  is  empty.  In  slot  2,  the 
arrivals  in  10,1)  are  transmitted,  and  a  CRI  begins.  If  the 
number  of  arrivals  in  [0.1)  is  less  than  two.  then  x2(j)=N'C, 
the  CRI  lasts  one  slot,  and  a  new  CRI  begins  with  slot  3.  If 
the  number  of  arrivals  in  [0,1)  is  at  least  two,  then  x;(j)-C, 
instead,  and  the  CRI  lasts  as  long  as  it  takes  to  resolve  the 
collision  in  slot  2.  The  end  of  the  CRI  can  be  identified  by 

all  the  use  .in  the  system,  (as  will  be  seen  below)  LetTbc 

a  slot  that  corresponds  to  the  end  of  some  CRI  Then,  in 
slot  T+1,  all  the  users  with  current  updates  in  (T-A-1.T-1] 
transmit.  If  xT,i(j)=N'C.  then  the  CRI  which  slatted  with 
slot  T+1  lasts  one  slot,  and  a  new  CRI  starts  with  slot  T+2 
If  xt.!0=C,  instead,  then  a  collision  occurs,  whose  resolu¬ 
tion  starts  with  slot  T+2.  No  arrivals  that  d:d  not  partici¬ 
pate  in  the  collision  at  T+l  are  transmitted,  until  the  latter 
is  resolved.  During  the  collision  resolution,  each  involved 
user  acts  independently,  utilizing  a  counter  whose  value  at 
time  I  is  denoted  r,.  The  counter  values  can  be  either  1  or  2, 
and  they  are  updated  according  to  the  rules  below. 

1.  The  user  transmits  in  slot  t.  if  and  only  if  r,=l  A 
packet  is  successfully  transmitted  in  t,  if  and  only  if 
rt=l  and  xt=NC. 

2.  The  counter  values  transition  in  time  as  follows 

(a)  If  x,-i=NC  and  r,.)=2.  then  r,=i 

(b)  Ifx,-i=C  and  r,.|=2,  then  r,=2 
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(c>  Ifx*.i=£2a3rj.i=l,ihen 

f  1 ,  with  probability  0.5 
r‘  ~^2 ,  with  probability  05 

A  CRI  which  stans  with  a  collision,  cods  when  it  becomes 
known  to  all  users  that  the  initially  collided  packets  have 
been  successfully  transmitted.  From  the  operations  exhi¬ 
bited  above,  it  is  not  hard  to  see  that  such  a  CRI  ends  the 
first  time  (after  its  beginning)  that  two  consecutive  NC 

SlOtS  0003". 


IV.  ALGORITHMIC  ANALYSIS 

For  convenience  in  notation,  we  will  refer  to  the  local 
users  in  cluster  1.  the  local  uses  in  citato-  2,  and  the  mar¬ 
ginal  users,  as  subsystem  I,  subsystem  2,  and  subsystem  3, 
respectively.  In  the  algorithmic  analysis,  we  adopt  the 
Poisson  user  model  (infinitely  many  independent  identical 
users)  for  each  of  the  three  subsystems.  In  particular,  we 
will  assume  that  the  three  subsystem  traffics  are  mutually 
independent,  and  that  the  user  traffic  in  subsystem  -j, 
j=l  ^3.  is  Poisson  distributed  with  intensity  Xj. 

We  consider  the  evolution  of  the  algorithms  in  the 
iwo-clusxer  system,  and  we  assume  that  the  system  starts 
operating  at  time  zero.  Let  us  consider  the  sequence  in 
time  of  the  CRIs  induced  by  the  two  LSRAAs  in  the  sys¬ 
tem.  Let  the  sequence  (Tnl^  be  such  that.  (1)  For  each 
n,  Tn  cortrsponds  to  the  starting  point  of  a  slot  which  is  the 
beginning  of  some  CRI.  We  note  that  at  Ta,  two  CRIs  may 
simultaneously  begin,  one  for  each  of  the  two  LSRAAs  m 
the  system.  (2)  Tn  is  the  first  after  time  instant  which 
corresponds  to  the  beginning  of  some  CRI.  (3)  To=2,  and 
at  To  two  CRIs  begin;  one  for  each  of  the  two  LSRAAs  in 
the  system. 

Let  {Tjpljfco  be  the  subsequence  of  sequence 
(Tn}r£o,  which  consists  of  those  time  instants  when  two 
CRIs  begin  simultaneously;  one  for  each  of  the  two 
LSRAAs  in  the  system.  Clearly,  Tfr*=To=2.  Let  Dj&+1, 
j=l,23.  denote  the  total  length  of  the  unresolved  arrival 
intervals  in  subsystem  j,  at  the  time  instant  Tjj?.  d£?s  is 
then  called  "the  lag  of  subsystem  j  at  time  From  the 
algorithmic  operations  m  the  system,  we  conclude.  (1) 
D^,>1  and  the  sets  that  consist  of  D}?,  for  js  I,  2  arc 
denumerable.  (2)  D^,=l,  j»  1,2,3.  (3)  At  lime  t£\  the 
LSRAA  in  cluster  k,  k=J,2,  examines  two  arrival  intervals: 
one  from  subsystem  k  which  has  length  min(DjJJ,  A)  and 
contains  arrivals  generated  by  a  Poisson  process  with  inten¬ 
sity  Xk,  and  one  from  subsystem  3  which  has  length  min 
(D§}»  A)  and  contains  arrivals  generated  by  a  Poisson  pro¬ 
cess  with  intensity  0.5  Xj.  (4)  The  triple  (Dai.  ja  1*2,3) 
describes  the  state  of  the  system  at  time  Ty\  and  die 
sequence  (S„},£0^  (Dj&.js  1,2,3  J^o  *s  a  three- 
dimensional  irreducible  and  aperiodic  Markov  Chain. 

Wc  studied  the  crgodicity  conditions  of  the  Markov 
chain  (S^)^.  The  latter  determine  the  stability  region  of 
the  system.  This  region  is  plotted  in  Figure  1.  To  obtain 
results  on  the  expected  packet  delay  we  simulated  the  sys¬ 


tem.  In  Figures  2  and  3,  we  plot  expected  packet  delay,  as 
a  function  of  the  Poisson  intensity  Xj.  From  those  figures, 
we  observe  the  advantage  of  the  marginal  users,  in  terms  of 
expected  delays.  Even  when  the  expected  delays  of  the 
local  users  increase  without  bound  (saturation),  the 
expected  delays  of  tire  marginal  users  remain  low,  never 
exceeding  ten  slots,  for  all  the  examined  cases.  The  delay 
advantage  of  the  marginal  users,  as  compared  to  the  local 
users,  increases  roonotonicalJy,  as  the  rate  oi  their  traffic 
increases. 


V.  COMMENTS  AND  CONCLUSIONS 

In  this  paper,  wc  studied  a  two-cluster  interconnected 
system.  Each  cluster  deploys  the  limited  sensing  random 
access  algorithm  m  11),  and  the  interconnection  is  due  to 
marginal  users,  who  dynamically  select  one  of  the  two 
algorithms  for  their  transmissions.  The  interconnection 
policy  adopted  is  dynamic,  and  requires  no  a  pnon 
knowledge  of  the  traffic  populations  and  characteristics, 
and  of  the  states  of  the  involved  subsystems.  It  only 
requires  knowledge  of  the  algorithmic  rules,  and  monitor¬ 
ing  of  feedbacks  from  the  ume  a  packet  is  generated  to  the 
time  that  it  is  successfully  transmitted.  In  addition,  the 
adopted  interconnection  policy  presents  a  significant  delay 
advantage  to  the  marginal  users.  In  all  cases,  it  maintains 
the  value  of  the  expected  delay  for  the  marginal  packet 
below  ten  slots.  This  delay  advantage  to  the  marginal  users 
may  be  of  high  importance,  when  they  transmit  high  prior¬ 
ity  data,  and  when  dynamic  cluster  reconfigurations  may 
result  in  temporary  isolation  of  the  marginal  users  if  the 
transmission  of  their  data  is  delayed. 
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Figure  1 

Boundaries  of  the  ( Xj.Xj  )  stable  regions 
parametrized  by  X3 
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re-transmission  capabilities  to  ensure  reliable 
data  transactions. 


The  probability  that  user  datagrams  will  be  delivered 
to  specified  destinations  In  a  potentially  hostile 
environment  Increases  with  the  number  of  viable 
delivery  paths  between  the  source  and  destination 
hosts.  Therefore,  the  number  of  usable  paths  In  a 
common  user  communications  system  represents  • 
measure  of  the  survivability  of  user  data  In  that 
system. 

This  paper  presents  a  discussion  of  the  enhancements 
to  Internet  survivability  provided  by  gateways.  The 
Internet  architecture  Is  described  from  a  gateway 
perspective,  gateway  routing  Is  described,  and  the 
primary  features  of  two  gt'*way  routing  protocols 
developed  under  Rome  Air  Development  Center 
contracts  are  presented. 


INTRODUCTION 

The  Department  of  Defense  internet 
architecture  is  based  on  a  reliable  end-to-end 
protocol,  a  best-effort  delivery  protocol,  and 
host  level  internet  gateways  to  provide 
interoperability  across  diverse  packet 
switched  networks  (see  Figure  1).  The  Internet 
Protocol  (IP),  [mil.std-17771,  provides  a 
connectionless  packet  delivery  service  (or  the 
Transmission  Control  Protocol  (TCP), 
IMii-s'D-ms),  that  operates  between  users  on 
packet  switched  networks.  IP  defines  the 
internet  addressing  scheme,  header 
information,  and  routing  mechanisms  that 
allow  packets  to  be  treated  as  separate 
entities  as  they  are  transported  across  network 
boundaries  from  source  to  destination  hosts. 
With  this  approach,  internet  resources  are 
dedicated  on  a  packet-by-packet  basis  instead 
of  on  a  connection  basis,  and  the  term  datagram 
is  used,  instead  ot  packet,  to  emphasize  the 
connectionless  nature  of  the  service.  TCP 
manages  the  end-to-end  connections  between 
hosts  with  sequencing,  acknowledgement,  and 


Internet  gateways  (IGs)  provide  the  actual 
interface  between  networks  by  implementing 
the  physical,  data  link,  and  network  layer 
protocols  of  each  network  they  interconnect. 
The  IGs  peer  with  the  attached  network  packet 
switches  at  the  physical,  data  link,  and 
network  layers  and  with  hosts  and  other  IGs  at 
the  IF  layer.  A  description  of  the  protocol 
encapsulation  between  internet  components  can 
be  found  in  (M[L-sto.!77?i. 


(Jlp  *  Doper  Uvol  Protocols 

TCP  a  Transmission  Control  Protocol 

IP  a  Internet  Protocol 

NET  *  Network,  Link,  &  Physical  Protocols 

IGP  a  Interior  Gateway  Protocol 

IAP  *  fnter-AS  Routing  Protocol 


FIGURE  1  -  PROTOCOL  REFERENCE  MODEL 


Survivability  of  user  data  m  a  packet  switching 
environment  refers  to  the  increased  probability 
that  data  will  reach  its  destination  when 
communications  resources  are  subjected  to 
failure.  The  If*  datagram  approach  supports 
internet  survivability  by  dedicating  internet 
resources  on  e  packet-by-packet  basis,  so  a 
datagram  can  be  routed  around  tailed 
components  that  it  might  encounter  en-route  to 
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a  particular  destination. 

Interoperability  between  diverse  internet 
resources  also  supports  internet  survivability 
by  increasing  the  number  of  potential  paths 
that  can  be  used  to  reach  destination  hosts. 
The  IGs'  ability  to  effectively  discover  and 
utilize  this  aggregate  connectivity  directly 
affects  internet  survivabihty.  This  ability  is 
generally  enhanced  when  the  gateways 
collaborate  their  efforts  to  collectively 
determine  the  global  connectivity  information 
used  to  calculate  internet  routes. 

Without  specifying  the  exact  physical 
configuration,  it  is  difficult  to  precisely 
quantify  the  level  of  survivability  that  can  be 
expected  in  an  internet  system.  Many 
assumptions  must  bo  made  about  the  topology 
of  the  internet  resources,  their  administration 
in  the  operational  environment,  and  the 
scenarios  that  would  stress  them.  There  are 
also  many  political,  administrative,  and  legal 
issues  involved  in  a  strategy  for  internet 
survivability,  since  the  resources  are  owned  by 
a  multitude  of  governments  and  their  agencies, 
universities,  and  private  industry.  A  discussion 
of  some  of  these  topics  is  given  In  (oay). 

This  paper  presents  a  discussion  of  the 
enhancements  to  internet  survivability 
provided  by  IGs.  In  Section  One,  descriptions  of 
an  interoperability  model  that  presents  the 
internet  from  an  IG  perspective  and  a  gateway 
protocol  that  enhances  survivability  within 
that  framework  are  given.  In  Section  Two.  a 
description  of  the  network  partition  problem  is 
given,  and  a  gateway  protocol  that  solves  the 
problem  of  delivering  data  into  a  partitioned 
strategic  network  is  described. 

I.  INTEROPERABILITY  AND  ROUTING 

INTERNET  GATEWAY  ROUTING 

IP  defines  internet  addresses  for  all  hosts  and 
IGs  in  the  internet.  Each  IP  address  has  two 
parts:  a  network  number  and  a  local  address 
field.  The  network  numbers  are  assigned  such 
that  each  one  uniquely  specifies  the  network  to 
which  the  host  or  IG  is  connected.  The  local 
address  field  is  used  to  further  specify  the 


host  or  IG  on  that  network.  Therefore,  from  the 
IP  perspective,  IGs  appear  as  hosts  on  each 
network,  to  which  they  are  connected.  Each  one 
is  assigned  a  separate  IP  address  for  each 
network  connection,  so  every  IG  has  at  least 
two  IP  addresses. 

The  routing  mechanism  specified  by  IP  is  a 
table  look-up  procedure  based  on  the  network 
number  portion  of  the  destination  address 
listed  in  the  IP  header  of  each  datagram.  When 
an  IG  receives  a  datagram,  it  compares  the 
network  number  to  entries  in  the  IP  routing 
table.  If  the  destination  host  is  located  on  a 
network  attached  to  the  IG,  then  the  matching 
IP  routing  table  entry  will  point  to  the  network 
interface  module  that  can  reach  the  destination 
host  directly.  Otherwise,  it  will  point  to  the 
network  interface  module  that  can  reach  the 
next  IG  on  the  path  to  the  destination  host.  If 
no  match  is  found,  a  'destination  unreachable" 
message  will  be  sent  to  the  source  host  or  IG 

The  IP  module  then  passes  the  datagram  to  the 
appropriate  network  interface  modulo.  There, 
the  local  address  field  of  the  IP  address  is 
mapped  to  the  network  layer  protocol  address 
and  the  datagram  is  forwarded  into  the 
network.  The  network  takes  over  from  there  to 
deliver  the  datagram  to  the  destination  host  or 
next  IG. 

An  important  IP  option  is  the  source  route 
option.  Hosts  or  IGs  can  specify  the  IGs  that 
will  be  used  lor  delivering  datagrams  to  a 
destination.  Those  IGs  are  listed  in  the  IP 
header  m  the  order  that  they  are  to  be 
traversed.  When  an  IG  receives  a  datagram  that 
includes  a  source  route,  the  IP  address  of  the 
next  IG  listed  in  the  source  route  option  field  is 
used  instead  of  the  destination  address  field. 

The  IP  specification  states  a  requirement  for 
the  IGs  to  support  the  dynamic  adaptation  of 
the  IP  touting  table  to  reflect  the  current 
status  of  the  internet  topology.  Generally 
speaking,  the  support  processes  consist  of 
three  main  components  (mcouiuani 

a)  a  measurement  process  for  detetmmmg 
pertinent  internet  characteristics, 

b)  a  protocol  for  distributing  the  information 
about  these  characteristics,  and 
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c)  a  calculation  to  determine  internet 

routes;. 

The  first  component  enables  each  IG  to 
determine  the  status  of 'the  internet  topology  in 
its  local  vicinity.  Messages  are  exchanged 
between  neighboring  IGs  to  determine  their 
current  operational  status  and  'to  measure  the 
delay  across  the  link  (network)  between  them. 
The  second  component  permits  each  IG  to 
construct  a  global  topology  database  by 
assimilating  the  information  it  periodically 
receives  from  other  IGs.  The  third  component 
operates  on  the  global  topology  database  to 
determine  the  best  route,  based  on  some  metric 
(distance,  delay,  etc),  to  all  other  networks  and 
IGs.  The  result  of  this  process  is  the  routing 
table  used  by  the  IP  mechanism. 

Collectively  those  processes  make  up  the 
gateway  routing  protocol  .that  is  layered  on  top 
of  the  IP  layer  In  the  IGs.  It  generates  IP 
datagrams  to  communicate  with  other  IGs. 
Peer  relationships  at  the  gateway  routing 
protocol  layer  exist  only  between  IGs.  See  IGP 
in  Figure  1, 

AUTONOMOUS  SYSTEMS 

As  an  introduction  to  the  concept  of 
Autonomous  Systems,  it  is  useful  to  'draw  an 
analogy  between  a  packet  switch  network  and 
the  internet.  With  the  IGs  being  analogous  to 
tho  packet  switches  and  tne  networks  serving 
as  the  backbone  and  subscriber  access  links, 
tho  analogy  shows  how  tho  internet  can  be 
viewed  as  a  gateway  network.  It  illustratos 
tho  packet  switch  functionality  required  in  the 
IGs  for  network  control,  datagram  routing  and 
the  gateway  routing  protocol. 

Due  to  the  sheer  size  of  tho  internet,  which  has 
grown  considerably  over  tne  past  few  years, 
the  single  gateway  network  model  is  no  longer 
valid.  Although  all  of  the  IGs  in  the  internet 
implement  the  specified  IP  routing  mechanism 
and  their  gateway  routing  protocols  are 
functionally  similar,  the  implementations  that 
have  evolved  over  the  past  two  decades  are 
quite  different.  In  addition,  tho  diverse 
organizations  that  own  and  maintain  the  IGs 
have  different  service  requirements,  and  the 
coordination  required  to  manage  the  internet  as 


a  single  gateway  network  amidst  this  diversity 
is  no  longer  practical. 

These  factors  led  to  the  architectural  creation 
of  separate  and  independent  gateway  networks 
called  Autonomous  Systems  (ASs).  With  this 
model,  presented  in  (rosenj,  the  internet  is 
viewed  as  a  collection  of  several  ASs,  or 
separate  gateway  networks,  that  are  overlaid 
on  the  aggregate  set  of  backbone  and 
subscriber  access  links  (networks)  as  shown  in 
Figure  2.  Provisions  for  the  autonomus 
operation  and  management  of  each  AS  were 
proposed,  the  concept  of  Inter-AS  routing  was 


FIGURE  2  -  AUTONOMOUS  SYSTEM  CONCEPT 

introduced,  and  a  protocol  design  was 
presented.  Each  of  these  will  bo  discussed 
briefly  below.  This  approach  relieved  the 
problems  mentioned  above  while  maintaining 
the  unified  view  of  tho  internet  for  IP  hosts 
and  IGs  by  confining  compatibility  and 
management  concerns  to  a  minimal  set  of  IGs. 

An  AS  boundary  is  defined  m  terms  of  the 
administrative  control  of  its  nodes  (IGs)  and 
the  common  gateway  routing  protocol  that 
binds  them  together.  The  IGs  that  belong  to  a 
particular  AS  subscribe  to  a  common  gateway 
routing  protocol  that  runs  only  between 
member  IGs. 

The  name  Interior  Gateway  Protocol  (IGP)  (see 
Figure  1)  was  coined  to  refer  to  any  gateway 
routing  protocol  that  is  implemented  in  an  AS 
for  internal  use  only.  in  terms  of  the  three 
components  discussed  above,  an  IGP  defines  the 
measurement,  distribution,  and  calculation 
algorithms  used  by  all  IGs  in  its  AS.  Therefore, 


IP  routing  decisions  based  on  this  data  will 
involve  only  the  member  IGs  and  the  links 
(networks)  that  interconnect  them. 

IGP  boundaries  have  the  effect  of  protecting 
ASs  from  each  other  while  giving,  each  the 
autonomy  to  optimize  their  IGP  to  meet  their 
particular  service  requirements.  They  have  the 
negative  effect  of  limiting  interoperability; 
and  hence  survivability,  since  noi  all  hosts  are 
reachable  from  a  single  AS.  4  To  counter  this 
effect,  and'  complete  the  AS  model,  Rosen 
introduced  an  lnjter-AS  routing  protocol  to 
route  between  ASs  and  allow  hosts  to  maintain 
their  flat  IP  view  of  the  internet.  The  added 
complexity  introduced  by  this  model  represents 
a  necessary  evil  required  for  the  continued 
operation  of  the  rapidly  expanding  internet  in 
the  absence  of  a  single  omnipotent  governing 
body. 

INTER-AUTONOMOUS  SYETEM  ROUTING 

Inter-AS  Routing  Protocol  (IAP)  is  the  generic 
name  for  gateway  routing  protocols  designed 
for  routing  between  ASs.  It  is  too  subject  of 
several  research  efforts  currently  underway 
The  Exterior  Gateway  Protocol  (EGP)  was 
introduced  as  part  of  the  AS  model  and  it  is  the 
current  operational  IAP.  Those  under 
development  include  EGP  II  and  the  Dissimilar 
Gateway  Protocol  which  is  described  below, 

IAP  (see  Figure  1)  is  layered  on  top  of  IP  in  the 
IG  protocol  suite  next  to  IGP,  since  both  use  IP 
to  deliver  protocol  messages  to  other  IGs. 
However,  interactions  between  IAP  and  IGP 
vary  between  the  different  designs  currently 
under  development.  Only  a  subset  (usually  one 
or  two)  of  the  IGs  in  an  AS  participate  in  IAP 
They  servo  as  the  IAP  spokesmen  for  the  entire 
AS  and  are  called  IAP  gateways  to  distinguish 
them  from  the  other  IGs. 

All  IAP  designs  involve  some  form  of 
measurement  and  distribution  processes,  and 
some  have  a  common  route  calculation  as  well 
In  addition,  IAP  requires  processes  for  peer 
acquisition  and  the  negotiation  and  management 
of  dialog  parameters  such  as  polling  intervals 
and  timeouts  that  will  be  used  between  IAP 
gateways.  They  ate  indicative  of  the  flexibility 


required  to  maximize  compatibility  between 
the  diverse  IG  implementations;  A  brief 
description  of  EGP  is  given  below. 

After  its  initial  debut,  the  EGP  design  was 
refined  in  (seauonsoni  and  specified  as  a  Defense 
Advanced  Research  Projects  Agency,,  (DARPA) 
standard  in  (millsi.  The  operational 
implementation  relies  heavily  on  a  privileged 
AS,  called  the.  core  A§,  which  is  controlled  by 
DARPA.  The  core  AS  is  used.-as  a  transport 
medium,- for  all  other  ASs  and  ierves  as  the 
central  distributor  of  global  reachability 
information.  The  EGP  gateway  in  each  AS 
builds  and  maintains  reports  about  the 
networks  that  are  reachable  by  the  IGs  in  its 
AS.  These  reports  are  sent  to  an  EGP  gateway 
in  the  core  AS.  The  core  IGP  is  used  to  combine 
these  reports  and  build  a  global  reachability 
fist  that  is  then  distributed  to  the  non-core 
ASs  via  EGP  updates.  The  interpretation  and 
distribution  of  these  lists  within  the  non-core 
ASs  is  left  to  the  discretion  of  each  AS 
administrator. 

The  EGP  measurement  and  distribution 
mechanisms  are  such  that  the  reachability  lists 
contain  loop-free  paths  through  core  IGs  to  all 
networks  attached  to  the  internet.  However,  no 
metrics  are  assigned  to  these  paths  to  aliow 
optimization  of  routing  decisions.  In  addition, 
the  number  of  networks  in  the  internet  has 
grown  to  the  point  of  causing  a  severe  burden 
on  the  core  AS' resources. 

DISSIMILAR  GATEWAY  PROTOCOL 

The  Dissimilar  Gateway  Protocol  (DGP)  is 
currently  being  developed  under  a  Romo  Air 
Development  Center  contract  with  Ford 
Aerospace  Corporation,  Colorado  Springs 
Oivision  and  their  sub-cor\actor,  M/A-COM 
Government  Systems  Division.  The  program 
will  produce  a  formal  DGP  specification  and  a 
OGP  imp'emeotation  for  the  Multinet  Gateway 
Advanced  Development  Model. 

The  DGP  designers  had  the  luxury  of  learning 
from  the  operational  experience  of  EGP  The 
fundamental  difference  between  the  two  is  that 
OGP  includes  capabilities  for  route  calculations 
based  on  type-of-service  specifications,  route 
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restrictions,  and  multiple  paths  to  a 
destination  network. ,  Another  major  difference 
between  the  .two  is  the  flexibility  designed  into 
DGP  that  de-couples  administratively  defined 
hierarchical  organization  and  AS  peering 
restrictions  from  the  protocol'  itself. 

At  least  one  IG  in  each  AS  will  participate  in 
DGP  and  it-will  serve  as  the  DGP  spokesman,  or 
one  of  the.  DGP  spokesmen,  tor  the  entire  AS. 
These  IGs  are  called  DGP  gateways  to 
distinguish  them  from  the-  other  IGs.  An 
additional  designation  for  some  of  the  DGP 
gateways  is  the  name  "border’  gateways. 
Consider  the  example  shown  in  Figure  3  where 
the  DGP  gateways  are  circled,  The  border 
gateways  of  AS1  are  2.2  and  3.0.  Note  that  they- 
are  not  members  of  AS1  but  are  directly 
connected  to  a  DGP  gateway  in  ASl  by 
networks  Y  and  X  respectively.  Border 
gateways  for  AS2  are  1.1  and  4.0,  IGs  1.0  and 
2.2  are  border  gateways  for  AS3  and  AS4 
respectively. 


DGP  relies  on  the  IGP  of  eacr.  AS  to  make 
internal  measurements  and  to  maintain  a 
consistent  IGP  database  al  each  of  its  IGs. 
Although  it  does  not  dictate  the  measurement 
or  distribution  mechanisms  to  be  used.  DGP 
does  require  that  changes  to  the  IGP  database 
are  reported  when  they  occur  and  it  specifies 
the  format  of  the  reports. 


DGP  is  designed  to  operate  on  an  arbitrary 
hierarchy  of  ASs.  The  relative  level  o(  each  AS 
is  left  for  an  administrative  authority  to 
assign.  This  provides  the  flexibility  needed  to 
accommodate  future  growth  while  maintaining 
compatibility  with  existing  implementations, 
DGP  ^  is  also  designed  to  operate  on 
administratively  assigned  peering  restrictions 
that  specify  which  ASs  may  interact. 


Together,  the  assigned  hierarchical  level  and 
peering  restrictions  dictate  the  hierarchical 
organization  of  the  DGP  database  in  each  DGP 
gateway.  The  content  of  a  DGP  gateway's 
database  equals  its  IGP  database  plus  the 
pertinent  information  contained  in  updates  it 
receives  from  DGP  peers.  Updates  include  a  list 
of  IGs  In  the  peer’s  AS,  the  networks  attached 
to  those  IGs,  and  a  metric  associated  with  each 
network  interface  (provided  by  the  IGP  of  that 


AS).  For  a  given  DGP  dialog,  the  lower  level 
peer  reports  its  entire  database  to  the  upper 
peer.  The  upper  level  peer,*  in  turn,  reports  to 
the  lower  peer  the  border  gateways  of  the 
AS(s)  reported  by.  the  lower  level  peer  and  the 
networks  attached  to  them,  Therefore.  DGP 
gateways  at  the  highest  level  in  the  hierarchy 
have  complete  routing  information,  and  hence  a 
greater  resource  burden,  than  those  at  lower 
levels. 


Using  the  example  DGP  topology  and  the 
assumed  hierarchy  shown  in  Figure  3,  the 
following  peer  relationships  exist.  Between 
A34  and  AS2,  2.2  Is  the  upper  and  4.0  is  the 
lower.  Between  AS2  and  ASl.  2.2  is  the  lower 
and  1.1  is  the  upper.  Between  AS3  and  ASl,  3.0 
is  the  lower  and  1.0  is  the  upper  peer.  (Within 
ASl,  1.0  and  1.1  are  equal  peers  and  report 
their  entire  database  to  each  other.)  ",he 
database  in  2.2  includes  a  list  of  all  AS"  IGs 
and  iho  networks  attached  to  thorn,  the 
database  of  4.0,  and  the  networks  aihched  to 
1.1.  The  database  in  1,1  Includes  the  entire 
database  of  2.2  plus  a  list  of  all  ASl  IGs  and 
the  networks  attached  to  thorn,  and  the 
database  of  3.0. 

The  DGP  database  and  route  restriction 
information  in  each  DGP  galeway  is  used  to 
calculate  inter-AS  routes.  The  route 
calculation  is  a  shortest  path  computation 
(optimized  for  maximum  throughput,  minimum 
delay,  lowest  number  o I  hops  between  IGs,  or 
minimum  cost)  that  is  performed  on  request,  as 
described  below. 

When  an  IG  receives  a  datagram  with  a 
destination  address  that  is  outside  of  its  AS,  it 
requests  a  route  from  DGP.  if  (he  IG  is  not  a 
DGP  gateway,  it  can  use  its  IGP  to  send  this 
request  to  a  DGP  gateway  in  ns  AS.  The 
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request  specifies  the  source  (requesting)  IG, 
the  destination  address,  type-of-service 
indication  (max  thruput,  min  delay,  mm  hop, 
min  cost),  route  restriction  indicahon(s) 
(packet  size,  reliable  delivery),  and  the  number 
of  alternate  routes  to  be  calculated. 

DGP  calculates  the  route  based  on  its  database 
contents.  If  the  specified  destination  is  known 
to  the  DGP  gateway,  the  route  consists  of  an 
ordered  list  of  IGs  m  the  path  to  be 'traversed 
from  source  to  destination.  Otherwise,  the 
route  supplied  is  an  ordered  list  of  the  IGs  in 
the  path  to  the  nearest  upper  level  border 
gateway  The  requesting  IG  storos;-the  route  for 
uso  with  the  IP  source  route  option  for 
subsequent  datagram  forwarding  to  thpt 
destination. 

II.  PARTITION  REPAIR  BY  GATEWAYS' 

Military  packet  switching  applications  have 
strong  requirements  for  continued  computer 
communications  during  crisis  periods.  These 
requirements  led  to  the  development  .of  the 
connectionless  datagram  service  and  internet 
technologies  described  above,  and  they  continue 
to  drive  survivable  communications  research 
today.  In  addition  to  the  IAP  efforts  described 
above,  many  research  efforts  have  focused  on 
(GP  designs  to  meet  the  service  requirements 
of  specific  ASs.  This  section  will  address  the 
network  partition  problem  and  an  advanced  IGP 
called  the  Survivable  Internet  Routing  protocol. 

THE  NETWORK  PARTITION  PROBLEM 

A  network  can  become  partitioned  into  two  or 
more  segments,  where  hosts  in  the  same 
segment  can  stilt  communicate  but  hosts  in 
different  segments  can  not.  Partitions  can  bo 
caused  by  the  failure  of  nodes  and/or  certain 
links  in  the  network  or  by  Severn  congestion.  In 
the  case  of  mobile  radio  networks,  link  failures 
can  result  from  nodes  that  move  out  of  range  of 
each  other. 

As  discussed  tn  icerfi,  the  IGs  can  play  an 
important  role  in  restoring  communications 
between  the  network  segments.  Given  the 
ability  to  discover  and  exploit  the  aggregate 
internet  connectivity,  the  IGs  can  find 


alternate  paths  through  other  IGs  and  networks 
that  can  be  used  to  transport  datagrams  to  the 
segments-  of  a  partitioned  network.  Since  an  IG 
must  be  attached  to  a  segment  to  provide  an 
external  path,  the  physical  configuration  of 
internet  resources  relative  to  the  network 
partition(s)  is  obviously  an  important  factor. 

Figure  4  shows  a  sample  internet  configuration 
with  partitions  in  networks  B  and  C.  Because 
of  the  location  of  the  partition  m  network  C, 
there  is  nothing  that  the  IGs  can  do  to  restore 
service  to  host  Cl.  From  the  gateway  network 
perspective,  the  partition  in  network  B 
represents  a  broken  backbone  link  between  IG1 
and  IG3  and  a  questionable  access  link  to 
network  B  hosts. 

In  Figure  4,  IG1  and  IG3  would  detect  the 
network  B  partition  when  their  IGP  polling 
messages  to  each  other  were  not  answered.  IG2 
and  IG4  could  detect  the  partition  m  network  B 
from  IGP  updates  by  noticing  that  IG1  and  1G3 
are  reporting  connectivity  to  network  8  but  not 
to  each  other.  These  updates  will  indicate  that 
notwork  B  is  no  longer  a  viable  path  between 
IG1  and  IG3,  and  the  backbone  routes  that  are 
re-calculated  as  a  result  of  these  updates  will 
rolled  this  topology  change. 

A  more  difficult  problem  arises  when  an  IG 
receives  traffic  destined  for  a  host  on  a 
partitioned  network.  As  discussed  above,  the 
IGs  normally  base  routing  decisions  on  the 
network  portion  of  IP  addresses.  The  local 
portion  of  the  IP  addioss  is  used  by  the  network 
interface  module  to  determine  the  network 
layer  protocol  address  of  the  destination  host. 
The  physical  location  of  hosts  is  generally  not 
conveyed  by  these  addresses.  Therefore, 
additional  information  and/or  processing  is 
required  to  determine  which  IG  can  reach  the 
specified  host.  Once  this  is  known,  trafl'C  can 
bo  forwarded  to  that  IG  for  subsequent  delivery 
to  the  host.  This  approach  is  consistent  with 
the  routing  mechnaism  specified  by  IP. 

To  restore  communications  to  hosts  on 
different  segments  of  a  partitioned  network 
(e.g  hosts  B1  and  B2  m  Figure  4),  the  hosts 
could  either  play  an  active  or  passive  role  with 
the  IGs  in  finding  external  paths  through  the 
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FIGURE  4  -  PARTITION  REPAIR  EXAMPLE 


internal.  In  the  active  case,  the  hosts  play  an 
integral  role  jn  the  route  determination 
activities  In  the  passive  case,  the  hosts'  would 
simply  re-direct  urideliverable  traffic  to  an  IG, 
and  the  IG  would  find  the  external  route. 

In  addition  to  issues  regarding  the  division  of 
responsibilities  between  hosts  and  IGs,  the 
targeted  AS  environment  is  also  an  important 
consideration  in  IG  based  partition  repair 
solutions.  In  a  tactical  environment,  mobile 
radio  networks  can  bo  both  host  access  links 
and  backbone  links  in  a  particular  AS. 
Partitions  can  come  and  go  as  the  nodes  move 
about,  and  the  association  of  cooperating 
resources,  which  may  be  both  stationary  and 
mobile,  can  be  difficult  to  predict  and  control. 
Other  problems  such  as  link  quality 
measurement,  update  duplication  and  aging,  and 
contention  resolution  arise  from  the  broadcast 
nature  of  packet  radio  transmissions. 

In  contrast,  partition  repair  solutions  targeted 
for  a  strategic  environment  have  a  different 
sot  of  constraints.  Here,  communications  are 
primarily  transmitted  over  point-to-point 
links  between  stationary  resources.  Changes  In 
topology  during  peacetime  will  occur  primarily 
as  a  result  of  resource  failure,  scheduled 
maintenance,  and  occasionally  by  careless 
backhoe  operators.  After  an  attack,  the 
surviving  topology  is  likely  to  settle  down  and 
become  relatively  stable.  The  duration  of  the 
transient  period  will  obvioulsy  depend  on  the 
severity  of  damage  and  the  IGs'  ability  to  adapt 
to  the  changes. 

Since  strategic  networks  are  generally  more 
richly  connected  and  diverse  than  tactical 


networks,  compatibility  issues  associated  with 
active  host  involvement  are  difficult  to 
resolve.  However,  the  relative  stability  of  the 
strategic  environment  reduces  the  complexity 
of  the  problem  and  enables  the  delegation  of 
partition  repair  responsibilities  to  the  IGs. 

RELATED  WORK 

In  response  to  the  discussions  in  (cerfi,  Radia 
Perlman  presented  potential  solutions  in 
(perlmani)  The,  proposed  approach  is  based  on 
the  dynamic  association  of  gateways  with 
named  segment's  of  partitioned  network(s). 
Source  hosts  actively  participate  with  the  IGs 
to  locate,  by  trial  and  error,  the  segment  where 
the  destination  host  is  attached.  Once  located, 
the  sourca  hosts  insert  a  special  IP  address 
for  the  destination  host,  based  on  the  derived 
network  segment  name,  in  the  destination 
address  field  of  the  IP  header.  The  IGs  route 
the  traffic  based  on  this  derived  address  as 
described  in  Section  One. 

To  avoid  the  problems  involved  with  active  host 
involvement,  Perlman  presented  a  revision  to 
the  first  proposal  in  (perlmans).  The 
modification  provided  for  source  gateway 
determination  of  the  network  segmont  names 
and  for  optional  host  participation.  II  a  source 
host  does  not  participate  actively  however,  the 
source  gateway  will  send  duplicate  datagrams 
to  each  network  segment. 

Another  approach  was  proposed  in  [suj  which 
eliminates  the  need  to  name  the  segments  of 
partitioned  networks.  In  this  approach,  the  IP 
host  addresses  are  expanded  to  include  a  name 
which  associates  the  host  to  a  specific  IG. 
Thus,  the  IP  addresses  are  changed  from 
network  centric  names  to  gateway  centric 
names  and  IG  routing  decisions  are  based  on  the 
IG  portion  of  the  IP  address  instead  of  the 
network  portion.  The  approach  involves  active 
host  involvement  where  the  hosts  are 
responsible  for  associating  themselves  with 
an  IG  by  using  a  "gateway  affiliation  request." 

Only  the  IGs  attached  to  a  partitioned  network 
(i.e.  destination  IGs)  need  to  be  concerned  with 
host  reachability  information.  Other  IGs 
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continue  to  operate  as  usual  without  regard  to 
network  partition's  When  traffic  for  -  a  Iiost  on 
the  partitioned  network  fs  received  by  a 
destination  IG,  it  .will  know  if  it  can  reach  the 
host  or  not.  if  it  can,  it  will  forward  the 
datagram  to  the  host  directly.  If  it  can’t,  it 
will  ‘  encapsulate  the  datagram  in  a  new  IP 
header  and  forward  it  to  a  destination  IG  that 
can  reach  the.  host.  That  IG  will  strip  off  the 
extra  header  and  use  the  original  header 
information  to  deliver  the  datagram  into  the 
network  segment  to  the  destination  host. 

SURVIVABLE  INTERNET  ROUTING 

The  Survivable .  Internet  Routing  (SIR)  protocol 
is  an  IGP  that  was  designed  by  Ford  Aerospace 
Corp,  Colorado  Springs  Division  under-an  RADC 
contract  that  was  completed  in  November 
1986.  A  detailed  description  of  tho  issues  and 
rationale  which  led  to  the  chosen  SIR  design 
can  bo  found  In  imcoowelu).  A  follow-on  RADC 
contract  was  awarded  to  Ford  in  September 
1987  to  implement  the  SIR  algorithms  for  tho 
Multinet  Gateway  Advanced  Development  Model 
(MNG  ADM).  A  description  of  tho  primary 
features  of  tho  SIR  protocol  design  is  given 
below. 

From  its  inception,  the  SIR  design  was  targeted 
for  tho  strategic  environment.  Initial  contract 
studies  focused  on  ways  to  incorporate  the 
desirable  features  ol  previous  work  into  an  IG 
based  solution  with  a  minimum  impact  on 
existing  protocol  standards  and  with  passive 
host  involvement.  Considerable  attention  was 
centered  on  the  trade-offs  between  the 
distribution  and  maintenance  of  host 
reachability  information  and  the  amount  of 
backtracking  required  when  traffic  is  re-routed 
to  appropriate  destination  IGs. 

The  SIR  development  was  primarily  dedicated 
to  tho  problem  of  delivering  traffic  to  hosts  on 
a  partitioned  network.  The  end  products  of  tho 
initial  SIR  contract  include  a  generic  partition 
repair  solution  and  a  complete  IGP 
specification  for  the  MNG  ADM.  The  normal  IGP 
processes,  as  described  in  Section  One,  were 
developed  under  the  Multinet  Gateway  contract 
(awarded  to  Ford  in  1981)  and  incorporated  into 
the  SIR  configuration. 


The  SIR  IGP  measurements  and  distribution 
protocol  provide  a  complete  view  of  the  AS 
topology  at  each  MNG  node.  Updates  are 
distributed  to  all  other  MNG  nodes  using  a 
reliable  flooding  mechanism  on  a  periodic  basis 
and  whenever  a  change  is  detected.  The  route 
calculation  is  based,  on  the  minimum  distance 
to  the  MNGs  attached  to  the  destination 
network  and  the  next  MNG  in  the  path.  Unique 
identifiers  are  assigned  to  each  MNG  by  the  SIR 
IGP  to  avoid  the  confusion  caused  by  each 
having  multiple  IP  addresses.  This  gateway 
centric  naming-  scheme,  used  only  for 
gateway-to-gateway  traffic  in  an  MNG  AS, 
simplifies  partition  detection,  update 
management,  and  source  routing  mechanisms. 

Partitions  are  detected  in  all  MNGs  by  local  IGP 
measurements  and  from  IGP  updates  as 
described  above.  Once  detected,  the  partitioned 
network  is  noted  in  tho  IP  routing  table  to 
signify  that  traffic  destined  for  that  network 
must  invoke  partition  repair  processes.  With 
this  approach,  this  special  processing  is 
executed  only  as  needed  without  interfering 
with  normal  IGP  or  IP  datagram  forwarding 
processes. 

The  SIR  IGP  processing  that  provides  a  generic 
partition  repair  solution  is  described  below 
without  further  reference  to  the  MNG.  It  is 
assumed  that  each  IG  knows  of  all  network 
partitions  and  all  IGs  attached  to  the 
partitioned  network(s).  The  term  "source  IG" 
will  be  used  to  refer  to  the  first  IG  to  receive 
an  IP  datagram  destined  for  a  partitioned 
network,  and  the  term  'destination  IG"  will 
refer  to  an  IG  attached  to  a  partitioned 
network. 

Upon  receipt  of  a  datagram  destined  for  a  host 
on  a  network  which  is  known  to  be  partitioned 
but  a  route  to  it  is  unknown,  the  source  IG  will 
initiate  special  processes  to  determine  which 
destination  IG  can  reach  the  specified  host. 
Those  processes  will  build  an  IGP  Probe 
Request  message  for  each  destination  IG  on  the 
network  in  question  The  destination  hosts  and 
the  source  IG  are  specified  in  the  IGP  Probe 
Request. 

Upon  receipt  of  an  IGP  Probe  Request,  each 


224 


destination  1G  sends  a-  special  IP  message, 
called -an  Echo  Request,  to  the  host  listed  in  the 
IGP  Probe  Request.  Obviously,  the  frost  -will 
only  receive  the  ones  sent  from  IGs  attached  to 
its  segment  of  the  partitioned  network.  The 
proper  response  to  an  IP  Echo  Request  is  an  IP 
Echo  Response.  Echo  Request/Response 
messages  are  short  IP  datagrams  that  hosts  are 
required  to  process/generate  when  they 
connect  to  the  internet.  Upon  receipt  of  an  IP 
Echo  Response  from  the  specified  host,  the 
destination  IG(s)  send(s)  an  IGP  Probe  Response 
to  the  specified  source  IG  to  indicate  that  it 
can  reach  the  specified  host. 

Upon  receipt  of  an  IGP  Probo  Response.  Ihe 
source  IG  extracts  the  destination  IG  address  or 
name  and  enters  it  into  the  host  reachability 
table  it  has  created  for  the  partitioned 
network.  If  multiple  IGP  Probe  Responses  are 
received  in  response  to  a  given  IGP  Probe 
Request,  only  tho  first  one  to  arrive  is 
processed.  This  reflects  tho  assumption  that 
tho  first  one  to  arrive  was  sent  on  tho  best 
path  between  the  source  IG  and  the  destination 
host. 

The  destination  IGs  listed  in  the  host 
reachability  table  are  used  in  conjunction  with 
the  IP  source  route  option  when  subsequent 
traffic  destined  for  the  listed  hosts  is 
received.  When  an  entry  does  not  exist,  the 
probe  sequence  just  described  must  be 
repeated.  To  avoid  excessive  host  reachability 
tables  in  each  IG,  the  entries  can  bo  limited  to 
a  certain  number  and  aged  accordingly.  Caro 
must  be  taken  when  implementing  this  scheme 
to  achieve  a  good  balance  between  the  number 
of  hosts  for  which  paths  are  known  and  the 
frequency  of  which  the  probing  sequence  must 
bo  repeated.  Some  guidlines  are  given  in 
iMCOOWEU). 

Partition  repair  processing  remains  in  effect 
until  the  IGP  updates  indicate  that  the  partition 
no  longer  exists.  When  that  happens,  the 
partitioned  network  indication  is  removed  from 
the  IP  routing  table  for  the  network  in  question 
so  that  the  special  processing  will  not  be 
invoked. 

Hosts  and/or  switches  that  can  recognize  that 
their  network  has  become  partitioned  can 


re- direct  intra-network  traffic  to  an  JG  for 
external  delivery  via  the  internet.  The  IGs 
perform  the  processing  described  above  to  find 
a  path  to -the  destination  host. 

SUMMARY 

Inter-AS  Routing  Protocols.  (lAPs)  restore  the 
interoperability  that  was  lost  with  the 
creation  of  Autonomous  Systems  (ASs)  and 
internet  survivability  is  restored  as  a  result. 
The  Dissimilar  Gateway  Protocol  enhances  the 
survivability  bffered  by  the  Exterior  Gateway 
Protocol  by  providing  near  optima!  routing 
capabilities  and  distributing  the  IAP  burden 
according  to  operational  need  and  Internet 
Gateway  capabilities.  These  features  will  lead 
to  a  more  dynamic  and  distributed  control  of 
internet  traffic  that  should  improve  IAP 
robustness  and  operational  efficiency. 

Internet  Gateways  can  restore  service  to  hosts 
on  a  partitioned  network  by  finding  internet 
paths  between  surviving  segments.  Tho 
Survivable  Internet  Routing  protocol  is  a  source 
gateway  approach  to  the  partition  repair 
problem  for  the  relatively  stable  strategic 
environment.  Internet  Gateways  collectively 
determine  internet  routes  to  segments  of 
partitioned  networks.  Host  involvement  in  this 
process  is  limited  to  echo  request/response 
processing  required  by  tho  Internet  Protocol 
error  service  specification. 
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A  Absrca 

In  this  paper  me  consider  a  commumcaaoa  sys lea 
with  a  large  number  cf  gcographicafly  separated  users.  An 
active  user  (te.  one  who  needs  to  make  use  of  the  common 
communications  resource)  can  be  in  one  of  two  possible 
states  (H.  L),  depending  on  bis  narcrc  and/or  the  type  of 
information  that  he  desires  to  communicate.  Users  who  are 
in  state  H  are  given  some  priori^  over  those  in  sate  L. 
Users  which  are  in  state  H  by  nature  can  be  commanders  in 
a  military  environment.  Users  which  are  in  state  U  fo 
the  type  of  information  that  they  possess  can  be  any  user 
who  has  a  critical  information  that  desenes  fast  transmis¬ 
sion  to  a  central  decision  maker.  Tbc  iralfic  generated  by 
the  users  in  state  H  is  assumed  to  be  small  compared  to  the 
total  traffic  that  the  system  can  accommodate. 

For  the  above  system  we  develop  a  binary,  feedback 
(collision  /  non -collision)  random-access  protocol  which 
serves  all  the  users.  Throughput  analysis  is  performed  and 
the  stability  region  of  the  system  is  obtained-  Mean  packet 
delay  results  are  also  analytically  obtained  for  the  cases  in 
which  the  traffic  generated  by  the  users  in  state  H  is  less 
than  30%  of  the  total  traffic  that  the  system  can  accommo¬ 
date.  The  delay  Jesuits  show  that  the  protocol  induces 
much  shorter  delay  for  the  high  priority  messages. 


1.  Introduction 

A  lot  of  work  has  been  directed  towards  the  develop¬ 
ment  of  die  multi  user  random  access  communication  sys¬ 
tems  with  a  homogeneous  population  of  users  U]-[S). 
There  are  many  practical  applications,  however,  in  which 
some  or  all  users  can  alternate  between  to  possible  states  H 
snd  L  Packets  which  arc  generated  by  users  in  state  H 
shoula  oe  given  some  priority  over  those  generated  by 
users  in  state  L.  Users  who  arc  in  the  same  '«ac  are  con¬ 
sidered  to  be  in  the  same  class.  As  a  result  two  classes  of 
users  arc  created  {II,  L)  and  the  user  population  is  gen¬ 
erally  no.vhomoge»eous. 
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la  a  effesy  esverpemert.  pensaacss  member  of 
class  //  can  be  ccmmanders.-wiSe  aay  ocher  user  of  tbc 
system  who  has  criScal  in&gmrrioo  can  cove  fccm  class  L 
rodzss  H  temporarily  2nd  return  to  his  original  class  after 
the  critical  infomapoo  has  bcca  transmuted  successfully. 

Ia  a  mobile  user  eavimemest  where  users  move  in 
and  out  of  the  range  of  the  system.  or  move  from  rcgxm  to 
region,  fast  moving  users  nay  need  to  experience  shorter 
delays  than  the  rc^^riar  ones;  this  may  be  necessary  to  make 
packet  transm i>sjoa  possible  while  the  user  is  soil  inside 
thercpoa.  Also,  users  that  2re  dose  to  the  boundaries  of  a 
regioo  2nd  arc  gong  to  move  otfside  it,  should  experience 
sbonex  delays.  These  users  can  be  members  of  class  H. 

In  a  neo-military  st2ric  user  environment  members  of 
class  H  can  be  users  who  pay  more  or  users  who  caray  con¬ 
trol  infomarion  which  is  crirical  for  the  operation  of  a  sys¬ 
tem.  have  high  priority  and  should  reach  their  destination 
faster  than  the  regular  ones.  High  priority  packets  can  be 
those  which  arc  generated  by  high  priority  users  (eg. 
important  users,  cr  users  that  can  pay  more  for  beoer  ser¬ 
vice),  or  can  be  packets  that  arc  generated  by  any  user  of 
the  system  but  the  information  that  is  carried  is  character¬ 
ized  as  important  and  deserves  high  priority  in  its  transmis¬ 
sion. 

In  the  next  section  wr  describe  a  communication  sys¬ 
tem  with  two  classes  of  messages  (or  users)  in  detail.  In 
the  same  section  we  also  describe  the  proposed  random 
access  protocol  which  determines  the  common  channel  alo- 
cation.  In  section  III  throughput  and  delay  analysis  arc 
briefly  described,  while  in  the  last  section  the  results  of  the 
analysis  arc  shown  and  conclusions  arc  drawn. 


II.  The  Random  Access  Protocol 

We  consider  a  large  population  of  geographically 
separated  users  who  use  a  single  communication  channel. 
User*  which  at  certain  time  instant  arc  in  state  H  have  some 
priority  over  the  rest  of  the  .  **puIation  and  they  form  the 
high  priority  class  // .  It  is  assumed  that  the  packet  traffic 
generated  by  th3t  class  represents  only  a  small  percentage 
of  the  total  traffic  that  is  served  by  the  system.  In  other 
words,  it  is  assumed  that  the  packets  that  need  special  ser¬ 
vice  are  rare  and  this  is  a  realistic  assumption  at  least  for 
the  environments  which  were  described  atove. 
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Figure  1. 

Operation  of  the  algorithm  via  the  imaginary  slack; 
H  (L)  are  the  high  (low)  priority  users. 


session  length  of  multiplicity  (  mu ,  nu  ),  by  following  pro¬ 
cedures  similar  to  those  that  can  be  found  in  14),  17],  (8). 
The  set  of  pairs  0-hh)  for  which  such  a  bound  was 
possible  to  obtain,  is  a  lower  bound  on  the  stability  region 
of  the  algorithm.  An  upper  bound  can  be  obtained  by  solv¬ 
ing  a  truncated  version  of  an  infinite  dimensionality  linear 
system  of  equations  with  respect  to  L^v.  114].  The  latter 
sys-em  is  obtained  by  considering  the  expectations  of  the 
recursive  equations  which  describe  the  operation  of  the  sys¬ 
tem.  The  stability  region  of  the  algorithm  is  plotted  and  it 
i$  shown  in  Fig.  2. 


The  mean  delay  of  the  high  and  low  priority  packets  is 
also  calculated  but  only  for  input  traffic  pairs  (Xf.X,)  such 
that  Xf£065  packets  per  packet  length.  For  that  region, 
bounds  on  the  involved  quantities  was  possible  to  obtain. 
This  range  of  pairs  determines  the  operation  region  of  uic 


algorithm;  i.e. 


S<o  = 


(Xh.Xj)  •  OSXh^G.065.  v 


where  htruifaJ  can  be  obtained  frorr.  Fig.  2.  The  delay 
analysis  is  performed  by  applying  the  regeneration  theory 
procedures  that  appear  in  [l2],  14),  19),  I1CJ,  or  by  using 
directly  the  strong  law  of  large  numbers,  111),  17).  Very 
tight  upper  and  lower  bounds  on  the  mean  delay  of  the  high 
and  low  priority  packets,  D*  and  Dj,  respectively,  were  cal- 


Hgwe2. 

Upper  and  lower  bounds  on  the  maximum  stable 
throughput;  >*  and  Xj  are  in  packets  per  packet  length. 


culated  for  some  values  of  the  input  traffic;  the  results 
appear  in  Table  1. 


V  Results  and  Conclusions 

The  protocol  that  we  developed  and  analyzed  is 
appropriate  for  an  environment  where  users  c?n  be  in  one 
out  of  two  possible  states.  Two  different  classes  of  users 
are  created  to  acommodate  users  in  different  states.  Thus 
the  user  populauon  is  non-homogeneous  and  some  user  arc 
given  priority  to  transmit  their  packet  An  algorithm  for  a 
homogeneous  user  population  that  consists  of  users  in  state 
H  only  and  use  binary  feedback  information  and  simple 
splitting  after  a  collision,  has  been  found  to  achieve  a  max¬ 
imum  stable  throughput  of  -  .36 113)  The  algorithm  that 
wc  suggest  for  the  non-homogeneous  population  achieves 
total  throughput,  at  least,  between  320  -  .357  depending  on 
the  contribution  of  the  two  classes  to  the  total  input  traffic. 

In  Fig.  3,  Fig.  4  and  Fig.  5,  plots  of  the  bounds  on  D* 
and  D|  versus  Xj,  for  Xh=0.01,  Xh=0.03  and  >*=0.065 
respectively,  are  shown.  These  values  of  >*  correspond  to 
an  input  traffic  coming  from  the  high  priority  class  equal  to 
-  3%,  -  10%  2nd  -  20%  of  the  total  traffic  that  can  be 
served  by  the  system.  From  the  plots  it  can  be  observed 
that  the  high  priority  packets  (coming  from  users  in  state 
H)  experience  shorter  debjra  than  the  packets  of  class  L 
the  difference  is  essential  for  Xi>.5X1imx  If  the  nominal 
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Tbc  input  traffic  to  the  ejuned  that  is  generated  by 
each  class  of  users  is  assumed  to  be  Poisson  distributed 
with  intensities  X*  and  £§  respectively,  the  Poisson  model 
is  proved  to  be  an  appropriate  model  for  the  cumulative 
traffic  that  is  generated  by  a  large  population  of  bursty 
users,  which  is  assumed  to  be  the  case  in  the  system  under 
consideration.  Messages  are  assumed  to  be  packetized  and 
of  fixed  length;  it  is  assumed  that  time  axis  is  slotted  and 
that  the  beginning  of  a  packet  transmission  coincides  with 
the  beginning  of  a  slot. 

All  users  may  access  the  channel  as  long  as  they  have 
a  packet  to  transmit;  the  first  transmission  attempt  takes 
place  at  the  beginning  of  the  first  time  slot  that  follows  the 
packet  generation  instant  Because  of  the  freedom  that  the 
users  enjoy  in  acc  ssing  the  channel,  a  transmission 
attempt  results  in  cither  a  successful  packet  transmission, 
or  in  a  packet  collision  if  more  than  one  packet  transmis¬ 
sions  were  attempted  in  the  same  time  slot  Thus  it 
becomes  obvious  that  an  algorithm  is  necessary  in  order  for 
the  conflicts  to  be  resolved  and  the  channel  to  remain 
usable. 

It  is  assumed  that  all  users  that  have  a  packet  to 
transmit  (and  only  these  users  need  to  do  that)  keep  sensing 
the  channel  and  are  capable  of  detecting  a  packet  collision; 
that  is,  we  assume  th3t  a  binary  feedback  information  is 
available  to  all  active  users  before  the  end  of  the  current 
slot,  revealing  whether  the  slot  was  involved  in  a  packet 
collision  (Q  or  not  (NQ.  Channel  errors  are  not  taken  into 
consideration  and  packet  collision  is  the  only  event  that 
results  in  art  unsuccessful  transmission. 

The  first  time  transmission  policy  is  kept  the  same  for 
both  classes  of  users;  it  is  simple  and  implies  that  a  packet 
is  transmitted  at  the  beginning  of  the  first  slot  following  the 
packet  generation  instant.  It  is  apparent  that  if  the  two 
classes  are  to  experience  different  delays,  they  should  fol¬ 
low  different  steps  in  the  collision  resolution  procedure. 
We  develop  a  simple  limited  sensing  collision  resolution 
algorithm.  The  limited  sensing  characteristic  is  apparently 
important  for  a  mobile  user  environment  since  the  users 
may  not  be  able  to  know  the  history  of  the  channel  before 
their  packet  generation  instant.  We  assume  that  the  state  of 
a  user  is  determined  by  the  content  of  a  counter  that  is 
assigned  to  each  one  of  them;  this  counter  is  updated 
according  to  the  steps  of  the  algorithm  and  the  feedback 
from  the  channel.  Users  whose  counter  content  at  the 
beginning  of  a  time  slot  is  equal  to  one,  transmit  in  that 
slot. 

Let  cf(C|)  denote  the  counter  content  of  a  high  prior¬ 
ity  (regular)  user,  at  the  beginning  of  the  i*  time  slot.  Let 
also  F,,  F,e(C,NC),  denote  the  channel  feedback  informa¬ 
tion  just  before  the  end  of  the  i*  time  slot.  The  steps  of  the 
collision  resolution  algorithm  consist  of  the  following 
counter  updating  procedures  that  take  place  at  the  end  of 
each  time  slot. 

(A)  IfF,  =  Cthen 

j,  _  ^rcfft=l  with  probability  $ 

C|  “  1  s»c|Vi=2  with  probability  l-$ 


I  _  ^.cj+1=2  with  probability  a 
C,*~  with  probability  1-<J 

cj=r-*c}*i=r+2,  r£2,je&h) 

<B)IfI?=NCthen 

c| =r->  cj+i  =  r-I ,  r£l ,  jeQ,h) 

The  first  time  transmission  policy  can  also  be 
described  by  using  the  concept  of  the  counter,  it  simply 
implies  tha:  a  new  user  sets  the  counter  equal  to  one  at  the 
end  of  the  slot  in  which  its  packet  arrival  took  place.  It  did 
not  seem  to  us  reasonable  to  develop  different  first  ume 
transmission  policies  for  the  two  classes  of  users.  It  would 
probably  be  a  waste  of  the  channel  capacity  to  give  priority 
to  rarely  appearing  high  priority  packets,  before  it  becomes 
known  that  a  collision  took  place.  If  a  conflict  occurs,  then 
the  collision  resolution  algorithm  offers  some  priority  to 
the  high  priority  packets  that  were  involved  in  the  conflict. 

From  the  description  of  the  algorithm  it  can  be  easily 
observed  that  the  system  is  of  continuous  entry,  i  e.  new 
users  enter  the  system  at  the  beginning  of  the  first  slot  that 
follows  their  packet  arrival,  unlike  what  happens  in  the 
blocked  access  algorithms  (2J.  The  limited  sensing  charac¬ 
teristic  of  the  algorithm,  together  with  the  lack  of  need  for 
a  central  controller  to  coordinate  the  users,  increase  the 
robustness  and  applicability  of  the  system. 

The  operation  of  the  algorithm  can  also  be  described 
via  the  concept  of  the  imaginary  stack.  Users  whose 
counter  content  equals  n  are  located  in  the  n*  cell  of  the 
stack.  Depending  on  the  channel  feedback  and  their  loca¬ 
tion  in  the  stack,  the  users  move  up  and  down  as  it  is  shown 
in  Fig.  1. 


In  this  section  we  derive  bounds  on  the  stability 
region  of  the  algorithm  and  the  mean -packet  delay. 
Analysis  is  based  on  the  concept  of  the  session  and  the 
development  of  recursive  equations  to  describe  the  opera¬ 
tion  of  the  system.  A  session  is  defined  as  a  number  of 
consecutive  slots  between  properly  selected  renewal  points 
of  the  system,  (6).  If  p  users  in  state  H  and  v  users  in  state 
L  attempted  a  packet  transmission  in  the  first  slot  of  a  ses¬ 
sion,  then  the  pair  (p,v)  determines  the  multiplicity  of  that 
session.  It  can  be  easily  concluded  that  the  multiplicities 
of  the  sessions  are  independent  identically  distributed  ran¬ 
dom  variables. 

If  for  an  input  traffic  pair  (Xf,  X,),  the  expected  value 
of  the  session  length  of  multiplicity  (p.v)  is  finite,  for  p 
and  v  finite,  then  wc  say  that  the  operation  of  the  system  is 
stable  and  the  pair  (Xf,  X,)  belongs  to  the  stability  region  of 
the  system.  The  maximum  overall  sets  of  stable  points 
(Xfc,  X]}  determines  the  maximum  stable  throughput  region 
and  is  denoted  by  S^. 

Detailed  stability  and  delay  analysis  of  the  proposed 
protocol  can  be  found  in  (6).  For  the  stability  analysis  of 
the  system  we  calculate  a  linear  upper  bound  on  the  mean 


point  of  operation  of  the  system  is  set  around  Xj=9XiPUJ?, 
then  the  average  high  priority  packet  delay  is  less  than  half 
the  one  of  the  other  class. 

Tn  table  1,  the  delay  results  of  the  suggested  algorithm 
are  compared  with  the  delay,  D*.  that  the  homogeneous 
class  equivalent  algorithm  (as  described  above),  induces 
(13).  Again  we  can" observe  that  always  Dj,<D*  and  panic- 
ularly  D},<.5D*  around  the  nominal  point,  the  latter  being 
defined  as  before. 

Since  privileged  service  is  offered  to  some  users,  there 
has  to  be  a  price  that  the  rest  of  the  population  must  pay. 
The  first  consequence  >  is  the  small  reduction  in  the  total 
throughput,  as  mentioned  before.  The  other  penalty  is  the 
increased  average  low  priority  packet  delay  compared  with 
the  one  that  the  homogeneous  population  equivalent  algo¬ 
rithm  induces.  From  table  1  we  can  sec  that,  indeed, 
Dj>D*(  as  it  was  expected.  The  increase  in  Dj  is  far  from 
catastrophic  and  it  is  realistic  to  consider  that  it  is  possible 
for  a  system  to  tolerate  these  delay  increases  for  the  low 
priority  class,  especially  if  strict  limitations  exist  for  the 
high  priority  users. 
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Table  1. 
Delay  results. 


Mean  packet  delay  of  the  high,  Dj,  and  low  Dj  priority 
classes  (in  packet  lengths)  versus  the  total  input  traffic 
rate  XT  (packets/packet  length),  for  Xh=.01 
(packets/packet  length). 


BmsS 

Mean  packet  delay  of  the  high,  and  low  Dj  priority 
classes  (in  packet  lengths)  versus  the  total  input  traffic 
rate  Xy  (packets/packet  length),  for  Xh=.03 
(packets/packet  length). 
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Figure  5. 

Man  packet  delay  of  the  high,  D*  and  low  D,  priority 
clasres  (tn  packet  lengths)  versus  the  total  input  traffic 
rate  XT  (packets/packet  length),  for  Xk=,065 
(packets/packet  length). 
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Summary 

SAFENET  provides  naval  warfare  system 
designers  with  new  tools  and  capabilities 
to  achieve  reliable,  interconnection  and 
distributed  processing,  along  with  the 
potential  for  significant  cost  savings. 

SAFENET  is  the  Navy’s  Local  Area  Net¬ 
work  (LAN)  Standard  development  effort, 
which  is  being  conducted  under  the  aegis 
of  the  Next  Generation  Computer  Re¬ 
sources  (NGCR)  program.  SAFENET 
provides  real-time,  militarized  LAN  stan¬ 
dards  based  on  the  international  stan¬ 
dards  organization/open  systems  inter¬ 
connect  (ISO/OSI)  Reference  Model,  the 
process  for  creating  these  standards  being 
a  dynamic,  interactive  endeavor  involving 
the  Navy  and  industry.  Both  aspects  are 
discussed  in  this  paper.' 

SAFENET I 

SAFENET  I  is  the  first  in  this  family  of 
LAN  standards. 2  It  is  an  enhancement  of 
the  IEEE  802.5  LAN  Standard  and  will  be 
suitable  for  applications  requiring  high 
survivability  in  military  platform?,  such 
as  Navy  and  Coast  Guard  ships. 


.-As  unique  matters,  the  standard  ad- 
•  dresses  achieving  survivability,  at  the 
physical  layer:  communications  issues 
such  as  data  latency  and  the  need  to 
achieve  higher  throughput  (through  the 
use  of  “light  weight”  protocols  at  layers  3 
and  4);  network  management  and  net¬ 
work  security.  Upper  layers  issues,  spe¬ 
cifically  at  the.Session  and  Application 
layers  (layers  5  and  7),  are  also  of  concern 
but  will  not  be  discussed  in  this  paper.3 

SAFENET  I  is  the  result  of  an  interactive 
and  dynamic  process  of  jointly  developing 
military  open  system  standards  with 
industry.  The  goal  is  to  achieve  standards 
which  are  suitable  for  military  applica¬ 
tions  but  which  originate  from  and  are 
compatible  with  commercial,  non-proprie¬ 
tary  standards  which  offer  the  economies 
of  commercial  off-the-shelf  equipment,  i.e. 
low  development  costs  for  the  Navy  and 
industry  provided  support.  The  result,  of 
the  process,  will  be  standards  which  can 
be  returned  to  the  public  domain  for  use 
by  anyone  with  similar  military  or  com¬ 
mercial  requirements. 

SAEENEX^=Jhe.Era(kct 

SAFENET  has  its  roots  in  the  clear  under¬ 
standing  by  the  Navy  and  Coast  Guard 
that  local  area  networks  hold  enormous 
promise  as  an  additional  design  tool  in 
providing  reliable  computer-to-computer 
and  computer-peripheral  data  communi¬ 
cations  between  weapon  and  warfare 
systems  and  subsystems. 

The  existing  practice  of  wholesale  point- 
to-point  wiring  is  inefficient,  expensive, 
inhibits  systems'growth,  consumes  pre¬ 
cious  space  and  adds  significant  weight  to 
our  platforms.  The  LAN  offers  a  solution 
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'for  reducing  tKe?N  (N-10  'discrete  connec¬ 
tion  problem  of  this  ^mtao-poiht‘ archi¬ 
tecture  (without  the  use  of  costly  arid  non¬ 
concurrent  digitalswitches);  The  net¬ 
works  must  meet  our  performance  and 
reliability  needs  and  be  affordable. 

The  principal  deficiency  in  available  com¬ 
mercial  LANs,  from  a  niilitary  perspec¬ 
tive,  is  survivability  —  the  ability  to 
continue  to  function  in  the  face  of  elec¬ 
tronic  failure  or  battle  damage.  Another 
is  the  inability  to  provide  deterministic 
delivery  —  the  ability  to  guarantee  deliv¬ 
ery  of  a  data  packet  within  a  given  time 
frame.  The  existing  ISO  office  automation 
protocols  and  the  stochastic  delivery 
■characteristics  of  carrier  sense  LANs 
make  them  unacceptable  for  the  stringent 
real-time  data  delivery  requirements  for 
weapon  and  warfare  systems. 


The  physical  layer  media  decision  was 
straightforward  since  the  advantages  of 
using  fiber  optics  were  obvious  and  there 
was  never  significant  argument  on  the 
point.  The  key  considerations  were  the 
maturity  of  the  fiber  optic  components  and 
their  suitability  for  use  in  a  military  envi¬ 
ronment. 

Linear  and  star  configurations  were  re¬ 
jected.  Those  which  were  based  on  con¬ 
tention  media  access  protocols  would  not 
provide  deterministic  delivery.  These 
topologies  also  lacked  the  required  sur¬ 
vivability  features,  in  that,  even  if  redun¬ 
dant,  a  break  in  both  paths  causes  iso¬ 
lated  partitioning  of  nodes  in  the  network. 
Finally,  these  configurations  do  not  easily 
accommodate  growth. 

On  the  other  hand,  of  the  various  LANs, 
linear  token  passing,  linear  contention, 


and  token  passing  rings,-  the  rings  provide  - 
the  greatest  throughput  efficiencies.  The 
IEEE  802.5  token  passing  ring  standard 
was  selected  as  the  basis  for  SAFENET I. 
See  Figure  (1).  By  their  nature,  token 
rings  deliver  data  deterministically  and 
the  IEEE  802.5  standard  also  provides 
eight  levels  of  access  priority.  Further, 
simulation  modeling  has.  indicated  that 


■  USER  APPLICATION 


rig.  (1)  ToJwn  Ring  (103-802.5) 

token  rings  are  indeed  stable  under  satu¬ 
rated  loading  conditions.’ 

What  remained  to  be  addressed  was 
acliieving  a  survivable  architecture.  The 
theoretical  gains  in  survivability  that 
result  from  a  set  of  dual  rings  have  been 
known  for  some  time.  Although  some  dual 
ring  products  were  commercially  avail¬ 
able,  there  existed  no  commonly  recog¬ 
nized  standard  that  was  multi-vendor 
supportable.  To  minimize  development 
costs  and  achieve  multi-vendor  interop¬ 
erability,  SAFENET  I  adopted  a  dual 
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counterrotating  ring.topology  based  on 
the  IEEE  802.5  standard,  shown  in  Figure 
(2),  and  assumed  use  of  the  existing  Dual 
Counter-rotating  Token  Ring.(IEEE-802.5 
Enhanced)  commercially  available  Texas 
Instruments  TMS-380  adapter  chipset, 
which  implements  the  network  Media  Ac¬ 
cess  Control  (MAC)  and  Logical  Link 


H  cser  jirucui® 
rig.  (2) 

Du*l  Ccunt*r-rot*tlng  ToJc«n  Ring 
(IEEX-802.5  Enhanced) 

Control  (LLC)  functions  in  silicon  —  no 
wheel  re-invention  allowed! 

The  first  level  of  survivability  consists  of 
traffic  shifting  from  the  primary  ring  to 
the  secondary  in  the  event  of  damage  to 
the  primary  ring.  For  shipboard  applica¬ 
tions,  this  is  a  feasible  damage  state  since 
it  is  practical  to  physically  alt-route  the 
second  ring  in  a  ship  by  different  cable 


ways. so  that  severing  one  path  will,  with 
high  probability,  leave  the  second  intact. 
The  second  level  of  survivability  is  ob¬ 
tained  by  the  counter-rotating  feature  of 
the  two  rings.  As  indicated  in  Figure  (3), 
loss  of  a  section  of  the  ring  through  de¬ 
struction  of  node(s)  or  complete  severing 
of  a  node  —  causes  the  last  remaining 
node  at  each  “end”  of  the  network  to  wrap 
the  incoming  data  back  onto  the  outgoing 


riu*d  Ned*  Wrap 
Fig.  (3) 

Dual  Count4ir-rot*tJjig  ToXan  Ring 
(Zm:-802.5  Enhanced) 

data  path, reconstituting  the  remaining 
intact  portion  of  the  network. 

Additional  damage  to  the  ring  will  result 
in  partitioning,  but  with  continued 
operation  of  remaining  intact  sections.  If 
additional  survivability  is  required,  sev¬ 
eral  expansions  oh  the  theme  are  viable 
including  a  complete  duplication  of  the 
dual  ring  network.  Other  alternatives 
include:  back-up  nodes  or  standby  bridges 
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between  segments  of  the  ring  which  are 
considered  most,  vulnerable, ;and  damage 
control  capabilities  such  as  field  splices 
and  cable  repair  kits. 

An  additional  feature  incorporated  into 
the  lower  layer  ofSAFENET  I  is  the  use 
of  optical  bypass  switches  at  each  node.  If 
a  node  is  inactive  —  without  power — the 
switch  passes  the  light  signal  straight 
through  the  node  with  only  a  small  loss  in 
signal  power.  Up  to  twelve  nodes  .can  be 
bypassed  before  signal  regeneration  is 
required.  Aboard  ship,  that  many  nodes 
will  normally  be  equipped  with  backup 
power  to  support  critical  applications  or 
redundant  nodes'to  ensure  continued 
operation  of  the  network. 

At  this  writing, "the  physical  and  data  link 
layer  issues  are  well  in  hand. 


The  SAFENET  development  effort  has  not 
been  confined  to  just  the  lower  layers  of 
the  reference  model.  .We  recognized  early 
that  to  develop  a  complete  SAFENET  I 
standard,  several  other  protocol  issues 
must  also  be  addressed. 


The  first  of  these  is  that  of  data  latency,  or 
expeditious  delivery  of  vital  packets  of 
data  in  tactical  situations.  Although  the 
full  ISO  stack  will  suffice  for  general 
purpose  use  and  internetworking  require¬ 
ments,  it  was  recognized  that  an  addi¬ 
tional  etack  of  protocols  would  be  required 
to  achieve  low  latency/high  throughput  for 
data  transfer  between  weapon  and  war¬ 
fare  systems.  In  final  implementation, 
the  additional  stack  would  be  co-resident 
with  the  standard  ISO  protocols. 


This  requires  developing  real-time  Net¬ 
work  and  Transport  layer  protocols  to 
meet  our  needs,  since  none  exist.  Hence, 
the  name  “lightweight”  protocol. 

One  of  the  problems,  predictably,  was  - 
what  is  real-time?  That  is,  how  rapidly 
must  data  be  transferred  through  the 
-SAFENET.  Some  applications  studies  in¬ 
dicated  that  tightest  current  needs  within 
the  Navy  require  a  guaranteed  5  millisec¬ 
ond  delivery  time. 

Armed  with  this  assumption,  we  are 
investigating  a  number  of  alternatives. 
Committing  middle  layer  functionality  to 
silicon  as  opposed  to  software  implemen¬ 
tation,  e.g.,  the  express  Transfer  Protocol 
(XTPyProtocol  Engine,  is  one  approach 
being  investigated.  Other  approaches 
such  as  possibly  splicing  in  portions  of  the 
General  Motors  Manufacturing  Automa¬ 
tion  Protocol  (MAP)  — into  the  middle 
layers  are  also  being  reviewed.  This 
portion  of  the  SAFENET  I  standard  is  still 
under  review  at  this  writing. 


LAN  management  in  the  SAFENET  I 
standard  addresses  three  hierarchical 
aspects;  station  management,  dual  link 
management  and  network  management. 
Key  questions  being  resolved  in  the  stan¬ 
dard  are;  How  many  levels  of  manage¬ 
ment  should  there  be?  Where  should  they 
be?;  What  do  they  do  and  what  is  their 
effect  on  data  transfer  through  the  LAN? 
And,  at  what  layer  should  the  dual  ring 
nature  ofSAFENET  become  transparent 
to  the  user?  • 

Security 

The  third  issue  is  that  of  a  security.  Mili¬ 
tary  use  requires  that  the  networks  be 
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capable  of  carrying  classified  data.  Com¬ 
plicating  the  problem,  the  same  network 
should  accommodate  users  with  varying 
classification  authorizations  and  needs. 
Most  of  the  issues  are  identical  to  those  of 
other  military  networks  and  the 
SAFENET  efforts  have  been  mostly  to  get 
in  step  with  and  supplement  other  re¬ 
search  in  this  area.  As  those  standards 
mature,  they  will  be  adopted.  The  goal  is 
to  establish  security  guidelines  for  imple¬ 
menting  SAFENET  I  and  subsequent 
SAFENETs. 

The  Output 

In  final  product  form,  the  SAFENET  I 
standard  is  the  first  step  in  achieving  the 
goals  of  interoperability  and  multi-vendor 
support  through  an  open  systems  architec¬ 
ture  and  open  systems  interconnection  in 
our  computer  resources.  Additionally,  we 
are  proving  that  these  networks  can  be 
realized  without  creating  new  and  unique 
technology  for  the  military  application  — 
the  hallmark  is  adaptation  of  existing 
commercial  standards  and  their  support 
products. 

SAFENET  —  The  Process 

Describing  SAFENET  without  discussing 
the  process  by  which  we  are  creating  these 
standards  would  be  telling  only  half  the 
story.  Through  a  dynamic,  cooperative 
Navy  (Coast  Guard)/Industry  effort,  a 
significant  leveraging  of  a  relatively  small 
taxpayer  investment  is  being  achieved, 
and  a  model  for  other  similar  processes 
has  been  developed.  The  military  and 
industry  can  cooperate  to  the  benefit  of 
the  user,  taxpayer,  and  our  national  de¬ 
fense. 


Similarly,  we  are  finding  that  industry 
can  also  significantly  leverage  its  invest¬ 
ment  by  knowing  exactly  where  we  are 
going  and  fully  participating  in  the  proc¬ 
ess  of  getting  there. 

Open  Forum  —  Open  Standards 

The' SAFENET  effort  is  under  the  direc¬ 
tion  of  the  Computer  Systems  and  Engi¬ 
neering  Division  of  the  Navy’s  Warfare 
Systems  Engineering  Group  at  the  Space 
and  Naval  Warfare  Systems  Command. 
The  working  group  is  organized  into  an 
executive  council,  editorial  board,  four 
subgroups  that  are  writing  the  specific 
sections  of  the  standard  and  general 
members-at-large. 


The  SAFENET  Working  Group  (aka 
NGCR  LAN  Working  Group)  is  only  three 
years  old,  but  has  for  about  the  past  year 
been  a  booming  operation.  The  group 
comprises  members  of  the  Navy  and  Coast 
Guard  from  various  systems  commands, 
laboratories  and  other  activities  along 
with  a  large  membership  of  industry  rep¬ 
resentatives. 
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j  The  monthly  meetings,  which  are  com- 
i  pletely  open,  are  attracting  well  over  a 

j  hundred  participants,  including  represen- 
j  .tatives  of  over  four  dozen  corporations.  It 

is  through  this  open  relationship  that  we 
j  have  been  able  to  obtain  the  material 
necessary  to  maintain  rapid  progress  in 
developing  the  SAFENET I  standard, 

An  interesting  offspring  of  this  efTort  is 
that  through  our  embrace  of  industry 
standards  for  military  use,  we  have  seen 
representatives  from  the  federal  systems 
and  cpmmercial  divisions  of  corporations 
meet  each  other  for  the  first  time  at  these 
meetings! 

Also,  by  pooling  the  knowledge  of  all  these 
experts,  both  government  and  industry, 
we  have  minimized  the  technical  risk  and 
maximized  the  potential  for  multi-vendor 
j  interoperability.  Several  industry  partici- 
j  have  already  established  compre- 

j  hcnsive  research  and  development  efforts 
|  to  parallel  the  development  of  the  stan- 
I  ^ard.  As  a  result,  we  are  getting  assur- 
|  ances  that  everything  in  the  standard  is 
buildable,  because  these  vendors  are 
indeed  developing  and  demonstrating 
,  prototype  products  to  the  standard  as  it  is 
}  being  written. 

Another  spinoff  of  the  open  systems  devel¬ 
opment  is  that  our  working  group  mem- 
>  hers  are  also  active  members  of  the  IEEE, 

I  ISO,  ANSI  and  other  national  and  inter-  ' 
j  national  standards  organizations.  They 
j  are  Providing  a  synergistic  and  effective 
mechanism  to  take  the  SAFENET  stan¬ 
dards  development  efforts  back  for  recom¬ 
mended  incorporation  into  the  appropriate 
industry  standards.  For  example,  the 
lower  layer  SAFENET  I  reconfiguration 
scheme  has  been  recommended  to  the 
IEEE  802.5  committee.  Additionally, 
other  SAFENET  contributions  have  been 


made  to  the  802.5  Token  Ring  Confor¬ 
mance  Test  Bqok  (IEEE  802.5D)  Draft 
and  the  Fiber  Optic  Draft  (IEEE  802.5J). 

The  goal  of  making  the  standard  not  just ; 
military  one,  but  a  public  one  in  the  same 
spirit  that  TCP/IP  has  become  public  is 
achievable.  Additionally,  as  we  (the  mili- 
■tary)  become  part  of  the  larger  industry 
market  we  will  gain  the  advantage  of 
lower  unit  costs  and  rapid  capture  of  new 
technology  as  it  evolves.  We  will  then  be 
able  to  deliver  combat  capability  at  less 
cost  to  the  taxpayer.  A  second  advantage 
is  that  the  standard  is  available  to  anyone 
who  requires  an  equivalent  capability  and 
the  military  certainly  does  not  have  a 
comer  on  the  need  for  highly  survivable 
and  fault  tolerant  networks. 

Kan-Develonment  Item 

One  of  the  keystones  of  the  SAFENET 
development  effort  is  the  commitment  to 
deliver  a  product  that  can  be  installed  on 
our  ships  soon  and  to  minimize  costs  at 
the  same  time.  This  was  the  principal 
driver  in  the  decision  to  start  with  the 
IEEE  802.5  and  capture  the  existing  TMS- 
380  adapter  chipset  in  SAFENET  I  as  the 
first  SAFENET  implementation. 

Upward  Onmpntjhility 

We  are  aware  of  the  Fiber  Distributed 
Data  Interface  (FDDI)  development  and 
that  its  chipset  will  soon  be  available.  The 
decision  has  already  been  made  that 
SAFENET  II  (100  MHz  LAN)  will  be 
based  on  FDDI.  In  anticipation  of  this 
and  also  confident  that  the  bandwidth 
demands  will  burgeon,  the  SAFENET  I 
standard  has  carefully  considered  both 
growth  path  and  upward  compatibility 
requirements.  Approximately  80%  of 
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SAFENET I  will  directly  transfer  to 
SAFENET II.  Upgrade  to  FDDI  will: 
require  only,  a  change  in  the  lower  layer 
protocol.  Also,  by  providing  for  a  fiber 
optic  cable  plant  that  will  not  need  to  be 
changed,  and  by  specifying  a  backplane 
standard  for  the  LAN  Interface  Units, 
where  needed,  we  have  made  provisions 
for  ensuring  easy  upgrade  from  SAFENET 
I  to  SAFENET  II.  The  upgrade  is  envi¬ 
sioned  as  a  changeout  of  a  single  card  set 
at  each  node. 

A  bit  further  in  the  future,  we  also  recog¬ 
nize  the  need  for  fiber  optic  networks 
carrying  data  at  gigabit  rates.  However, 
this  aspect  of  network  technology  is  still 
maturing.  There  are  already  some  Navy 
efforts  investigating  high  speed  optical 
data  transfer  networks,  analogous  to  a 
Metropolitan  Area  Network,  which  would 
serve  as  a  platform-wide  backbone  to 
which  SAFENETs  would  connect  via 
gateway  and  we  are  watching  them 
closely.  We  believe  the  Navy  will  be  speci¬ 
fying,  at  least,  some  single  mode  fiber  for 
use  in  the  cable  plant,  in  anticipation  of 
networks  operating  at  these  speeds.  In 
this  aspect  of  SAFENET  developments, 
we  are  attempting  to  look  carefully 
through  our  optic  fiber  —  at  our  crystal 
ball. 

Platform  or  Ashore 

The  principal  focus  has  been  for  platform 
use  of  SAFENET.  However,  there  is 
nothing  in  the  standard  that  would  pre¬ 
clude  it  from  satisfying  ashore  require¬ 
ments  also. 


■  Conclusion 

SAFENET  I,  is  the  first  of  a  family  of 
st-rvivable,  fiber  optic  LANs  suitable  for 
shipboard  use.  It  represents  a  significant 
additional  tool  for  the  system  designer  in 
solving  computer  interconnect  and  data 
communications  problems.  But  SAF¬ 
ENET  and  its  parent,  Next  Generation 
Computer  Resources  program,  represent 
something  substantially  more  —  a  new 
way  of  solving  military  computer  resource 
problems  by  adopting  an  open  systems 
architecture  approach  and  using  open 
systems  interconnection  standards  to 
achieve  multi-vendor  support  and  interop-, 
erability.  This  requires  that  we  approach 
our  network  standards  development  by 
enr-'mpassing  the  full  range  of  the  ISO/ 
OSl  reference  model.  In  the  long  run,  we 
are  working  toward  a  complete  migration 
of  military  networking  to  fiber  optics. 

Finally,  and  perhaps  most  importantly, 
SAFENET  represents  the  realization  that 
an  open  and  cooperative  effort  between 
government,  academia,  and  industry  is 
achievable  and  welcomed  by  all  parties. 
The  result  can  be  a  more  rapid  transition 
of  products  from  laboratory  and  commer¬ 
cial  use  into  military  applications  to  the 
benefit  of  all,  especially  the  taxpayer. 
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1 .  The  information  used  to  prepare  this  paper  was 
obtained  by  the  authors  through  participation  in 
developing  the  SAFENET  I  standard,  presenta¬ 
tions  at  SAFENET  Working  Group  meetings  and. 
discussions  with  other  Working  Group  members. 

2.  SAFENET  1  Draft  Standard,  Revision  (1)  of 
July  17, 1987. 

3.  DATA  AND  COMPUTER  COMMUNICATIONS 
by  William  Stallings.  The  Open  Systems  Intercon¬ 
nection  model  for  layering  is: 

Layer  1:  Physical  -  concerned  with  transmission  of 
unstructered  bit  stream  over  physical  medium; 
deals  with  the  mechanical,  electrical,  functional, 
and  procedural  characteristics  to  access  the 
physical  medium. 

Layer  2:  Data  link  -  Provides  for  the  reliable 
transfer  of  information  across  the  physical  link; 
sends  blocks  of  data  (frames)  with,  the  necessary 
synchronisation,  error  control,  and  flow  control. 

layer  3:  Network  -  Provides  upper  layers  with 
independence  from  the  data  transmission  for 
establishing,  maintaining,  and  terminating 
connections. 

Layer  4:  Transport  -  Provides  reliable, 
transparent  transfer  of  data  between  end  points; 
provides  end-to-end  error  recovery  and  flow 
control. 

Layer  5:  Session  -  Provides  the  control  sturcture 
for  communication  between  applications; 
establishes,  manages,  and  terminates  connections 
(sessions)  between  cooperating  applications, 

Layer  6:  Presentation  -  Provide  independence  to 
the  application  processes  from  differences  in  data 
representation  (syntax). 

Layer  7:  Application  -  Provides  access  to  the  OSI 
environment  for  users  and  also  provides 
distributed  infonnation  services. 


INTERNETWORKING  OR  INTEGRATION  OF  DEFENSE'NETWORKS  ? 


Philip  M.  Sykes 


Rome  Air  Development  Center,  GrUnss  AFB,  Rome  NY  13111-5700 


1.  ABSTRACT 

Current  Defense  communications  networks  face  a 
number  of  problems  related  to  security, 

performance,  resource  allocation,  survivability, 

management  &  control  and  operation  & 
maintenance.  In  the  majority  of  cases  the 

technical  solutions  to  these  problems  already  exist 
but  their  Implementation  Is  impeded  mainly  by  the 
large  Investment  In  existing  systems,  followed  closely 
by  the  segregation  of  the  long  haul  packet  and 
circuit  switched  networks.  This  paper  looks  at 
internetworking  and  integration  as  two  philosophies 
for  Improving  Defense  networks  and  how  successful 
each  Is  likely  to  be  In  addressing  the  needs  of 
those  networks.  A  number  of  weaknesses  In 
Internetworking  are  Identified  and  a  recommendation 
Is  made  for  an  earlier  than  planned  deployment  of 
some  key  Integrated  network  systems,  particularly 
In  the  area  of  network  access. 


2.  BACKGROUND 

Existing  military  communications  networks  are 
fragmented,  each  requiring  unique  access  procedures 
and  with  little  or  no  possibility  of  direct 
communications  between  them.  Users  are  dependent 
on  a  variety  of  networks  and  technologies  to 
transfer  Information  and  the  potential  for  sharing 
network  resources  and  services  Is  severely  limited. 
Poor  throughput  for  data  or  the  Inability  »  sev  up 
or  complete  a  voice  call  are  more  likely  to  be 
caused  by  saturated  network  Interfaces  rather  than 
congested  switching  or  transmission  systems.  In 
this  environment  and  particularly  among  data 
networks.  Internetworking  has  gained  support  as  a 
means  to  provide  connectivity  and  hopefully 
Interoperability,  between  networks. 

Data  networking  developed  at  a  time  when  the 
only  other  pervasive  communications  resource,  the 
switched  telephone  network,  was  almost  entirely 
analogue  and  unsulted  to  data  traffic.  The 


telephone  network  was  Initially  and  Is  still  used  for 
access  to  packet  switching  nodes  and  for  lnterswltch 
trunks.  It  Is  easy  to  understand  that  many  people 
in  the  data  networking  community  still  consider 
that  the  switched  telephone  network  has  only  a 
subservient  role  to  play  in  data  networking.  As 
circuit  switched  networks  are  reaching  a  stage  of 
providing  complete  end-to-end  digital  connectivity, 
the  potential  of  such  networks  for  handling  data 
directly  or  as  an  access  system  to  packet  switched 
networks,  needs  to  be  reassessed. 

With  the  advent  of  cheap  computing  power  and 
high  speed  local  area  networks  (LANs)  much  of  the 
Interactive  traffic  has  oeen  transferred  from  wide 
area  data  nttworks  to  the  LANs.  In  contrast,  file 
transfer  traffic  has  Increased  on  wide  area  networks 
causing  one  to  question  whether  large  file  transfers 
could  be  handled  more  efficiently  using  a  circuit 
switched  connection. 

Modern  circuit  switched  networks  are  using  out 
of  band  signaling  for  call  setup  and  control  and  as 
a  means  of  providing  network  management. 
Intelligent  digital  circuit  switches  now  have  the 
ability  to  communicate  with  each  other  using  this 
signaling  concept  referred  to  as  Common  Channel 
Signaling.  These  circuit  switched  networks  are 
acquiring  significant  Intelligence  with  which  a  user 
can  interact  (via  signaling)  to  enable  provision  and 
optimization  of  the  requ'red  communication  services. 

Command  and  control  functions  are  being 
decentralized  to  improve  survivability.  This  implies 
a  need  for  many  new  communications  services  to 
be  present  at  each  command  and  contlol  site.  The 
Idea  of  having  multiple  Independent  but 
Interconnected  networks  to  provide  these  services  at 
each  site  is  unattractive.  Integration  of 
communication  resources  in  this  and  other 
environments  will  have  performance  and  cost 
advantages. 
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\Vtth  :b«e  cocsldemkrs  la  clM.  the  qcrecfca 
ncsr  be  asked:  why  at  «y  to  merge  Drftese 
ro?(*  aw!  data  ortworks  fcso  an  lategrattd  er 
taCTet!  Ert*ofk  la  aa  rroteloesry  oaaaer  as 
Qckifc-as  possible  ? 

3-  INTERNETWORKING 

Internetworking  b  a  term  used  to  describe  ibe 
Inter  concert  km.  via  gateways.  cf  brterogcaeocs 
communication  networks.  Tbe  gateways  terminal 
the  Internal  protocols  cf  each  connected  network 
aad  prmide  Internetwork  routing.  Tbe  gateway 
function  can  be  realized  by  addhlcoal  software 
residing  in  a  connected  best  er  by  a  dedicated 
device. 

3-1  SOLUTIONS  PROVIDED  BY 
INTERNETWORKING 

a)  Interoperability 

Gateway  provide  connections  between  networks 
enablin'  *pp!lei!lon  entitles  to  cCrfinncTeate  and 
Interact.  However,  the  Interoperability  of  two  end 
systems  on  different  networks  Is  a  f auction  of  tbelr 
connectivity  and  tbe  compatibility  of  the 
applications  running  on  tbose  end  systems. 
Int.rretw«Mns  does  not  protide  lnterope-abinty 
but  does  facilitate  It. 

b)  Survivability 

Survivability  is  the  ability  of  a  network  or 
network  of  networks  to  continue  to  function  (la  f'JJ 
or  part)  after  a  particular  threat  or  damage 
scenario.  Survivability  Is  often  stated  as  a  jajor 
reason  Tor  wanting  ic  Interconnect  networks.  The 
survivability  of  the  Internetwork  components 
(gateways  and  their  links)  and  procedures,  appear 
to  receive  little  consideration. 

Internetworking  as  a  basis  for  survivability  Is 
highly  questionable.  Internetworking  provides 
minimal  survivability  gains  due  to  the  sparseness  of 
the  Interconnection  and  the  fact  that  the  gateway 
links  are  likely  to  share  the  same  physical 
transmission  paths  as  the  networks  they 
Interconnect. 

c)  Performance 

Performance  across  an  Internetwork  Is  closely 
linked  to  the  capacity  of  the  interconnection 
systems  (gateways  and  transmission  _  links). 
Capacity  of  the  Internetwork  connection  needs  to 
be  considered  In  both  the  unstressed  and  stressed 
e  es.  In  the  unstressed  case  the  Interconnected 
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to  ether  roocas  (da£w  loses,  processing  power. 
B-ad.  etc.).  Ia  thSs  eartTCDs;  K  b  caEktJy 
thu  lb?  pnh  tfcrocgh  the  rxeways  Is  befag  ctd 
to  swfel  csogrstkn  00  toSrtdol  cet-works. 

Tbe  ccCertloQ  cf  Inter  cccmected  m  weeks  can 
totreaed  loth  cf  stress  brought  atoai 
hr  2bxmaSy  Sdgh  user  denaods  or  trcnk/swiuh 
f*2urrs  resefctag  from  aairencCoa  or  attacks  00 
the  d«  weeks.  The  resshatrx  ret  work  prtUkch; 

«E  cause  the  tutcrrrtwcrk  “operatJoc*  to 
froa  a  resource  sinrtag  mode  to  a  srnluUSty 
taodc.  Ia  tbe  sandvaHSty  mode  the  remaining 
fairways  and  tbdr  Euks  may  be  enable  to  bndlt 
the  Increased  traffic  Scad  with  tbroegfepet  and 
delay  becoming  tcggxptable. 

Some  networks  say  become  traasslssSco 
resoorcts  being  used  by  adjacent  artworks  to  rccte 
arocad  a  network  falicre.  Tbe  question  here  b 
whether  tbe  'transmlssloa  artwork-  wm  a Sow  tbe 
externa]  traffic  to  enter  through  tbe  gateways.  Ia 
otter  words  which  traffic  Is  sore  Important,  that 
from  the  adjacent  partitioned  network  or  tbe 
TransalssSoa*  network's  own  Interna)  traffic?  There 
b  some  hope  of  resolving  this  question  If  the 
networks  use  a  common  packet  preeedence/prtorliy 
scheme.  There  Is.  however,  a  furtf^r  complication 
when  the  networks  are  ownec  and  operated  by 
different  entitles  e.g.  Defecse/prtvate  or  US/NATO. 

The  Instability  that  may  result  when  a 
partitioned  network  effectively  applies  a  high 
transient  demand  on  another  network  Is  an  area 
requiring  further  study.  It  Is  quite  possible  that 
with  such  transients,  a  network’s  management 
function  may  become  so  active  that  Information 
throughput  actually  decreases. 

Each  transition  through  a  gateway  results  In 
some  delay  due  to  packet  processing:  address 
translation,  protocol  conversion,  security  checking, 
etc.  Gateways  and  their  links  are  the  choke  points 
In  a  multi-network  environment.  When  the 
networks  come  under  stress,  these  choke  points 
may  degrade  the  overall  Internetwork  effectiveness 
to  the  point  where  the  gateways  themselves  appear 
as  a  partition.  Packet  voles  with  Its  low  tolerance 
to  transmission  delay  Is  unlikely  to  be  supported  Ir. 
the  near  term  through  multiple  networks  and 
gateways. 

d)  Security 

Networks  are  constructed  using  different  security 
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saodris  wiirlj  say  «Scrce  KtcriJy  poSrfts 

cr  la  dSTertsl  oodes  (c{.  osa  fclgh  or 

muSO-feref).  A  security  po<2d  s?«Dt$  a  easier 
cf  oi*ttir  parameters  toefartiag  access  ccctro fe. 
aewematy.  Is^na^oa  laUxr«>. 

accwSaifco/ctrtmratlfln  aad  eocflgcratfon 
casageacat. 

Ia^raeiwcefclaz  does  provide  a  saa  to  logically 
aad  physically  sepanue  user  eqmmcskfcs  that 
aialpaJa^  £sfcrm231ca  having  different  security 
eiasMatlocs  wfc2e  at  tbr  same  time  ?Uowlcg  tbe 
sharing  of  Information  cf  the  same  cbsstfkatJoo. 
Tbe  Mcht-Level  Secure  (MLS)  tatejray  concept 
currently  be 3ag  developed  win  allow  tcotroOcd 
Information  transfers  between  networks  bating 
dSTertut  security  cbsssincailons. 

e)  Resource  Allocation 

The  load  profile  of  networks  varies  throughout 
tbe  day  so  there  are  lines  when  there  b  unused 
iransmbsloa  bandwidth-  A  study  1  has  shown 
that  tbe  load  peaks  of  tbe  Defense  Data  Network 
(DDN)  and  Defense  Switched  Network  (DSN)  do 
not  correlate.  Tbe  concept  of  dynamically  sharing 
trunk  capacity  between  tbe  long  haul  data  and 
voice  networks  offers  tbe  potential  to  ease  current 
demand  for  new  trunks  and  offers  future  savings. 
Internet  working  offers  no  potential  for  dynamically 
sharing  trunk  capacity. 

l)  Network  Management  /  Operation, 

Administration  and  Maintenance  (NM/OAftM) 

Monitoring  and  control  functions  are  becoming  „ 
far  more  romplex  as  tbe  numbers  of  connected 
networks  grow.  For  example.  DDN  connected 
network  growth  is  In  the  order  of  50%  per  year. 
The  gains  that  would  be  realized  from 
Interconnecting  many  Independent  networks  will  be 
determined  by  bow  well  the  collection  of  networks 
and  their  Interconnection  systems  can  be  managed. 
Tbe  distributed  management  and  control  functions 
within  the  constituent  networks  and  gateways  must 
cooperate  to  form  a  unified  management  structure. 

In  managing  the  Information  flow  between  networks, 
four  Issues  are  currently  of  concern.  They  arc 
gateway  routing,  flow  control,  multi-level  precedence 
and  preemption  (MLPP)  and  reconstitution  and 
restoral.  These  Issues  have  arisen  because  of  the 
lack  of  a  common  network  architecture. 

Internetworking  Implies  multiple.  Independent 
networks  and  therefore  offers  no  potential  to 
overcome  the  current  duplication  of  OA&M  effort. 


A.  NETWORK  INTEGRATION 

Tbe  Joeg  term  objeettve  cf  network  Integration 
is  to  bare  all  networks  converge  toward  a  unified 
sysum  arcbTectcre.  "Unified-  does  net  Imply  a 
single  network  technology  bet  an  architecture  where 
user  equipment.  Including  tradUSooaJ  user  devices 
(telephones,  data  equipment)  and  now  Including 
app&catkn  specific  LANs,  cooperate  2nd  Interact 
with  a  common  wide  area  Information  network. 

11  Conceptual  Integrated  Network 

Tbe  wide  area  Information  network  would  be 
comprised  cf  4  components: 

Users  >  data  equipment,  telephones,  sensors, 
local  area  networks. 

Integrated  zeetss  a  common  access  point 
and  Interface  specification  for  all  users. 

Integrated  switching  a  single  switch 
concept  handling  voice  and  data. 

Integrated  transmission  :•  a  single  trunking 
scheme,  handling  the  Intcr-swltch  traffic. 

This  Integrated  network  will  have  to  be 
achieved  in  an  evolutionary  manner  which  makes 
most  use  of  existing  assets  while  at  the  same  lime 
modifying  current  acquisition  plans  to  more  quickly 
achieve  the  end  goal. 

Integration  will  take  place  In  three  areas, 
namely  access,  switching  and  transmission. 
Integrated  transmission  occurs  to  some  degree  today 
by  p*v?hlng  or  multiplexing  data  and  voice  together 
on  the  same  carrier  system.  Integrated  switching 
can  be  achieved  Initially  with  co- located  packet  and 
circuit  switches  handling  both  data  and  voice  users 
and  hybrid  switching  architectures  where  a  packet 
handler  function  Is  built  Into  a  digital  circuit 

switch.  A  single  switch  fabric  Is  the  long  term 
objective  but  as  yet  there  Is  no  clearly  leading 
technology. 

Integrated  access  Is  a  reality  today  using  the 

CCITT  ISDN  protocol  architecture  and  offers  the 
greatest  potential  for  a  major  near  term,  DoD 

network  Integration  initiative.  ISDN  offers  the  next 
evolutionary  step  beyond  internetworking.  ISDN 
can  be  viewed  a.  a  general  purpose  gateway 

between  heterogeneous  networks. 
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ISDN  Is  characterized  b>~- 

*)  Foil  dJgUal  end-to-end  connectivity. 

b)  Integrated  access  over  a  single  access 
medium  to  a  multitude  of  network  services 
2od  capabilities  Including  message,  circuit 
and  packet  switching  servlets. 

c)  Feature-rich  out  cf  band  signaling  capability 
between  the  user  and  the  network  and 
across  the  network.  The  signaling  capability 
will  allow  users  to  access  the  Intelligence 
residing  In  the  network  and  therefore  have  a 
greater  Involvement  In  the  management  and 
control  of  the  network. 

4-2  SOLUTIONS  PROVIDED  BY 
INTEGRATION 

Network  Integration  will  be  driven  by  user 
demand.  It  Is  therefore  essential  to  ofTer  the 
benefits  or  Integration  to  users  at  the  earliest 
possible  time.  Integrated  access  systems  should  be 
Implemented  'first,  to  give  users  the  facility  of 
Integrated  voice  and  data  services  even  though  the 
"network"  beyond  the  access  point  may  be 
comprised  of  Independent  circuit  and  packet 
networks.  ISDN  prorides  well  defined  Integrated 
access  systems  that  are  currently  being  deployed  In 
the  commercial  sector.  The  following  solutions  are 
based  mainly  on  the  benefits  of  integrated  access 
through  ISDN. 

a)  Interoperability 

ISDN  provides  a  new  level  of  connectivity 
between  networks.  Any  application  specific  user 
network  or  user  terminal  will  be  able  to  plug  into 
any  ISDN  access  point  and  receive  full  network 
services.  ISDN  contributes  to  Improved 
Interoperability  through  easier  connectivity  and 
through  the  Internetwork  dialogue  available  with 
Common  Channel  Signaling. 

b)  Survivability 

Seme  of  tne  greatest  survivability  gains  for 
military  communications  can  be  achieved  through 
Interoperability  with  the  public  networks.  All 
Regional  Bell  Operating  Companies  and  the  long 
distance  carriers  have  embraced  ISDN  as  their 
objective  network  architecture.  Since  the  CCITT 
ISDN  recommendations  specify  a  common  set  of 
network  services  It  will  be  possible  to  maintain 
these  services  (with  a  few  exceptions)  when  a  DoD 
user  traverses  public  ISDNs. 


The  other  Interesting  survivability  consideration 
Is  that  of  a  major  communications  intensive  node 
that  may  need  to  be  quickly  relocated  to  another 
area.  If  this  other  area  has  ISDN  access  points  or 
a  mobile  ISDN  switch  could  be  Installed,  U  should 
be  far  quicker  to  provision  the  required  services  In 
the  new  local  Ion  primarily  due  to  the  common 
access  loop  and  connector,  presented  to  all  users. 

e)  Performance 

Integrated  access  will  greatly  Improve  overall 
network  performance.  A  significant  advantage  for 
data  users  b  that  an  ISDN  access  systems  provides 
a  M  Kbps  dedicated  or  10  Kbps  roullplexed 
connection  to  the  switching  resources  (circuit  or 
packet)  A  1.544Mbps  access  Interface  Is  also 
available.  The  need  for  modems  and  dial  up 
connections  will  be  eliminated.  ISDN  b  designed  to 
handle  existing  X.25  access  protocob.  New  services 
based  on  the  Integrated  nature  of  ISDN  will  also 
be  available. 

Portability  of  equipment  and  user  control  over 
the  connection  of  terminal  equipment  will  mean 
quicker  service  provisioning  times. 

d)  Security 

A  unified  network  with  a  common  set  of 
interfaces  and  a  consistent  management  and  control 
structure  provides  a  more  stable,  controllanle 
environment  In  which  to  handle  the  issue  or 
security. 

Common  channel  signaling  between  switches  and 
D-channel  signaling  between  users  and  the  network 
will  be  the  means  by  which  network  access  b 
controlled.  A  user  access  point  will  have  a 

software  defined  security  privilege.  Common 
channel  signaling  ofTcrs  the  potential  for  multiple 
leveb  of  security  to  exist  within  an  ISDN  switch 
and  access  point.  The  signaling  network  controls 
Individual  calls  and  has  the  necessary  speed  to 
enable  user  device  and  ll<»?  privilege  testing  during 
the  call  set  up  process. 

c)  Resource  Allocation 

The  ISDN  Interface  allows  dynamic  allocation  of 
access  bandwidth.  Via  D-channel  signaling  a  user 
may  choose  to  configure  the  0-1  Kbps  access 
channel  for  cither  voice  or  data.  Packet  data 
access  via  the  multiplexed  Ifl  Kbps  D-channel 
allows  up  to  8  termlnab  to  be  attached  using  a 
contention  resolution  access  method. 
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Integrated  switching  (initially  co-located  circuit 
and  packet  switches)  will  enable  users  to  choose  the 
type  of  connection  that  best  suits  their 
Instantaneous  Information  transfer  needs.  For 
example.  %  circuit  switched  connection  for  a  large 
file  transfer  or  a  packet  switched  connection  for  a 
data  base  query- 

As  a  near  term  integrated  transmission  solution, 
an  lntv'UJgent  multiplexer  2  will  be  able  to  accept 
the  output  from  co-located  circuit  and  packet 
switches  and  dynamically  "build”  composite 
data /voice  frames  ror  transmission  over  a  single 
bearer  system. 

r)  Network  Management  /  Operation, 

Administration  and  Maintenance  (NM/OAAM) 

The  greatest  duplication  resulting  from 
independent  voice  and  data  networks  occurs  on  the 
access  side  of  switches.  With  ISDN  access  lines 
handling  both  voice  and  data,  wiring  complexities 
and  the  time  and  cost  of  provisioning  new  services 
win  be  reduced  realizing  significant  savings  In 
OA&M.  Network  monitoring  centers  will  be  able 
to  "look  down"  (using  the  signaling  channel)  at 
least  to  the  ISDN  access  point  to  gather 
information  on  network  status.  Network 
management  functions  will  be  distributed  In 
switches  and  perhaps  to  a  small  degree  In  a  users* 
equipment.  Common  channel  signaling  and 
D-channel  signaling  will  be  used  to  exchange  this 
Information  In  addition  to  supporting  network 
routing  and  reconstitution  &  restore.! .  Mcst 

Importantly,  users  will  be  able  to  access  network 
Intelligence  for  the  purpose  of  service  selection  and 
to  participate  In  reconstitution  and  restorah 

5.  CONCLUSION 

Integration  otters  the  next  step  In  the  evolution 
of  the  Interconnection  of  communications  networks. 

Internetworking  particularly  In  the  data 
environment  has  achieved  a  high  degree  or 
connectives  between  networks.  However 

internetworking  has  developed  as  a  means  to 
overcome  physical  network  incompatibilities.  If 
internetworking  is  pursued  as  an  acceptable 
solution,  then  Incompatible  networks  will  continue 
to  flourish. 

This  paper  has  attempted  to  assess  the  merits 
of  Internetworking  and  Integration  as  two  alternate 
approaches  to  providing  reliable,  survlvable.  efficient 
and  well  managed  Defense  communications  systems. 
It  appears  that  a  turning  point  has  now  been 
reached.  It  Is  time  for  network  planners  and 


administrators  to  step  back  and  assess  where  the 
current  Defense  communications  network  philosophies 
are  leading.  There  appears  to  be  two  cholces:- 

a)  That  Defense  networks  continue  to.be  vtewed  as 

Independent  networks  with  the  Defense  Data 
Network  (DDN)  trying  to  solve  Its 

Interoperability  and  security  problems  through  a 
complicated  network  of  gateways  while  the 
Defense  Switched  Network  (DSN)  concentrates 
on  voice  users. 

or 

b)  That  the  coordinators  and  users  of  the  DDN 
and  DSN  who  have  philosophically  adopted  a 
long  term  goal  of  Integration,  modify  and 
accelerate  existing  plans  to  achieve  Initial 
Integration  at  an  earlier  stage. 

5.1  Proposals 

a)  Equip  all  new  DSN  switches  with  a 

minimum  number  of  ISDN  ports. 

As  a  first  step  all  new  DSN  switches  should  be 
equipped  with  at  least  a  limited  number  of  ISDN 
Basle  Rate  Interface  ports  and  the  necessary 
software  to  support  access  to  the  DDN.  The 
collection  of  ISDN  users  around  each  switch  will 
form  an  ISDN  network,  however  ISDN  services 
between  these  networks  will  not  be  possible  until 
the  switches  arc  linked  by  Common  Channel 
Signaling. 

b)  Shift  resources  from  Internetworking  R&D 

to  Integration  R&D. 

if  ISDN  hardware  and  software  can  he  deployed 
and  used  effectively  as  a  DDN  entry  point  for  data 
users  then  some  of  the  financial  and  manpower 
resources  currently  planned  for  development  of  data 
network  gateways  C3n  be  shifted  to  ISDN  access 
svstems.  This  shift  or  resources  away  from 
Internetworking  toward  Integration  could  be  applied 
In  two  areas.  Firstly,  for  the  procurement  of  more 
ISDN  access  ports  on  DSN  switches  and  secondly 
Tor  research  and  development  using  extstlng 
Internetworking  knowledge,  toward  more 
sophisticated  ISDN  access  systems. 

c)  "Connect"  the  packet  handler  function  of  the 
new  DSN  switches  Into  the  DDN. 

The  new  DSN  switches  can  achieve  a  reasonable 
level  of  Integration  through  the  use  of  switch 
software  that  provides  a  packet  handler  function 
within  the  switch  (AT&T  5  ESS)  or  via  an 
Intimately  linked  but  external  packet  switch 
(Northern  Telecom  D.MS-100  family)  These 


packet  handier  functions  need  to  be  coupled  to  the 
DDN  as  soon  as  possible. 

d)  Develop  an  Intelligent  transmission 
multiplexer 

Near  term  Integrated^  transmission  could  be 
achieved  by  Intelligent  Tl  multiplexers  that 
dynamically 'combine  the  output  of  co-located  circuit 
and  packet  switches  to  more  effectively  use 
available  trunk  bandwidth.  The  RADC  Voice /Data 

Integrator  program  2  is  providing  a  technology 
demonstration  of  this  concept. 

e)  Assess  the  "cost"  of  Internetworking 

The  idea  of  near  term  integration  asvdlscussed 
above  should  not  be  rejected  on  the  basis  of 
Increased. cost  without  an  assessment  being  made  of 
the  current  and  future  "cost"  of  internetworking  In 
the  DDN.  The  "cost"  includes  both  financial 
resources  devoted  to  research  &  development  and 
performance.  The  DDN  should  be  Investigating  the 
performance  penalties  of  Information  traversing 
through  multiple  gateways.  An  assessment  also 
needs  to  be  made  of  the  performance  and 
survivability  of  the  network  of  gateways  concept 
when  placed  under  stress.  It  may  be  found  that 
this  concept  Is  only  workable  In  an  unstressed 
environment  and  that  highly  Interconnected  public 
networks  offer  greater  opportunities  for  survivability. 

The  result  of  this  assessment  may  be  that 
significant  resources  cu-rently  applied  to 
Internetworking  could  be  shifted  to  satisfy  the  same 
objectives  but  through  Integration  which  after  all  Is 
the  common  goal  of  DoD  networks  -  or  Is  it? 
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ABSTRACT 

The  U.S.  Army  has  developed  a  Wideband  Propagation 
Measurement  System  QVPMS)  capable  of  gathering  the 
muhtpaih-delay-spread  and  excess-path-loss  data  necessary 
to  characterize,  and  ultimately  model,  urban  and  forested 
communications  channels.  This  paper  presents  the  results  of 
two  sets  of  very  wide  bandwidth  measurements  taken  in  a 
trunk-dominated  forest  at  Fort  Lewis,  Washington,  the  second 
set  being  conducted  after  the  forest  had  been  selectively 
thinned  by  27%  (based  on  stem  count). 

During  these  experiments,  propagation  measurements  were 
made  at  ranges  up  to  several  thousand  feet,  at  a  various 
antenna  heights  between  12  and  6S  feet,  and  at  several  carrier 
frequencies  between  400  MHz  and  1750  MHz .  Data  were 
taken  at  both  vertical  and  horizontal  polarizations  for  each 
rangelheightlfrequency  combination.  The  radiated  signals 
consisted  of  an  RF  earner  bl-phase  modulated  with  a 
pseudo-random  noise  waveform  clocked  at  250  MHz, 
producing  an  instantaneous  null-to-null  probe-signal 
bandwidth  of  500  MHz.  The  received  signal  was  correlated 
with  a  time-delayed  replica  of  the  transmitted  signal  In  the 
receiving  system  to  allow  measurement  of  the  relative 
tlme-of-arrival  of  the  radiated  signal  and  its  multipath 
components  to  a  resolution  of  a  few  nanoseconds.  The  overall 
path  loss  was  determined  by  comparing  the  measured 
transmitter  power  to  the  total  received  power  in  the  receiver’s 
IF  amplifier.  The  difference  bt tween  the  overall  and  the 
free-space  path  loss  war  calculated  to  determine  the  excess 
path  loss  caused  by  the  channel. 


INTRODUCTION 


The  U.S.  Army  Communications  and  Electronics 
Command  (CECOM)  has  a  program  to  dovetop  a  theoretical 
communication  model  capable  of  predicting  radio 
propagation  characteristics  of  wido-bandwidth  signals  in  a 
tactical  (forested)  environment.  In  support  of  this  program, 
SRI  International  (SRI)  designed  and  built  experimental 
apparatus  for  a  series  of  field  measurement  programs  that 
we  conducted  to  validate  the  now  propagation  models.* 

We  conducted  two  measurement  campaigns  m  a 
Douglas  f>r  forest  located  at  Fort  Lewis,  Washington,  known 
as  the  South  Perry  Woods.  The  forest  was  selectively  thmnod 
between  the  two  sets  of  measurements,  which  allowed  us  to 
gather  a  unique  set  of  data  that  shows  the  effect  of  tree 
density  (stem  count)  on  excess  path  loss  and  multipath  delay 
spread  without  introducing  the  added  complications  of 
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differing  tree  heights,  undergrowth  characteristics,  tree  age. 
and  the  Cke.  fn  addition,  we  obtained  information  on  the 
propagation  characteristics  of  a  trunk-dominated  forest,  from 
which  the  early  theoretical  models  could  be  verified  and 
enhanced.  We  gathered  data  using  a  probe  signal  that 
produced  a  500-MHz  Instantaneous  nutl-to-nuU  bandwidth 
creatod  by  bi-phase  modulating  an  RF  earner  with  a 
pseudo-random  noise  code  clocked  at  250  MHz. 

EXCESS  PATH  LOSS 

We  dofme  excess  path  loss  as  the  difference  between 
the  path  loss  that  occurs  within  the  forest  and  the  loss  that 
would  occur  In  free  space.  From  scattering  theory  we  would 
expect  the  excess  path  attenuation  to  vary  exponentially  with 
path  length  and  the  number  of  scatterers  in  the  channel 
Range  Dependency 

Figure  1  shows  the  vertical  and  horizontal  excess  path  loss 
data  obtained  over  several  paths  as  long  as  1500  ft.  at 
frequencies  of  400  MHz  before  thinning,  and  over  the  same 
paths  measured  at  450  MHz  after  the  trees  were  thinned  by 
27%.  All  measurements  were  taken  at  antenna  heights  of  38 
feet,  where  the  forest  is  clearly  tnink  dominated. 

Linear  regression  curves  fitted  to  the  vertically  polarized 
data  have  a  slope  of  0.027  dB/fc  before  thinning  and  0.017 
d3/ft  after  thinning— a  difference  that  represents  a  37% 
reduction  in  the  attenuation  rate.  A  similar  curve-fitting 
procedure  applied  to  the  horizontally  polarized  data  yields  a 
slope  of  0.022  dB/ft  before  thinning  and  0.018  dB/ft  after 
thmmng—or  a  reduced  attenuation  rate  of  only  18%.  The 
average  reduction  in  excess  path  loss  of  approximately  23% 
compares  favorably  to  the  27%  reduction  in  the  stem  count, 
and  confirms  the  exponential  relationship  between  the  excess 
attenuation  and  number  of  scatterers  in  the  path. 

Frequency  Dependency 

Figure  2  shows  the  Initial  excess  path  loss  data  taken  on  a 
700— ft  path  at  a  height  of  38  ft.,  along  with  the  experimental 
data  recorded  on  the  same  path  after  the  woods  were  thinned 
The  data  obtained  before  thinning  show  a  strong  frequency 
dependency  of  approximately  0.017  dB/MHz  for  the  horizontal 
polarization,  but  very  little  (if  any)  dependency  for  the 
vertically  polarized  data.  The  data  obtained  after  the  forest  was 
thinned  show  that  the  horizontal  polarization  frequency  effect 
was  reduced  to  approximately  0  008  dB/MHz  a  reduction  of 
53%  (dB/MHz)  from  the  before-thinning  data  The 
frequency  dependency  in  the  vertically  polarized  data  is  only 
-0  005  dB/MHz.  but  there  is  extensive  data  scatter  making  this 
number  suspect. 

Height  Dependency 

The  original  data  taken  at  the  South  Perry  Woods 
indicated  a  slight  height  dependency  at  850  MHz  and  1050 
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MHz,  but  Tittle  or  no  height  effect  at  400  MHz.  Figure  3 
shows  the  before-  and  after-thinning  400-MHz  data  set  taken 
along  a  1000-ft  path.  The  after-thinning  data  also  show  no 
Significant  height  dependency.  A  comparison  of  the  y-axls 
intercepts  determined  by  Unear  regression  curves  Tilt'd  to  each 
data  set  shows  the  vertically  polarized  data  are  reduced  by  33% 
(19.1  dB  v$  28.7  dB),  while  the  horizontally  polarized  data  are 
reduced  by  52%.  The  larger  apparent  reduction  for  the 
horizontally  polanzed  data  is  significant  and  surprising,  given 
the  forest  was  only  thinned  by  27%  If  we  had  assumed  a 
zero-height  dependency  for  the  trunk-dominated  forests 
(horizontal  curve  fit),  the  percent  reduction  between  i  the 
before-  and  after-thinning  data  sets  would  have  been  much 
smaller  and  mote  closely  matched  the  27%  stem-count 
reduction.  Additional  data  should  be  taken  and  analyzed  to 
resolve  this  uncertainty. 

Polarization  Dependency 

Figure  4  presents  plots  of  three  sets  of  data.  (1)  all  range 
data  wken  at  490/450  MHz  at  a  height  of  38  ft;  (2)  all 
frequency  data  taken  on  a  700-ft  path  at  a  height  of  38  ft,  and 
(3)  all  height  data  taken  on  a  1000-ft  path  at  a  frequency  of 
400/450  MHz  Although  the  major  polarization  dependencies 
were  not  affected  by  the  thinning  of  the  South  Perry  Woods, 
the  magnitudes  of  the  dependences  are  smaller  in  the 
fess-dense  forest  Perhaps  the  most  significant  effect  is  the 
strong  frequency  dependency  noted  on  the  first  set  of 


measurements.  This  effect  shows  that  the  400  MHz  signals 
have  a  greater  attenuation  in  the  vertical  polarization  while  the 
higher  frequencies  are  more  attenuated  when  transmitted 
horizontally.  There- appears  .to  be  a  cross  over  in  the 
polanzauon  data  between  500  to  700  MHz. 
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MULTIPATH  DELAY  SPREAD 

Wide-bandwidth  path-loss  measurements  tend  to  be  more 
Stable  than  narrowband  measurements  because  all  the 
individual  communication  paths  are  totally  resolved  and 
averaged  to  obtain  the  path  loss  measurement.  The  complexity 
of  the  communications  channel  manifests  itself  in  the  multipath 
delay  spread  characteristics.  The  fully  resolved  time-varying 
Impulse  response  (TVIR)  is  not  easily  characterized  by  a 
deterministic  function,  however.  Fully  resolved  TVIR 
measurements  are  relatively  new;  hence  the  wide  variety  of 
characterization  schemes  being  used  today  by  scientists  and 
engineers  will  undoubtedly  undergo  refinements  that  will  allow 
extraction  of  finer-scale  details  in  the  future. 

The  TVIRs  measured  by  the  Wideband  Propagation 
Measurement  System  (WPMS)  are  complicated  and  highly 
variable  in  their  detailed  structure,  as  shown  in  Figure  5,  To 
use  these  data  to  venfy  or  improve  theoretical  scattering  models 
requires  that  some  simple  measure  of  the  average  delay  spread 
characteristics  be  employed.  It  is  impractical  to  repeat 
measurements  a  Urge  number  of  times  with  small  vertical  or 
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Figure  3  Excess  Path  Loss  as  a  Function  of  Height 


horizontal  displacements  to  determine  the  average  multipath 
characteristics  of  a  communications  channel.  Some  other 
smoothing  procedure  musi  therefore  be  used, 

Because  the  scheme  wo  have  used  to  determine  the  width 
of  the  measured  multipath  delay  spreads  has  no  inherent 
smoothing,  it  admits  too  much  fluctuation  to  allow  the  fine 
details  of  the  delay  spread  characteristics  to  be  analyzed  in 
detail,  Nevertheless,  it  can  be  used  for  simple  comparisons  of 
the  large-scale  scattering  characteristics  of  the  channels  being 
measured. 

The  delay  spread  measure  urad  is  based  on  the  time 
difference  between  the  fust  and  last  crossing  of  a  specified 
received  signal  level.  To  provide  a  common  normalization,  we 
chose  a  level  for  characterization  that  was  four  times  the 
average  intensity  of  iheTVIR.  This  level  is  high  enough  to  limit 
the  effects  of  noise  in  the  system,  but  low  enough  to  measure 
the  highly  delayed  (attenuated)  paths.  This  level  and  the 
resulting  width  determination  (offset  horizontally  for  clarity), 
are  shown  on  Figure  5. 

Rang©  Dependency 

Delay  spreads  from  a  few  hundred  nanoseconds  to  more 
than  1.5  ps  were  observed  during  the  first  set  of  measurements 
Except  for  a  single  data  point,  the  initial  vertically  polarized 
delay  spreads  increased  monotomcally  with  increasing  path 
length.  The  corresponding  horizontally  polarized  delay  spreads 
were  smaller  and  showed  a  much  weaker  correlation  with 
increasing  path  length. 
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Figure  6  shows  both  the  pre-  and  post-thinning  multipath- 
delay-spread  measurements  for  the  data  set  described  earlier 
The  antenna  heights  used  for  the  two  measurements  were 
identical,  and  the  specific  locations  of  the  antenna  towers  were 
within  a  few  feu  of  being  the  same  for  both  measurements 
As  can  be  seen,  the  trend  of  greater  delay  spread  with 
increasing  range  exists  m  both  sets  of  measurements,  with  the 
vertically  polarized  delay  spreads  being  substantially  greater 
than  me  horizontally  polarized  data  Because  of  the  limited 
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number  of  data  faints  and  the  noisy  nature  of  the  measurement 
of  delay  spread  itself,  it  would  be  futile  to  attempt  to  extract  too 
much  detail  from  the  data.  Nevertheless,  if  the  slope  of  the 
straight  line  fit  to  the  original  vertical  measurements  (1.3  ns/ft) 
were  compared  with  the  same  measurements  made  after  the 
thinning  (0.3  ns/ft),  the'  (apparent)  reduction  in  delay  spread 
caused  by  the  27%  thinning  of  the  forest  is  found  to  be  77% 
Comparing  similar  straight-line  fit  data  to  the  horizontal 
data  obtained  for  the  beforehand  after-thinning  measurements 
(0.23  ns/ft  vs.  0.21  ns/ft)  yields  an  apparent  reduction  in  delay 
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Figure  6  Delay  Spread  at  a  Function  of  Range 


spread  of  only  9%  This  large  discrepancy  between  the  two 
polarization  data  sets  may  be  due  in  part  to  the  delay  spread 
characterization  technique.  However,  visual  examination  of 
the  unprocessed  TVIR  data  shows  that  the  change  in  the 
vertical  delay  spread  caused  by  the  thinning  is  sign'ficantly 
greater  than  the  horizontal,  confirming  the  large  reduction  in 
the  vertical  multipath  delay  spread  calculated  and  ihe  accuracy 
of  the  delay  spread  determination  technique. 

Calculating  the  average  of  these  two  percent-reduction 
numbers,  we  obtain  43%.  This  average  change  shows  that  there 
is  at  least  a  first-order  correlation  between  the  delay  spread  as 
a  function  of  range  and  the  tree  density  of  the  forest  being 
measured. 
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Frequency  Dependency 

Figure  7  summarizes  of  the  before-  and  after-thinrang 
frequency-dependent  data  In  genera!,' the  scatter  of  both  data 
sets  appears  to  be  greater  than  any  trend  that  may  be  present 
Therefore,  although  the  delay  spread  in  the  after-thmmng  data 
is  consistently,  lower  than  in  the  initial  measurements, 
determining  a  percentage  reduction  of  delay  spread  would  not 
be  meaningful,  because  of  the  large  variation  in  data. 

Height. Dependency 

Figure  8  shows  the  original  400-MHz  data  taken  on  an 
approximately  1000-fi-longpath  and  a  similar  set  of  450-MHz 
data  taken  along  the  same  path  after  the  forest  wa*  thinned. 
The  lack  of  height  dependency  is  evident  in  both  sets  of  data 
This  finding  is  not  surprising,  given  that  all  the  measurements 
taken  were  below  the  canopy  of  the  trees.  Although  the 
measured  vertical  delay  spread  is  larger  than  the  horizontal 
delay  spread  on  both  sets  of  data,  the  ratio  between  Them  is 
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Flgur®  7  Delay  Spread  at  •  Function  of  Frequency 

smaller  in  the  after-thinning  data  This  effect  was  expected 
given  the  similar  properties  of  the  forest  (tree  height  and  trunk 
diameter)  for  the  two  sets  of  measurements. 

A  surprising  effect  is  the  large  difference  in  the  magnitude 
of  the  two  sets  of  delay  spread  measurements.  The  original 
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vertical  delay  spread  numbers,' {or.  example,  were  about  1500 
ns,  jwhile.th©  after-thinning  measurements  yielded  a  delay 
spread  closer  to  400  ns.  These  data  would  indicate'  a 
delay-spread  reduction  of  nearly  70%.  A  similar  reduction  can 
be  seen  for  the  horizontally  polarized  data. 

One  possible  ,  explanation  for.  this -large,  change  in  delay 
spread  is  the  presence  of  logging  roads  cut  while  the  Jorest  was 
being  thinned.  SRI  experimenters  noticed  that  one  road  was 
nearly  aligned  with  the  communications  path  being  measured. 
More  research  on  the  effect  of  this  road  on  delay  spread 
characteristics  would  be  valuable. 

Polarization  Dependency 

Figure  9  illustrates  the  strong  polarization  effect 
encountered  by  a  broadband  UHF  signal  passing  through  a 
trunk-dominated  forest.  The  scales  are  1800  p$  maximum  for 
both  axes. 
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Figure  8  Delay  Spread  at  a  Function  of  Height 


The  delay  spreads  measured  after  thinning  are  consistently 
smaller  than  those  of  similar  data  taken  before  thinning.  In 
addition,  the  polarization  dependency  is  not  strong,  particularly 
in  the  data  set  taken  as  a  function  of  antenna  height.  The 
smaller  delay  spread  is  partially  caused  by  the  reduced  stem 
count  and  partially  by  the  slightly  different  paths  used  for  the 
two  measurements. 


Summary 

The  experimental  data  taken  m  the  South  Perry  Woods 
show  that  the  tree  density  (stem  count), has  a  significant  effect 
on  the  magnitude  of  the  excess  path  loss  and  multipath  delay 
spread  for  a  very-wide-bandwidth  signal  These  effects  result 
in  a  higher  excess  path  loss  for  horizontal  polarizauon  and 
delay  spreads  someumes  .greater  than  the  frc^-space 
propagation  time  for  vertical  polarization  Little  height  effect 
was  noted  for  either  excess  path  loss  or  multipath  delay  spread 

These  data  are  now  being  used  to  validate- the  wide 
bandwidth  model  being  developed.  When  completed,  this 
model  will  be  an  invaluable  tool  for  the  Army  to  use, to  predict 
the  performance  of  future  wide  bandwidth  communication 
systems. 
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INTRODUCTION 

This  paper  will  present  a  state  of  the  art 
assessment  of  the  Automated  Network  Management 
System  (AMIS)  and  the  application  of  artificial 
intelligence  (AI  )  to  the  network  control 
problem.  The  paper  will  be  presented  in  two 
parts:  first,  a  description  of  the  AMIS  which 
will  provide  raw,  filtered,  and  processed  data 
to  tho  AI  based  network  contrbr  algorithms  •  and 
second,  a  discussion  of  tho  possible  AI  based 
network  control  algorithms,  which  will  uso  the 
data  frem  the  ANNS  to  mako  better  global, 
network  decisions  and  also  to  provide  better 
network  performance  in  tho  uncertain 
environment.  Tho  AMIS  will  bo  discussed  first. 

AMIS  OVERVIEW 

The  Automated  Network  Management  System 
(AMIS)  is  an  integrated  set  of  hardware/software 
(currently  tunning  on  a  color  Sun  3/160  computer 
in  C  under  Unix)  that  is  providing  an  automated 
network  monitor  capability. 

This  capability  includes  the  near  real  time 
monitoring  of  internet  gateways,  packet  radios 
of  various  flavors,  packet  switching  nodes,  and 
host  computers  running  the  Unix  operating 
system.  In  the  future  tho  AMIS  will  be  enhanced 
to  Include  automated  network  control,  AI 
assisted  monitoring  and  analysis,  and  AI 
assisted  network  control.  By  network  monitoring 
is  meant  the  collection  and  reduction  of  network 
status  data,  followed  by  graphical 
representation  on -a  CRT  of  the  network  3tatus. 

By  network  control  is  meant  modification  of 
monitored  network  behavior  that  is  either 
problemacic  or  nonoptimal.  The  AMIS  will  bo  used 
by  network  operators/achinistratocs  and  network 
analyst/researchers . 

Network  operator/adalnistrative  personnel 
will  use  tho  system  to  maintain  continuous 
network  operation  when  network  problems/failures 
occur,  and  to  fine  tune  network  performance  when 
such  performance  becomes  nonoptimal.  Network 


analyst/researchers  will  use  the  system  to 
diagnose  complex  and  chronic  network  problems, 
and  to  perform  research  on  network 
system/ component  algor i  tiros. 

Tho  AMIS  collects  data  on  the  status  of  tho 
various  network  components  in  the  the  network 
and  presents  tho  resultant  "monitored" 
information  in  graphical  representations  known 
as  "views"  on  a  CRT.  There  are  topological  views 
which  consist  of  detailed  network  diagrams 
indicating  network  component  connectivity  and 
associated  information.  Thero  ore  table  views 
consisting  of  network  component  status 
information.  Tho  use  of  logfiles  of  AMIS 
monitored  data  in  conjunction  with  the  AMIS  view 
capability  permits  dotailod  analysis  of  network 
performance  after  the  fact.  This  capability  will 
bo  useful  in  tho  development  of  network 
algorithms. 

AMIS  SYSTEM  DESIGN 

The  AMIS  design  consists  of  two  major 
software  modules,  tho  Distributed  Management 
Module  (DMM)  and  the  Client  Process  Module 
(CPM) ,  and  an  interconnecting  Network  Management 
Protocol  (NMP) .  The  typical  operation  of  the 
AMIS  consists  of  a  CPM  (which  is  connected  to  a 
single  EMM)  sending  queries  or  control  commands 
to  the  DMM,  and  the  EMM  sending  results  back  to 
the  CPM  via  the  M1P.  Also  contributing  to  AMIS 
operation  are  otlier  cmms  and  CPMs  deployed 
throughout  the  network,  various  network 
components  queried  by  the  EMM,  and  hirnan  users 
querying  the  AMIS  via  the  user  interface 
function  of  tho  CPM  as  shown  in  figure  1.  Other 
DMM  functions  include  forwarding  queries/control 
ccrrmands  to  DMMs  when  necessary,  and  storage  of 
network  management  information  in  the  database. 
The  other  CPM  functions  include  network 
management  services  as  defined  by  the  ISO 
standards.  Presently  these  functions  include 
performance  management  and  fault 
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management,  the  AM-IS  performance  management 
includes  the  retrieval  and  presentation  of  the 
network  monitor  and  control  data  obtained  from 
the  network  components.  The 'AMIS  fault 
management  includes  the  detection  and  analysis 
of  problematic  or  nonoptimal  network  behavior. 
The  Mtp  is  also  used  for  ccnmunication  between 
cooperating  CMMs.  The  mp  was  created  to  permit 
generation  of  query  and  control  ccmands  that 
were'  independent  of  the  network  component 
protocols  such  as  HMP  (Host  Monitoring 
Protocol).  The  Mlp  is  an  application  layer 
protocol  that  is  similar  to  the  ISO  Carmen 
Manayoent  Information  Protocol  (CMIP).  The  Ml? 
uses  COD  TCP/IP  protocols  as  the  transport 
protocol. 

The  ANMS  can  provide  a  distributed 
automated' network  management  capability.  The 
CIM's  and  EMM'S  can  bo  redundantly  located  on 
various  host  computers  in  the  network.  Any  CPM 
can  provide  an  ANM  capability  by  contain ica ting 
with  any  of  the  M's  located  throughout  the 
network.  The  redundant  EMM's  and  CIM's  in  the 
network  provide  survivablo  automated  network 
management. 

Although  it  is  true  that  many  modern  data 
communication  system  are  self-maraging  (once 
initialized  and  running),  thero  will  bo  times 
when  network  operation  has  to  bo  modified  by 
actions  external  to  the  core  operational  network 
itself.  An  example  of  this  is  the  case  of  a 
local  area  network  (LAN)  connected  via  a  gateway 
to  a  wide  area  network  (KAN).  If,  for  same 
reason,  the  gateway  became  problematical  and 
started  to  flood  the  KAN  with  extraneous 
packets,  the  ANMS  monitoring  function  would 
detect  this  condition,  and  tho  AMIS  control 
function  could  remotely  reboot  tho 
gateway,  or  down  line  load  new  software  over  tho 
not,  or  remotely  turn  off/disconnect  the  gateway 
from  tho  not. 

AX  ASSISTED  ANMS 

For  such  network  problems,  CPMs  aro  being 
developed  that  incorporate  AI  techniques  to 
assist  In  network  analysis.  Cne  AI  assisted 
network  analysis  implementation  of  the  ANMS 
called  the  Intelligent  Network  Manager  (IMI) 
that  detects  problems  in  internet  gateways  has 
been  developed.  The  IMS  consists  of  a  relational 
cache,  a  set  of  views,  and  a  collection  of 
oxpects.  The  exports  are  snail  independent 
software  nodules  containing  a  portion  of  the 
ANMS  network  analysis  knowledge.  This  approach 
utilizing  multiple  experts  instead  of  wo  large 
expert  permits  use  of  the  appropriate  reasoning 
method  to  be  used  in  each  expert,  depending  on 
the  expert’s  problem  domain.  Monitored  gateway 
data  is  stored  in  tho  cache  for  efficient  access 
by  the  experts  as  shown  in  figure  2.  The  experts 
use  their  network  analysis  expertise  in 
conjunction  with  the  cache  data  to  detect  and 
diagnose  problems.  Experts  ccnrounicate  with  tho 
1M1  operator  by  sending  descriptions  of 
suspected  network  problems  to  the  Alert  View. 


APPLICATION  OF  AI  TECHNIQUES  TO  NETWORK,  CONTROL 

A  brief  study  effort  was  performed,  to 
address  the  following  two  questions:  to 
determine  the  applicability  of  the  emerging  AI 
techniques  to  packet  switched  network  control 
algorithms,  and  to  reccmnend  a  first  order 
implementation  approach  of  the  AI  techniques 
into  network  control  structure. 

The  study  addressed  the  applicability  of 
the  AI  techniques  to  the  following  aspects  of 
the  network  control  problem: 

i)  link  quality 
measurement/pred ic  t ion 

ii)  network  connectivity 
assessment 

iii)  network/in ter network 
routing 

Iv)  network  initialization 

v)  link  and  node  failure 
determination 

vi)  network  reconfiguration 

The  study  revealed  that  the  most  premising  areas 
for  future  study  were  network/  internetwork 
routing  and  network  reconfiguration.  The 
decision  to  select  these  two  areas  for  further 
study  was  influenced  by  the  fact  that  a  large 
body  of  hunan  knowledge  and  expertise  exists  for 
both  theso  areas.  In  addition,  the  timing 
requirement  for  decisions  made  by  AI  decision 
techniques  can  be  mot  by  existing  technology. 

The  network  routing  problem  has  been 
studied  extensively  for  many  years.  The  routing 
function  can  be  considered  to  have  two  parts: 
one  for  network  connectivity  assessment  and 
maintenance,  and  a  second  for  path  calculation 
and  packet  for ward ing.  The  connectivity 
assessment  pact  of  the  touting  algorithm  must 
deal  with  uncertainty  in  network  Information  in 
a  dynamic  network  envirorment.  Additionally  it 
is  well  known  that  distributed  network 
algorithms  are  prone  to  loop  generation,  and  do 
not  necessarily  provide  optimum  load  balancing. 
It  is  in  theso  areas  that  tho  use  of  AI 
techniques  seems  to  hold  most  premise. 

Tho  second  major  area  for  tho  application 
of  AI  is  the  network  reconfiguration  problem. 

For  the  tactical  Army,  the  network 
reconfiguration  problem  is  compounded  by 
frequent  relocation  of  forces,  (with  resultant 
connectivity  changes) ,  node  attrition,  and  the 
poor  connectivity  environment  due  to  gemming  and 
terrain  masking. 

Furthermore,  the  network  must  often  be 
reconfigured  based  on  partial  (and  possibly 
erroneous)  information  by  personnel  under  the 
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stress  of  battlefield  conditions.  These 
problems  point; to  the  need. to  have  an'  automated 
system  to  aid  in'  or  perform  completely  network 
reconfiguration. 

iNreaiGEOT  imriNS  algorithm 

While  much  work  in  routing  has  been  done  in 
the  past,  the  majority  of  networks  use 
algorithms  that  utilize  a  single  minimum  cost 
path  for  a  given  source  -  destination  pair.  The 
cost  of  the  path  is  determined  by  the  simple 
addition  of  cost  of  the  link  , for  each  link  in 
the  path.  The  link  metric  is  predetermined  but 
is  confuted  based  on  measurements  for  each 
particular  link.  It  is  well  known  that  the 
class  of  distributed  algorithms  performs  best 
foe  networks  that  are  canposed  of  homogenous 
links  where  the  connectivity  changes  slowly  with 
time  .  In  most  networks,  the  route  amputation 
for  each  source  destination  pair  is  done 
independent  of  traffic  typo.  In  most  practical 
network  designs,  the  algorithm  that  updates  the 
connectivity  assessment  for  a  given  node  reacts 
and  responses  to  the  dynanics  of  the  network 
environment,  but  do  not  predict  or  anticipate 
them. 

For  these  reasons,  it  was  decided  to  pursue 
the  devoloptxmt  of  an  Intelligent  Routing 
Algorithm  (IRA).  Tho  IRA  attempts  to  perform 
global  network  optimum  utilization  as  well  as 
loop  prevention  to  provide  an  optimum  level  of 
performance.  Tho  IRA  has  two  distinct 
components:  a  replicated  component  that  acts 
much  like  a  conventional  distributed  routing 
algorithm,  and  a  centralized  AI  component  that 
provides  a  form  of  topology  control  that  yields 
global  optimization  as  well  as  loop 
detect  loin/prevent  Ion.  Tho  IRA  is  presented  in 
figure  3.  Tho  distributed  routing  component  is 
fully  replicated  at  each  node  in  tho  network. 

The  routing  of  packots  is  based  on  routing 
tables  that  are  contructed  in  part  from  data 
distributed  by  the  centralized  AI  topology 
control.  Each  of  tho  distributed  nodes  provides 
connectivity  and  network  status  Information  to 
the  centralized  AI  component.  The  centralized  AI 
component  uses  this  network  state  information  to 
manipulate  tho  individual  nodus  view  of  tho 
network  topology  to  provide  scrao  optimuu  load 
sharing.  Additionally,  the  centralized  AI 
component  will  also  insure  that  routing  loops  do 
not  occur. 

Under  this  scheme,  it  is  quite  possiblo  for 
different  nodes  to  have  different  views  of  the 
network  topology.  The  centralized  AI  oemponent 
continuously  -unitors  tho  status  of  the  network 
to  determine  *£  the  network  is  in  or  will  evolve 
to  an  undesirable  or  substantially  subopt imal 
state,  if  the  network  is  viewed  to  be  in  such  a 
state  or  evolving  toward  such  a  state,  then  the 
link  metrics  are  recomputed  and  forwarded  to  tho 
distributed  nodes  to  provide  network  loading  in 
a  more  uniform  manner. 


NEITORK  RECONFIGURATION 

The  second  major  area  for  the  application 
of  AI  to  packet  network  technolgy  is  the  network 
reconfiguration-problem.  A  large  body  of 
knowledge  and  expertise  is  available  for  the 
network  design  problem.  The  basic  approach  is 
bo  utilize  existing  techniques  augmented  with 
mechanisms  for  knowledge  representation, 
reasoning,  constraints  for  equipment  attributes, 
terrain,  and  to,  integrate  the  design  of  the 
local  assess  and  backbone  into  a  single  design 
problem. 

It  should  be  noted  that  the  reconfiguration 
process  will  be  running  continuously,  by  taking 
measured  data  from  the  actual  system  in 
operation  as  well  as  new  (  future  )  input 
requirements.  In  many  cases  the  information 
supplied  as  input  will  be  partial. (and  possibly 
erroneous)  and  will  include  historical  traffic 
profiles  as  well  as  future  traffic  estimates. 
Inputs  will  also  incude  routing  and  congestion 
performance  histories.  Potential  jarraing 
threats  and  possible  future  connectivity  outages 
will  also  bo  an  integral  part  of  the  network 
design  process.  Any  future  clustering  of  forces 
or  mobility  requirements  will  also  bo  supplied 
as  input.  The  output. of  tho  reconfiuration 
process  will  bo  a  ccroploto  network  topology 
dosign,  including  the  backbone  and  area  access, 
that  will  support  current  and  planned  tactical 
needs. 

OONCLUS ION/SUFMARV 

This  paper  presented  a  brief  suunary  of  tho 
work  completed  to  date  in  both  tho  AMIS,  as  well 
as  tho  efforts  to  incorporate  advanced  AI 
techniques  in  network  control.  Tho  AtMS  is 
currently  an  ongoing  program.  The  AMIS  is 
currently  undergoing  test  and  evaluation  at 
testbeds  at  Ft.  Morrnouth,  NJ  and  Ft.  Bragg,  NC. 
Tho  surmacy  of  tho  application  of  is  by  no  means 
exhaustive  and  indicates  that  much  work  remains 
yet  to  bo  done.  The  utilization  of  AI 
techniques  in  uncertainty  management,  knowledge 
representation  and  reasoning,  offer  clear 
advantages  over  tho  traditional  network 
approach. 

Footnote 

The  results  presented  in  this  paper  were 
developed  by  BBN  LABS,  Inc  under  CARPA  contract 
f  MBA  903-83-C-0131,  and  SRI  International  under 
US  Amy  CECCM  contract  f  CAAB07-86-D-A035.  The 
authors  of  this  paper  provided  the  program 
definition  and  project  direct iojyhanagcment  for 
this  effort. 
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FIGURE  2.  INTELLIGENT  NETWORK  MANAGER  vESIGN 


fiOUREJ  INTELLIGENT  ROUTING  ALGORITHM 
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ABSTRACT 

With  the  influx  of  ava 2ab@  cornet- 
technology,  vast  amounts  of  infamaaon  can  be 
moved  and  mareputated.  Currently,  information 
exchange  between  "fighthg  level"  forces  (te.. 
brigade  and  below)  is  constrained  by  relatively 
low  frequency  tactical  radios  that  do  not  support 
the  high  band-widths  common  in  most  modern 
computer  networks.  Cne  potential  sofoSon  to  this 
information  flow  problem  is  fo  reduce  the  amount 
of  data  exchanged  by  representing  mStary 
information  and  concepts  in  their  most  basic, 
primitive  form.  Transmission  of  abstracted  mStary 
concepts  requires  less  band-width  white  also 
providing  battlefield  information  in  a  more 
accessible  form. 

The  Ballistic  Research  Laboratory  (BRl)  is 
developing  an  experimental  Information 
Distribution  System  (IDS)  based  on  primii.ve  data 
abstractions  (termed  "facts")  of  mSfary 
concepts.  The  system  consists  ot  a  RAM  resident 
storage  facility  (faetbase),  a  connectionless 
communications  protoco.  (Fact  Exchange 
Protocol),  and  an  explicit  methodology  to 
describe  a  battlefield  in  terms  of  conv.uterized 
cata  abstractions.  Further,  a  set  of  distribution 
wles  that  describes  situations  in  which  fact 
exchanges  are  warranted  between  tactical  nodes 
is  being  developed  as  part  of  a  security  control- 
module  (SCM)  that  resides  at  the  heart  of  the  IDS. 

In  order  to  present  IDS  battlefield  information 
to  the  system  operatoi  several  "application" 


programs  were  developed  to  maniptia te  facts. 
These  computer  programs  include  Working  Map 
(WMAP),  Organsa&ttal  Chart  (OBGCHART).  and 
Preplan  Tbs  development,  impfemsotaticn-and 
spscfej  OOitsJdt'atcis  that  influence  these  user 
Btterfaces.revcaf  aremative  methods  of  battfefseld 
representation  through  the  application  of 
computer  science  techniques. 

INTRODUCTION 

The  BaSstic  Research  Laboratory's  (BRL) 
System  Engineering  and  Concepts  Analysis 
Division  (SECAD)  is  developing  a  fire  support 
application  to  demonstrate  information  distribution 
concepts  within  the  US  Army  LABCOM's  Smart 
Weapons  Systems  (SWS)  COOP  project.  The 
tactical  theme  of  the  IDS  portion  of  the  project  win 
revolve  around  the  dynamic  actions  of  five  key 
artillery  nodes  (the  maneuver  brigade  fire  support 
element,  a  direct  support  field  artitleiy  battalion 
operations  element,  and  tt,ee  maneuver  battafon 
fire  support  elements)  that  are  responsible  for  hvo 
key  fire  support  functions:  fire  support  control  & 
coordination  (FSCC)  and  field  artillery  tactical 
operations  (FA  TAC  OPS).  Communications 
between  these  five  nodes  will  be  recorded  and 
examined  during  simulations  of  various  combat 
situations  Several  tactical  vignettes  will  be 
employed  to  create  critical  combat  situations. 
Responses  to  these  situations  wB  require 
impromptu  plan  changes,  realignment  of  forces  in 
the  command  chain,  the  use  of  a  secure  and 
silent  mode  for  battlefield  information  gathering. 
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and  an  automated  method  of  tracing  and 
reporting  traidefea  'rfcrmatisn. 

A  major  goal  Is  to  ctevefop  tactical  computer 
sc fence  •^cfrpSogy  that  can  support  'Sghting 
feveT  i  fenders  an  sofcSers  who  must 
co cttsnd  ti&t/  cynamfc.  unpredfcfabfe,  and 

hostile  c—.iost  err/ir cements,  nertf  tactical 
command  and  control  systems  support  (SgStal 
data  exchange  via  formatted  “messages” 
(character  strings)  or  graphics  symbols  that  must 
be  interpreted  by  a  human  operator.  These 
systems  fal  short  in  two  key  respects:  fist  the 
information  is  not  in  a  form  that  computers  can 
marcpufate  in  a  sophisticated  mariner  'fee., 
"understand”),  and  second,  the  use  of  inefficient 
information  exchange  protocols  may  exceed  the 
maximum  bandwidth  avaSabte  on  VHF-FM  and 
Hr-AM  radios  common  to  (and  required  by) 
•lower  echelon  units.  These  inelfident  protocols 
produce  significant  electromagnetic  signatures 
due  to  the  large  amount  of  overhead  required  in 
the  exchange  of  battlefield  information  and  the 
manner  in  wftch  the  protocol  accompEshes  this 
exchange. 

The  BRL  "fact  oriented  data  distribution 
system"  incorporates  several  new  concepts  in  an 
effort  to  explore  techniques  that  provide  more 
flexibility  and  survivabfty  to  the  information 
distribution  function -in  command  and  control 
systems.  Flexibility  is  enhanced  via  a  freeform 
distributed  taetbase  (DF8)  and  associated  lire 
support  control  capability  profiles  (CAPs)  that 
define  the  standard  operating  procedures  of  a 
node.  Survivability  is  enhanced  through  minir-zing 
electronic  emanations  by:  transmitting  only 
significant  information  (as  determined  by  the 
commander),  transmitting  information  in  its  purest 
form,  taking  advantage  of  "overheard" 
information,  providing  a  “radio  silence"  (Emission 
Control,  or  EMCON)  mode  of  operation,  and  using 
multicast  transmissions  when  possible.  A  fact 
exchange  protocol  (FEP)  is  being  developed  that 
will  exploit  these  and  other  features  to  create  a 
streamlined,  connectionless  transport  layer 


protocol  These  gusting  concepts  suggest  the 
construction  of  a  computationaJty  intensive 
protocol  that:  aSows  information  transfers  on iy 
when  internal  computing  fais  to  yield  sj^Scant 
results.  Figure  i  shows  the  basb  structure  of  tl*e 
information  Distribution  System.  The  iSstributed 
faabase  (DFB)  is  composed  of  four  conceptual 
modufes:  the  taetbase  for  information  storage,  the 
Fact  Exchange  Protocol  (FEP).  a  Package 
Protocol  to  enable  confection  between  the.DFB 
and  appScaSon  programs,  and  the  Security 
Control  Module  (SCM)  that  controls  access  to  the 
faetbase. 

i 

The  main  purpose  of  an  information 
efistribution  system  is  to  support  the  exchange  of 
ideas  cr  concepts.  At  the  superficial  level  this  may 
simply  be  a  unit's  location,  but  underiying.such  a 
simple  concept  are  the  reasons  for  needing  to 
know  a  lira's  location  and  the  frequency  of  this 
information  requiementi  This  reasoning  ■  process 
can  be  used  to  define  the  structure  of  tactical 
information  and  to  regulate  its  flow  between 
various  nodes  (units)  of  the  system.  If  a  terse, 
computer  efficient  means  of  communicating 
between  the  unit  nodes  of  the  experimental 
system  is  to  be  developed,  the  incorporation  of 
military  science  is  essential  in  the  definition  of 
data  abstraction  primitives  reflecting  basic 
battlefield  concepts.  By  using  these  primitives  to 
exchange  information  between  command  and 
control  nodes,  a  more  flexible  and  survivable 
system  results.  However,  a  significant  effort  niust 
be  expend.ed  "up  front"  as  combat  devfiiCpers 
and  computer  scientists  work  together  in  order  to 
build  a  canonical  list  of  data  abstractions 
describing  basic  military  concepts. 

Information,  provided  through  the  media  of 
data  abstraction,  is  maintained  in  a  form  suitable 
for  manipulation  by  sophisticated  computer 
application  programs.  Using  this  scheme,  one  of 
the  tasks  oi  the  "high-level"  user  application 
programs  becomes  converting  data  abstrsCFons 
into  a  form  suitable  for  user  assimilation  and 
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martpUa^od.  Tl»  mail  focus  of  ths  paper  is  a  first  presented  to  prcrwde  an  expiration  ci  the 
description  of  these  appScafion  programs,  ftstcfionS  environment  on  which  these 
however.  a  review  of  the  basic  DF3  software  is  applications  depend. 


FIGURE  1-  Block  Diagram  of  IDS  Software  Components 


FACTS  and  FACTBASES 

Information  pertaining  to  a  combat  situation 
is  stored  within  a  RAM  resident,  distributed 
factbase  (DFB)  as  a  coDection  of  -  many 
interconnected  fspts.  A  fact  is  an  instantiation  of  a 
pre-defined  fact  type  that  can  be  structured  to 
describe  any  item,  activity,  or  event  common  to  a 
battlefield.  As  facts  are  entered  into  the  DFB  (or 
stated),  each  is  assigned  an  unique  fact 
identification  number  (fact  id)  that  consists  of  the 
four  byte  Arpanet  host  address  of  the  computer 
on  which  the  factbase  resides  and  a  four  byte 
integer  controlled  by  the  resident  factbase.  In 
general,  a  fact  consists  of  a  header  and  one  or 
more  fact  items.  There  are  five  possible  data 
type?  that  may  be  included  in  a  fact  definition, 
integers,  floating  poirii  numbers,  character 


strings,  references  (fact  ids  of  other  facts),  and 
lists  (a  collection  ot  any  of  the.above  data  types). 

Every  fact  can  be  categorized  as  either  a 
dynamic  fact,  reference  material,  or  a  meta-fact. 
Dynamic  facts  describe  changing  battlefield 
events  or  activities  and  are  stated  by  a  user  or  an 
application  program  Every  dynamic  fact  is 
associated  with  its  factbase  of  origin  (host)  by  its 
fact  id.  Reference  material  facts  describe  static 
"reference"  information  (e.g..  Tables  of 
Organization  and  Equipment  (TO&E).  vehicles, 
equipment,  and  ammunition)  and  have  fixed  fact 
ids  that  are  common,  to  all  factbases.  (Note,  a 
special  host  address  occupies  the  first  four  bytes 
of  the  fact  id  of  a  reference  fact).  This 
characteristic  allows  referral  solely  through  the 
use  of  fact  ids,  thus  significantly  reducing  the 
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amount  of  data  that  must  be  transmitted  'n  many 
-  cases.  Reference  material  tacts  are  pre-loaded 
Into  each  fectbase  before  rtSafcation  and  are 
never  created  nor  updated  unless  there  is  a 
doctriraJ-or  equipment  modification.  The  one 
exception  is  unit  facts  .which  represent  specific 
mSary  organizations  such  as  the  “1-51  Held 
Artaery"  or  the  "USS  Abe".  Unh  facts  are  never 
created  by  the  user  (only  congress  can  do  that1) 
and  so  they  too  have  static  fact  ids  and  are 
reference  material  However,  they  can  obviously 
be  updated  (e.g..  a  unit's  location,  c&ection  of 
travel,  status  of  equipment,  etc.)  so  they  present 


META-FACTS 


PLAN 

-WHAT  IF- 

ORDER  -► 


DISTRIBUTION 

RULES 


COMMO 

INTER-APPLIC. 
FACT  ID  EXCH. 


DYNAMIC  1 

FACTS  ! 


a  spedal  class  of  reference  material  facts. 
Meia-facts  are  a.specsal  version  of  dynamic  facts 
that  are  used  to  represent  potential  modneafions 
pf  other  facts.  Since  the  facts  in  the  faetbase 
normaHy  represent  the  “real  world"  situation,  a 
fact  type  must  be. available  to  deserfoe  future 
modifications  of  current  facts  without  modifying 
the  representation  of  the  current  battlefield 
situafion.  A  meta-fact  simply  contains  a  reference 
to  another- existing  fact  with  a  Sst  of  alternative 
values  for  items  (fields)  contained  within  the 
referenced  fad  A  typical  use  is  to  exchange 
future  battlefield  plans  and  options.  Meta-facts 

REFERENCE  MATERIAL  (STATIC  FACT  IDS) 


EQUIPMENT 


AMMUNITION 


NOT  UPDATABLE  t 


NOT  CREATABLE 


FIGURE  2:  Data  Abstractions  (Fact  Types)  and  Relationships 


are  also  used  to  augment  the  rules  governing 
information  transfers  between  combat  nodes. 
Everything  about  a  node  (a  military  unit)  is  stored 
as  a  fact  to  allow  any  information  to  be  easily 
exchanged  with  any  other  nodes.  Figure  2  shows 
the  relationship  between  the  canonical  list  of  fact 
types  (primitive  data  abstractions)  implemented 
thus  far  Arrows  indicate  references  to  facts  of 
other  types. 


An  important  conceptual  leature  of  the  DFB 
is  its  ability  to  automatically  initiate  actions  upon 
the  reception  ot  new  information  whether  the 
information  comes  from  other  DFB's  or  local 
application  programs.  The  mechanisms  that 
enables  a  DFB  to  take  automatic  action  are 
known  as  distribution  rules.  (Previously,  a  simpler 
form  called  a  trigger  was  used.)  A  distribution  rule 
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is -.composed  of  a  set  of  criteria  that  can  be 
compared  to  incoming  fact  exchanges  and  a  set 
c|  actions  to  ba  executed  when  the  criteria  is  met 
Whenever  a  fact  exchange  enters  ,  the  DFB  a 
comparison  is  made  to  the  . criteria  of  each 
distribution  a is.  DistrSxrrion  ruies  w3  be  explained; 
further  in  the  section  about  the  Security  Control 
Module. 

FACT  EXCHANGE  PROTOCOL 

-  Information  exchange  between  individual 
factbases  is  supported  by  the  fact  exchange 
protocol  (FHP).  The  FEP  is  a  connectionless, 
reBatfc  datagram  protocol  (transport  layer)  that 
can  be  wrapped  in  the  standard  DoD  Internet 
Protocol  (IP).  The  initial  focus  of  the 
implementation  centers  on  reEabiBty  with 
terseness  utilizing  overhearing,  multicast,  and 
other  techniques  to  minimize  transmissions.  In  the 
past,  commanders  and  their  staffs  have  kept 
themselves  informed  by  simply  listening  to  the 
voice  transmissions  occurring  on  several  radio 
nets.  SimHariy,  the  collection  of  "free"  digital  data 
(at  no  cost  in  bandwidth)  is  a  feature  of  the  FEP. 
The  possibility  of  collecting  overheard  information 
is  provided  to  reduce  retransmission  requests 
that  consume  limited  transmission  bandwidth.  To 
support  this  ability,  the  network  layer  protocol 
(DoD  IP)  must  be  modified  to  allow  the  passage  of 
datagrams  meant  for  other  hosts.  This  produces 
two  categories  of  datagrams  received  by  the  FEP, 
datagrams  meant  for  the  resident  DFB  and 
overheard  datagrams.  Datagrams  meant  for  the 
resident  DFB  are  acknowledged,  while  all 
datagrams  received  are  forwarded  to  the  Security 
Control  Module  (SCM)  where  user  defined  rules 
concerning  overheard  information  determine  the 
pertinence  of  the  overheard  information  (for  entiy 
into  the  DFB). 

Overheard  datagrams  must  be  meaningful. 
However,  standard  network  protocols,  like  the 
DoD  s  IP,  may  arbitrarily  fragment  packets  when 
they  exceed  the  maximum  transmission  unit  size 
(MTU)  of  the  datalmk  protocol.  Arbitrary  packet 


fragmentation  can  cause  a  comprehension 
problem  since  information  describing  a  fact  may 
arrive  in  incomplete,  meaningless  pieces. 
Therefore,  no  information  transmission  can  be 
larger  than  the  dataEnk  layer  MTU  of  the 
communications  channel.  Since,  MTU  values  are 
easily  determined  in  the  low  echelon  tactical 
environment,  this  requirement  is  easBy  met.  (In 
the  BRL  implementation,  the  channels  win  be 
Ethernet  and  FSK  modems  tor  VHF-FM  radio, 
both  with  MTUs  of  approximately  1500  bytes.) 
Although  unlikely,  facts  larger  than  the  MTU  wSJ 
have  to  be  divided  at  logical  internal  boundaries 
before  being  passed  to  the  lower  protocol  layers 
(transport  and  below)  so  that  any  overheard 
datagrams  are  meaningful. 

Conversely,  several  fact  exchanges  may  be 
packed  into  a  single  MTU  sized  packet  to  reduce 
bandwidth  utilization.  A  significant  reduction  in 
bandwidth  usage  is  achieved  by  reducing  the 
number  of  radio  transmissions  because  each 
transmission  requires  a  radio  "preamble"  that  is 
often  relatively  large  in  comparison  to  the  size  of 
an  information  packet.  Making  each  packet  as 
targe  as  the  MTU  minimizes  the  number  of 
transmissions  required  to  send  information,  which 
in-turn,  minimizing  the  effect  of  the  radio 
preambles.  A  A  datagram  no  longer  has  a  single 
destination  host  address  associated  with  it  since 
every  fact  exchange  contained  within  the 
datagram  may  have  a  different  destination. 

FEP  datagram  are  sent  between  hosts  (or 
groups  of  host  for  multicast  addressing).  A 
datagram  can  contain  several  fact  exchanges, 
each  with  its  own  header  that  contains  a  32  bit 
fact  exchange  identification  number.  Fact 
exchanges,  not  datagrams,  are  acknowledged. 
The  connectionless  nature  of  the  FEP  required  a 
selective  (out  of  sequence)  acknowledgment 
scheme  for  each  fact  exchange  entity.  The  FEP 
decomposes  incoming  packets  into  separate  fact 
exchanges  and  returns  an  acknowledgement  for 
those  fact  exchanges  intended  for  the  resident 
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host.  It  then  forwards  all  fact  exchanges  to  the 
SCM  tagged  as  either  intended  for  the  resident 
factbase  ("direct")  or  overheard.  Figure  3 
illustrates  the  FEP  message  header  design. 

Due  to  the  wide  variation  in  communication 
channel  bandwidths  (e.g.,  10  Mbps  Local  Area 
Net  (LAN)  and  1200  bps  FSK  modems  over  the 
VHF-FM  radios  used  at  the  fighting  echelons  of 
the  Army),  flow  control  concepts  must  be 
re-examined.  For  example,  "windowing"  (i.e.,  the 


allowed  number  of  unacknowledged  fact 
exchanges),  "wait  time-out”  0.©..  elapse  time  to 
wait  for  an  acknowledgement),  and  number  of 
retry  (before  giving  up)  parameters  are  based  on 
a  prion  knowledge  of  the  destination  host  and 
communication  channel  being  used.  These 
parameters  can  also  be  set  explicitly  by  the  SCM 
when  it  passes  a  fact  exchange  to  the  FEP. 
Eventually,  the  FEP  will  provide  the  SCM  with  fact 
exchange  timing  measurements  to  be  used  to 
dynamically  adjust  these  parameters.  It  is  the  low 
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FIGURE  3.  Fact  Exchange  Protocol  Header 


bandwidth  communications  channel  and  not  the 
hosts  that  limn  information  exchange,  since  a 
single  hop  network  (not  an  internet)  is  the 
communications  medium,  these  network 
parameters  are  relatively  easy  to  obtain. 

Future  plans  include  the  implementation  of  a 


radio  silence  mode  of  operation  to  emulate  the 
common  voice  communications  practice  of 
silently  listening  to  radio  nets,  even  for  messages 
intended  tor  the  listener.  A  node  may  enter  into 
EMCON  mode  and  continue  to  receive  information 
without  returning  acknowledgments.  Upon 
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discontinuance  of  EM50N  mode,  a  "bulk" 
acknowledgment  scheme  w3be  devefpped-to 
update  only  the  most  recently  received  tact 
exchanges  (far  a’  particular  fact).  Actual 
transmission  of  the  bulk  acknowledgement  can 
be  accomplished  through  the  use  of  any 
appropriate  media  (e.g.,  radio,  floppy  disk  and 
motorcycle,  etc.). 

SECURITY  CONTROL  MODULE 

The  Security  Control  Module  (SCM)  will 
concentrate  initially  on  fact  exchanges  over  the 

FEP  (information  to/from  other  factbases  outside 
the  local  host)  rather  than  with  the  application 
programs.  The  SCM  has  four  major  functional 
tasks:  one,  to  determine  when  local  information  is 
significant  enough  to  bs  transmitted  to  remote 
factbases.  two.  to  determine  if  received  fact 
exchange  information  should  be  entered  into  th8 
resident  factbase.  three,  to  determine  whether  to 
honor  requests  for  information  from  remote 
factbases,  and  four,  to  adjust  FEP  parameters 
(e.g.,  window  size  and  number  of  retry)  based 
upon  communication  channel  measurements 
reported  from  the  FEP  (e.g.,  average  fact 
exchange-acknowledgement  round  trip  times). 

A  key  tenet  of  this  project  is  the  elimination  of 
unnecessary  information  exchanges,  to  include 
unnecessary  requests  for  information.  To  do  this, 
a  set  of  rules  governing  information  distribution  is 
entered  into  the  SCM  of  each  DFB  that  keeps 
pre-defined  units  informed  of  the  battlefield 
situation  and  plans.  These  rules  insure  that  only 
“significant"  data  (as  defined  by  the  commander 
and  statf)  are  transmitted.  For  example,  it  is 
normally  not  significant  to  report  every  round  o! 
ammunition  that  an  artillery  battery  fires  (although 
this  is  currently  done).  More  appropriately, 
ammunition  status  should  be  reported  when  it 
reaches  pre-designated  values  or  rates. 
Theoretically,  if  the  distribution  rules  are  defined 
correctly,  one  unit  should  rarely,  if  ever,  have  to 
query  another  unit  for  information.  Distribution 


rules-  have  the  structure: 

faettype  criteria  actions 

where 

facijype  is  the  name  of  a  fact  definition, 
criteria  r  defines  values  to  compare  to 
incoming  fact  items, . 
actions  provide  computer  instructions 
should'  the  criteria  be  matched 
TTiere  are  currently  two  major  actions:  notify  a 
local  application  program,  and  send  some 
information  to  another  factbase.  Two  other 
actions  are  state  trigger  and  kill  trigger  which 
maintains  backward. compatibility  for  a  previous 
mechanism,  called  a  trigger.  This  mechanism  is 
similar  to  a  distribution  rule  except  that  ft 
compares  its  criteria  to  the  tact  exchange 
information  after,  rather  than  before,  the 
information  is  entered  into  the  factbase. 

Status  reporting  is  being  implemented  using 
the  additional  concepts  of  reporting  depth  and 
value  thresholds.  Reporting  depth  constrains  the 
type  of  exchanged  status  information.  For 
example,  the  traditional  reporting  depth  of  2  is 
used  by  commanders.  Therefore,  every  unit 
should  have  information  about  units  2  echelons 
below  in  the  command  structure  (e.g..  brigades 
track  companies,  battalions  track  platoons,  etc.). 
This  means  that  eacn  unit  sends  status 
information  about  directly  subordinate  units  to  its 
parent  unit  (e.g.,  battalions  send  information 
about  their  companies  to  their  parent  brigade). 
Thus,  a  brigade  would  receive  status  infoimaticn 
about  ail  its  companies,  and  it  a  status  report 
about  its  battalions  is  required,  one  can  be 
compiled  by  executing  a  DFB  roll-up  of  all  the 
companies.  A  units’  distribution  envelope  is  its 
purview  based  on  an  assigned  reporting  depth 
and  any  other  special  cases.  A  unit’s  distribution 
envelope  can  be  dynamically  modified  based  on 
the  desires  oi  the  unit  commander,  in  a  low 
bandwidth  tactical  environment,  ar>  increase  in 
the  distribution  envelope  will  decrease  the  usabie 
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bandwidth  available  to  other  units  and  produce  a 
larger  electronic  signature.  The  distribution 
envelope  concept  win  also  be  used  to  control  the 
entry  of  overheard  information  since,  for  obvious 
security  reasons,  it  would  not  be  wise  to 
incorporate  all  overheard  information  (i.e.,  should 
a  node  be  captured). 

The  exchange  of  information  is  also 
controlled  by  value  thresholds  that  appear  in  the 
criteria  of  ru'es.  Thresholds  are  defined  for  fact 
items  (fields)  within  fact  types  and  may  be 
compared  to  the  current  value  in  the  factbase,  or 
more  often,  to  the  last  value  transmitted  to  other 
units.  For  example,  an  threshold  value  could  be 
placed  on  an  artillery  unit's  ammunition  count  to 
identify  when  less. than  100  DPICM  rounds  exist, 
or  when  20%  of  the  original  basic  DPICM  load  is 
reached,  or  whenever  the  ammunition  count 
drops  by  200  rounds  of  DF1CM  from  the  last 
reported  valus.  The  rule  to  automatically  initiate 
an  ammunition  status  update  to  a  commanding 
unit  could  have  the  following  format: 

Fact  tvoe  Criteria  Actions 

unitjype  ammo_num  <  ICO  SEND 

&a  ammo  ==  "DPICM"  TO:  PARENT 

This  states:  "when  your  DPICM  ammunition  gets 
below  100  rounds  then  notify  your  parent  unit  of 
this  fact".  Information  is  exchanged  only  when 
these  threshold  values  are  exceeded  (i.e.,  the 
information  is  determined  to  be  "significant”)  thus 
conirolling  how  often  valuable  bandwidth  is  used 
to  transmit  facts.  The  use  of  reporting  depth  and 
threshold  values  will  provide  the  commander  with 
a  method  to  define  and  control  the  exchange  of 
necessary  information  to  reasonable  bandwidth 
usage  levels. 

CAPABILITY  PROFILES  (CAPS) 

Node  initialization  requires  that  the  previously 
described  information  and  constraints  be  entered 


into  the  SCM  of  each  DFB.  This- information  is 
stored  in  lire  support  control. capability. profiles, 
or  "CAPs",  and  basically  describes  the  standard 
operating  procedures  for  information  distribution 
of  that  unit.  The  CAPs,  like  aS,  other  information, 
are  ultimately  stored  as  facts  to  facilitate 
information  exchange.  Two  types  of  parameters 
are  currently  included  within  ins- CAPs;  1)  a  data 
dictionary  that  defines  every  valid  fact  type 
acceptable  to  the  factbase,  and  2)  the 
distribution  rules  that  limit  the  flow  of  information 
on  the  network.  The  CAPs  can  be  modified 
dynamically  (even  from  remote  locations*  allowing 
all  the  items  previously  mentioned  to  be 
maintained  as  best  appropnate  for  a  particular 
situation.  For  example,  specific  CAP  sets  could  be 
developed  for  offensive,  defensive,  special 
situation,  or  training  scenarios  and  locally  stored 
at  each  host.  As  battle  conditions  change,  the 
CAP  defined  to  regulate  the  new  situation  could 
be  loaded  into  the  SCM  thus  easily  adjusting  the 
operating  conditions  for  the  DFB.  It  is  envisioned 
that  the  CAPs,  which  basically  implement  th8 
standard  operating  procedures  (SOPs)  for  a  unit, 
should  be  developed  by  experts  on  doctrine  and 
tactics  (e.g.,  US  Army  Training  and  Doctrine 
Command  schools)  and  perhaps  modified  by 
specialists  in  the  upper  echelons  of  a  particular 
unit  (e.g.,  corps,  division,  or  brigade);  the  CAPs 
would  not  normally  be  modified  by  the  soldier  in 
the  field. 

APPLICATION  PROGRAMS 

Since  one  cannot  "see"  a  factbase  or  me 
FEP,  application  programs  were  developed  to 
demonstrato  the  capabilities  of  the  system. 
Application  programs  permit  controlled  access  to 
the  information  stored  within  a  DFB.  Information 
(facts)  can  be  retrieved  manually  using  queries  or 
automatically  using  DFB  triggers.  New  information 
may  be  entered  by  stating  new  facts  or  updating 
existing  facts.  Further,  application  programs 
depend  upon  the  DFB  for  ali  local  or  remote 
information  exchange.  Applications  do  not 
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transmit  information  to  other  applications  or 
factbases;  rather,  information  is  entered  into  the 
local  factbase  and  distributed  to  other  hosts  oniy 
when  a  distribution  rule  is  satisfied.  Direct  DFB 
queries  and  triggers  constitute  the  oniy 
information  gathering  methods:  available  to 
application,  programs.  This  is  a  radical  change 
from  the  typical  way  of  handling  information,  but 
allows  a  defined  set  of  distribution  rules  to 
regulate  information  exchanges.  However,  if  the 
users  wants  to  send.a  free-text  character  string, 
this  can  be  easily  facilitated  (although 
discouraged).  Hopefully,  combat  developers 
(military  scientists)  will  eventually  have  data 
abstractions  for  all  such  situations  so  that 
free-text  messages  are  rarely,  if  ever,  required. 

Application  programs  have  two  main 
functions,  to  manipulate  facts  (i.e.,  create,  update 
and  kill  facts)  and  to  convert  facts  into  a  form 


understandable  by  the  user  (often  in  a  graphical 
form).  There  are  four  applications  programs 
planned  in  the  BRL  IDS  effort  to  support  the 
preparation,  maintenance,  and  dissemination  of 
the  information  associated  with  a  fire  support  plan 
in  a  maneuver  operation's  Older  (OPORD).  The 
creation  of  an  OPORD  is  an  excellent  vehicle  to 
demonstrate  the  system’s  capabilities  in  a 
dynamic,  real-time  environment. 

One  primary  purpose  of  application 
programs  is  to  serve  as  an  interface  between  the 
user  and  a  DFB.  Through  applications,  the  user 
may  display  or  enter  DFB  facts.  Since  facts  are 
data  abstractions  of  military  concepts  !n  their 
"purest"  form,  they  must  be  converted  into  a 
form  appropriate  for  human  assimilation.  The 
implementation  experience  of  the  BRL  suggests 
that  any  difficulty  in  displaying  a  fact  correlates 
directly  to  how  "correctly”  the  data  abstractions 
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FIGURE  4.  Scenario  Driier  Fact  Type  Conversion 


ol  the  military  concepts  are  represented.  That  Is, 
if  the  data  abstractions  are  correct,  thon  it  is  easy 
to  develop  ways  to  display  that  information,  and 
vice  versa.  Many  commonly  used  terms  and 


phrases,  such  as  "target”. and  "border",  have 
more  subtle  (and  often  simpler)  meanings  than 
spontaneous  intuition  affords.  The  current  set  of 
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fact  types  are  constantly  being  scrutinized  and 
revised  based  on  implementation  experience; 
fortunately,  they  are  getting  simpler  and  more 
general. 

In  order  to  accurately  portray  real-time 
combat  situations,  a  Scenario  Driver  program 
was  developed  (see  Figure  4).  The  scenario 
driver  converts  tactical  input  data  into  facts  and 
enters  them  into  a  separate  factbase  for 
dissemination  to  the  command  and  control  nodes 
being  exercised.  Thus,  in  light  of  the  experiment 
currently  under  consideration,  the  scenario  driver 
will  serve  as  many  non-exercised  (simulated) 
units  in  a  typical  US  brigade.  The  tactical  inputs 
for  the  scenario  driver  were  developed  under 
contract  and  provide  an  unclassified,  60  minute, 
Fulda  Gap  battle  between  a  friendly  mechanized 
infantry  brigade  task  force  and  an  enemy  tank 
division  with  one  minute  resolution  down  to  the 
platoon  level.  From  this  master  event  list  (i.e„  the 
“scenario"),  events  are  selected  to  build  a 
"vignette",  that  is,  a  particular  blue  perception  of 
the  battle;  many  vignettes  can  be  built  from  the 
master  list.  During  an  exercise,  the  traffic 
exchanged  between  five  nodes  (factbases)  will  be 
collected  as  well  as  data  on  the  information 
exchanged  between  the  application  programs 
and  the  factbases.  This  data  can  be  analyzed  to 
study  and  evaluate  the  efficiency  and  worth  of  the 
factbase  concepts,  the  FEP  features  (e.g., 
overhearing),  and  the  appropriateness  of  the  data 
abstractions.  In  addition,  subjective  information 
will  be  obtained  from  the  users  concerning  their 
ability  to  use  the  applications  and  to  understand 
the  situation  that  was  presented. 

The  Organization  Facts  (ORGCHART) 
application  displays  unit  echelon  diagrams  and 
Tables  of  Organization  and  Equipment  (TO&E) 
This  application  provides  the  ability  to  modify  & 
observe  unit  and  organization  fact  types.  The 
organization  of  any  unit  within  the  battlefield 
command  structure  may  be  examined  via 
graphics  output.  Commanders  may  reassigned 
their  subordinate  units  using  the  interactive  work 


panel  supported  in  ORGCHART  to  build  a  task 
organization  (changes  in  unit  fact  attached  links). 
The  current  status  of  unit  vehicles,  equipment, 
and  ammunition  is  provided  through  a  ”roll-up” 
procedure.  A  "roll-up"  is  the  compilation,  of  all 
significant  items  assigned  to  subordinate  units 
making  up  a  unit  under  examination.  A  tabular 
listing  is  also  provided  that  compares  the  current 
status  with  original  unit  conditions. 

The  Working  Map  (WMAP)  application 
displays  and  manipulates  geographical 
information  detailing  the  locations  of  friendly  and 
enemy  unit,  sensing,  line  (fire  control  measures), 
border,  and  target  facts  are  presented  to  the 
user.  All  graphical  output  can  be  superimposed 
onto  a  topographic  map  background  representing 
the  Fulda  Gap  in  Germany.  The  WMAP  interactive 
panels  allows  a  user  to  create  geographical  line, 
border  and  target  facts  and  to  modify  unit 
location.  Further,  special  features,  such  as  a  the 
ability  to  generate  a  range  fan  for  any  weapon 
within  a  unit,  are  offered.  Finally,  communication 
of  proposed  unit  actions  and  movement  may  be 
sent  between  independent  IDS  nodes.  This 
“conversational  graphics"  capability  is  provided 
through  the  use  of  the  "whatjf"  meta-fact  types 
(as  pieviously  described)  that  refer  to  existing 
facts  for  the  discussing  of  potential  or  required 
unit  location  change,  it  is  hoped  that  the 
communication  provided  by  WMAP  will  avert 
duplications  of  effort  in  the  planning  of  future 
coordinated  unit  actions. 

The  Fire  Plan  application  supports  the 
display  and  creation  of  dynamic  unit  operations 
orders  using  the  mission  fact  type  that  contains 
much  of  the  information  normally  associated  with 
an  opeiat.ons  order  (see  Figure  5)  Currently, 

Fire  Plan  is  being  developed  to  enable.  During  the 
development  of  the  mission  fact  definition,  many 
postulated  mission  concepts  were  expressed  in 
terms  of  already  existent  fact  definitions.  For 
example,  a  unit  mission  objective  can  be 
expressed  as  a  line  fact  (or  a  series  of  line  facts) 
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WORKING  MAP  ORGANIZATIONAL  CHART 


FIGURE  5.  Fire  Plan  Application  Uses  Existing  Applications 


on  a  map  while  the  mission  task  organization 
could  be  compiled  as  a  list  of  unit  facts.  As  a 
result  of  the  developed  mission  fact,  OPORD 
generation  and  presentation  by  Fire  Plan  became 
dependent  upon  both  the  ORGCHART  and 
Working  Map  applications.  In  order  to  facilitate  the 
compilation  of  included  information  within  the 
scope  of  a  unit  mission,  the  development  of  an 
inter-application  communication  system  became 
necessary.  A  new  meta-fact  type,  called  a 
comma  fact,  is  used  to  exchange  fact  IDs 
between  application  programs.  Much  of  the 
information  required  to  build  and  display  an 
operations  order  is  created  and  manipulated 
using  the  ORGCHART  and  WORKING  MAP 
applications  in  conjunction  with  commo  facts. 
However,  an  interactive  Fire  Plan  user  input  panel 
is  included  to  control  this  input  or  display  and 
record  items  such  as  the  mission  starting  and 
ending  times.  Thus,  the  Fire  Plan  application 
provides  a  common  ground  for  the  association  of 
otherwise  disjoint  information  generated  by  both 
other  applications  and  itself  during  the  creation  of 
an  OPORD. 

Standard  TCP/IP  sockets  (standard  DoD 
protocols)  serve  as  an  interface  between 
applications  and  the  factbase.  This  allows  the 


applications  to  reside  either  on  the  same  host  as 
the  factbase  or  on  a  separate  processor 
connected  by  a  reasonably  reliable  data  link 
medium  (e.g.,  a  LAN).  Although  inter-factbase 
information  exchange  compensates  for  unreliable, 
low-bandwidth  data  links  using  the  FEP, 
application  to  factbase  information  exchange  is 
designed  to  operate  most  efficiently  over  reliable, 
high  speed  links  (e.g..  a  dispersed  command  post 
using  a  LAN).  To  facilitate  this  capability,  the 
"package  protocol”  utility  was  developed  to 
handle  most  of  the  work  in  establishing  the 
factbase  interface  (TCP/IP  socket)  for  application 
program  developers.  The  "package  protocol”  is 
available  to  any  machine  supporting  the  standard 
TCP/IP  protocols  and  a  "C"  programming 
language  compiler. 

All  applications  make  extensive  use  of  of  the 
Sun  Microsystem  workstation's  graphics 
capability  for  both  display  and  input  These 
application  programs  will  be  used  together  to 
demonstiate  and  evaluate  the  aforementioned 
DFB  features  and  to  assist  the  soldier  by 
identifying  incoming  information  and  alerting  an 
operator,  extracting  current  situation  information 
from  the  factbase,  graphically  depicting  unit 
mission  and  situation  information,  insuring  that 
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appropriate  information  is  in  the  fact  base, 
controlling  the  dissemination  of  fire  support  plan 
information,  updating  the  prescribed  CAPs,  arid 
making  maximum  use  of  graphics  "tools"  and 
other  software  available  from,  the  various  SWS 
packages. 

CONCLUSION 

Through  the  careful  consideration  of  both 
military  and  computer  science  concepts,  a 
canonical  list  of  fact  primitives  is  being  derived. 
While  the  list  of  primitive  fact  types  has  changed 
throughout  the  implementation  of  this  project,  it  is 
hoped  that  every  type  of  military  concept  will 
eventually  be  represented  by  a  data  abstraction 
rather  than  text. 

The  goal  of  this  project  is  to  develop  an 


experimental  system  that  is  responsive  so  that  the 
user  will  still  be  prefer  it  during  degraded  modes 
of  operation.  At  the  fighting  echelons  of  the 
brigade  and  below,  information  distribution  is 
limited  by  the  low  bandwidth  communications 
systems  required  for  highly  variable  terrain  (e.g., 
non-line-of-sight  conditions).  Hopefully,  new 
information  distribution  technology  concepts  such 
as  the  distriouted  factbase,  capability  profiles,  the 
features  of  the  Fact  Exchange  Protocol 
(overhearing,  and  listening  silence),  and  the 
application  programs  when  combined  with 
carefully  developed  data  abstractions  of  military 
concepts  will  provide  the  capability  to  operate  in 
spite  of  severely  limited  communications.  If  not, 
the  equipment  will  be  thrown  aside  during  crisis 
situations  and  commanders  and  their  staffs  will 
continue  to  huddle  in  circles  making  figure 
drawings  in  the  dirt  when  the  battle  begins. 
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ABSTRACT 

This  paper  describes  graphics  research  that  was 
performed  to  support  and  manage  the  tactical  display 
of  an  Al  based  prototype  Command  and  Control  (C2) 
decision  aid  for  tho  staff  of  an  Army  corps 
commandor.  Graphical  data  representation, 
requirements,  common  access  techniques,  screen 
control,  and  future  areas  of  research  are  discussed. 


I  ..THE  RESEARCH.  DOMAIN 

Tho  US  Army  Communlcatlons-Elcctronlcs  Command 
at  Fort  Monmouth,  Now  Jersey,  has  been  performing 
exploratory  research  to  apply  artificial  Intelligence 
technology  to  tho  problom  of  maneuver  control 
planning  for  a  corps  commandor.  Ono  project,  called 
ARES,  consisted  of  a  group  of  coordinated  research 
efforts  In  objoct-orlented  tactical  graphics, 
man-machine  Interface,  terrain  reasoning, 
planning,  plan  recognition,  knowledge  acquisition, 
and  representation. 

BaHU?EYELQPM^T-^mQflMENI 

An  experimental  ARES  test-bod  was  constructed, 
consisting  of  a  network  of  Symbolics™  Lisp 
machines.  This  provided  a  state-of-the-art  Al 
development  environment  In  which  the  capabilities 
of  an  object-oriented  approach  could  be  explored  for 
tactical  graphics  and  decision  aiding.  In  this 
environment,  an  Icon  on  the  screen  was  ablo  to  bo 
directly  linked  to  a  database  object  In  the  Lisp 
world,  having  access  to  Its  graphical  and  reasoning 
attributes,  as  well  as  Its  functionality,  via  message 
passing. 

C*J[HEJdAHjidACHlNE..IMIERFACE 

To  the  user,  the  prototype  system  was  an  Intelligent 
plan  editor.  It  monitored  his  inputs  during  plan 
development  and  provided  critiques.  It  was  designed 
to  support  planning,  not  to  do  the  planning. 

The  prototype's  man-machine  Interface  provided  the 
following  functionalities: 


-  It  brought  system  planning  capabilities  to  the 
user. 

•  It  showed  the  state  of  the  planning  system  and 
database  to  the  user. 

•  it  allowed  the  user  to  provide  textual  and 
graphical  Input. 

-  It  pcrmltod  the  user  to  asynchronously  modify  the 
situation,  goals,  and  resources  present  In  tho 
various  knowledge  bases. 

-  It  presented  a  computer  modlated  planning 
onvlronmont  as  closo  as  possible  to  that  In  which 
con  entlonal,  manual  planning  activities  are  carried 
out. 

Additional  Intorfaco  functionality,  not  yot 
Implemented,  will  allow  the  user  to  control  tho 
display  of  Information  and  graphics  on  tho  tactical 
displays. 

The  prototype  was  configured  to  u$o  two  display 
monitors.  A  monochrome  screen  displayed  a  command 
menu  and  four  plan-editing  windows,  for  textual 
Input.  Each  window  type  was  customized  for  a 
particular  planning  function.  The  user  was  ablo  to 
use  the  command  menu  to  select  a  particular  type  of 
window  for  display.  The  second  monitor  was  a  color 
graphical  dlsplav  of  tho  battlefield  background, 
overlaid  with  symbology. 


With  regard  to  machlno  reasoning,  tho  maneuver 
control  planning  problem  was  seen  to  be  best 
expressed  In  terms  of  a  collection  of  asynchronous 
cooperating  processes.  Tho  user  himself  was 
considered  a  process.  The  processes  were  to  perform 
different  planning  tasks  and  communicate  with  each 
other  directly  through  message  passing  and 
Indirectly  through  one  or  more  shared  knowledge 
bases.  They  needed  to  work  in  parallel,  Just  like  the 
corps  command  staff.  Each  type  of  editing  window  on 
the  monochrome  display  was  associated  with  a  unique 
reasoning  processes  and  provided  the  user  Interface 
to  It. 
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For  the  reasoning  subsystem,  user  control  was 
causal.  Reasoning  was  data  driven  by  modifications  to 
the  tactical  database.  Plans  were  evaluated  as  new 
Information  arrived  or  as  old  Information  changed, 
and  other  processes  were  Invoked  or  spawned  to 
evaluate  plan  consistency. 


A..QUIPUT  AND.HEgflESENIATIOM 

The  object-oriented  environment  provided-  a 
powerful  development  tool.  Critical  display 
parameters  were  able  to  be  stored  “In  the  database 
and  referred  to,  .instead  of  being  passed  as 
"arameters.  -This  greatly  facilitated  debugging,  as 
these  attribute  values  were  easlly^accesslble.  There 
was,  however,  a  perceptable  trade-off  In 
performance,  as  the  support  environment  heavily 
relied  upon  memory  paging.  While  Ideal  for 
development,  It  appeared  that  a  conventional  or  a 
smaller,  customized  run-time  object-oriented 
environment  would  be  better  suited  for  the  rapid 
graphical  neods  of  the  battlefield. 

The  prototypo’s  color  graphical  display  required  the 
overlay  of  tactical  symbology  on  a  map  background. 
Utilizing  the  object-oriented  FlavorsT  M 
environment,  relational-type  record  structures  and 
functionalities  of  icons  wore  classified  and 
helrarclally  defined. 


After  studying  standard  Army  symbology,  a 
distinction  was  made  between  icon  shape  and 
location.  While  many  Icons  were  best  drawn  as 
bit-map  Images,  the  :  location  of  all  single  tactical 
Icons  were  represented  as  either  a  point,  a  polyline, 
a,  simple  region,  or  a  compound  region.  This  was  used 
In  the  heirarchlal  definition  to  facilitate  the  merger 
of  a  graphical  classification  of  all  icons  by  tactical 
functionality  together  with  their  classification  by 
shape.  The  functlonal-orlentad  definition  enabled  a 
smooth  Interface  between  the  Icon  and  the  reasoning 
subsytems,  as  Is  shown  In  Figures  One  and  Two. 

In  Figure  One,  one  scheme  .of  attribute  inheritance 
for  friendly  unit  Icons,  Is  depicted.  The  middle  and 
right  top-level  classes  were  used  to  provide 
graphically  related  definition  of  the  class  of  an 
artillery  unit's  Icon,  pictured  on  the  bottom.  Tho 
left-most  'parent'  class  of  this  unit  was  used  to  add 
reasoning-related  and  non-graphic  attributes  and 
functionality.  It  was  found  that  the  most  concise 
representation  resulted  when  Icon  attributes  wore 
defined  at  the  highest  practical  level  and  whon  tho 
morger  with  parent  classes  occurred  at  tho  lowest 
possible  level. 

Figure  Two  shows  a  scheme  of  functional  or 
behavioral  Inheritance.  Tho  heirarchlal  approach 
permitted  top-level  definition  of  functionality, 
common  to  a  large  set  of  Icons,  to  be  made  once, 
separating  It  from  low-lovol  functionality,  relating 
to  a  specific  class  of  Icons.  Thus,  tho  move-icon 
function  was  defined  once  for  all  Icons,  It  rolled 
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Figure  One:  Selected  Attribute  Inheritance  for  a  Tactical  Unit 
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Figure  Two:  Seeded  Functional  Inheritance  for  a  Tactical  Unit 


upon  erase  and  re-draw  functionalities,  defined  on 
an  Icon  class-specific  lower  level-  This  provided  a 
rapid  and  easy  method  of  adding  additional  Icon 
classes.  By  merging  Icon  location  type  at  the  lowest 
p*ss»oJe  level,  an  effective  type  checking  mechanism 
was  easily  Implemented. 

g.  OVERLAYS  /NP  MViJhSCqE£N-g01iS!ST£».£I 

Conventional,  manual  battlefield  graphics  and 
Interaction  was  used  as  the  design  baseline.  In  the 
battlefield,  the  commander  and  h!s  staff  do  their 
planning  on  a  large  paper  map  collage  of  the  area  of 
Interest  upon  which  one  or  more  layers  of  clear 
acetate,  or  overlays,  are  fastened.  Some  overlays  are 
prepared  beforehand  by  support  staff  to  hlllght 
areas  and  features  of  Interest.  Others  consist  of 
Icons,  sketched  by  the  planners  as  they  consider 
alternatives.  To  provide  this  functionality  In  the 
prototype,  a  virtual  overlay,  a  Lisp  object  was 
designed.  It  provided  a  grouping  mechanism  for 
associated  icon  objects  for  collective  operations  and 
was  also  used  for  attribute  and  value  inheritance.  As 
pictured  In  Figure  Three,  an  Icon  object  was  ablo  to 
be  associated  with  one  or  more  overlay  objects -and 
an  overlay  object  was  able  to  be  associated  with  ono 
or  more  map  objects.  Tactical-map  Lisp  objects 
provided  the  link  between  the  overlays  and  the 
physical  display  devices.  These  associations  provided 
a  way  of  specifying  default  output  devices. 


An  Important  Icon  attribute  was  vlslble-on-maps,  a 
list  of  lists.  If  no  process  requested  the  Icon’s 
display,  the  list  was  nil.  Otherwise,  each  sub-list 
consisted  of  the  name  of  a  map  display,  the  name  of 
the  color(s)  that  were  used  to  draw  the  Icon,  and 
the  Lisp  atom  t  or  nil.  The  latter  was  used  to 
designate  whether  the  user  requested  the  Icon's 
erasure,  for  deefufter.  Every  map  name  was  unique. 
Vlrluai  overlays,  together  with  the  icon  attribute 
vlsiblc-on-maps,  provided  an  easy  way  to  manage 
multi-screen  displays.  This  capability  was  required 
to  enable  the  user  to  simultaneously  view  an  area  of 
Interest  on  dilferent  screens,  each  screen  being 
drawn  on  a  different  map  scale.  With  icon  r  ribute 
and  display  device  specification  being  scy  ately 
represented  and  managed,  inter-screen  consistency 
was  easily  maintained. 

This  provided  a  way  of  determining  whether  an  icon 
was  already  visible  on  the  screen.  This  attrlf-  jie  was 
used  to'  minimize  calls  for  screen  update,  improving 
efficiency. 


C.  UNIFORM-DISPLAY.  FUNCTIONALITY  ACCESS 

Tho  project  was  a  group  effort,  spread  out  over  a 
year.  While  the  mechanisms  for  graphical 
functionality  were  not  immediately  needed,  the 
access  language  for  this  functionality  was  required 
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In  the  project's  early  stages.  This  translated  to  the 
definition  of  the  minimal  graphical '  functional 
requirements  for  corps  maneuver  control,  and 
logically  expressing  them  as  a  language,  the  Display 
Access  Language. 


Five  classes  of  functionality  for  Icons  and  overlays 
were  Identified  In  the  Display  Access  Language, 
summarized  In  Table  One.  The  first  two,  display  and 
hillghtlng,  were  provided  for  all  processes  that  need 
to  Interact  with  the  display.  "Screen  clutter  is  a 


DISPLAY  ACCESS  LANGUAGE 

Fuct!o*s!(tv 

For  Tactical  Icons 

For  ~?.cHcal  Overlays 

Display: 

Show-Icon 

Show-Overlay-Icons 

Erase-Icon 

Erase-Overlay-Icons 

Highlight: 

Highlight-Icon 

Highlight-Overlay-lcons 

Dehlghllght-Icon 

Dehighllght-Overlay-Icons 

User  Override: 

Declutter-tcon 

Declutter-Overfay-Icons 

Restore-Icon 

Restore-Overlay-Icons 

Grouping: 

Associate-lcon-WIth-Oyerlays 

Assoclate-Overlay-WIth-lcons 

DIssoclate-lcon-From-Overlays 

DIssoclate-Overlay-From-lcons 

Clear-Ovorlay-Of-lcons 

Utility: 

Movo-Scon 

Mount-Overlay-Onto-Maps 

Remove-Overlay-From-Maps 

Table  One  :  Display  Access  Language  for  Tactical  Graphics  j 

sajcr  concern"  pj.  So  much  so  th2l  tor  tectiol 
the  transition  to  AD?- systems  depends. 
Li  part,  on  a  Viable  resolution  to  tie  clatter 
problem*  (2J.  User-override  ca  pi  bill  lies  were, 
tics,  another  vital  functional  requirement.  Orerfey 
grouping.  mentioned  above,  and  general  utilities 
added  tie  needed  functionality  to  round  cut  tie 
toolset. 

Figaro  Fear  provides  a  detailed  sample  cl  tie 
Show-Icon  function-  Using  ZeUlisp's  optional 
keyword  argument  construct  tie  user  was  able  to 
specify  arguments  Li  any  order.  Alternatively,  Lie 
user  could  emit  one  cr  all  arguments  and  use  tie 
default  values.  The  map-alu  argument  permitted  the 
caller  to  specify  the  map  that  an  Icon  Is  to  be 
displayed  on  and  the  color  with  which  the  Icon  Is 
drawn.  If  omitted,  these  crucial  argument  values 
were  Inferred  from  the  overlay  objects)  that  the 
icon  Is  associated  with,  or  from  overlay(s)  that 
were  specified  In  the  function  cali.  The 
conditional-show  argument  provided  a  mechanism 
whereby  an  Icon's  display  was  able  to  be  posponed, 
waiting  for  its  associated  overlay  to  becojse 
'mounted’  on  the  tactical  map. 

Current  resea. ch  at  the  Communication/Electronics 
Command  is  ir/estfgating  the  possibility  of  designing 
a  common  display  language  across  dissimilar  display 
systems  to  provide  a  communication  channel  for 
graphic  screen  updates. 

D. -INTERPROCESS  COOPERATION  _  AND  DISPLAY 

CONTROL 

On  the  textual  display,  declutter  was  a  minimal 
concern,  as  there  were  always  four  visible  windows. 
When  contention  arose  from  conflicting  requests  by 
reasoning  processes,  the  user  was  notified  and 
decided.  This  was  not  distractlve,  as  it  related  to  the 
reasoning  Itself,  and  provided  valuable  Insight  to  the 
user  about  how  the  system  was  processing  or  viewing 
the  problem  at  hand.  For  the  tactical  display, 
however,  screen  content  needed  to  be  kept  at  a 


minimum.  Vfhen  a  process  no  longer  required  a 
symbol  to  be  seen  ca  fee  screen.  H  needed  to  Issue  a 
request  for  Its  erasure.  This  created  potential 
conflicts,  when  unbeknown  to  this  process, 
another  process  was  retying  ca  the  Icon's  visibility 
cn  the  screen.  To  mi  si  mire  cser  overload,  an 
automated  mechanism  which  supports  Interprocess 
cooperation  and  display  control  was  needed. 

To  provide  this  control,  the  contextual  data 
associated  with  this  operation  were  stored  in  the 
icon's  visibility-reasons  attribute.  The  reasons 
contained  the  map(s)  that  the  Icon  Is  visible  cn,  the 
process(es)  that  requested  the  operation,  and 
whether  the  request  was  for  the  icon  to  be  dlspla yed 
or  whether  It  was  for  the  overlay  that  the  Icon  was 
associated  with  to  be  displayed.  The  attribute  value 
was  a  list  of  lists.  Each  sub-list  was  for  a  unique 
tactical  map  display  that  the  Icon  was  visible  on  . 
The  sub-lists  were  of  the  form  (Uap-name 
(Vis-reason)  (Vis-reason)...).  Uap  name  was  the 
name  of  a  tactical-map  object  Vis-reason  was  of  the 
form  (Ob- name  Process),  where  ob-name  was  the 
name  of  either  the  (con  or  an  overlay  object  and 
process  was  the  name  of  the  process  that  requested 
the  operation.  Every  Vis-reason  for  a  given  map  was 
unique.  This  structure  enabled  an  icon-relaled 
graphic  operation  on  a  map  to  be  made  and  identified 
to*  more  than  . one  process,  and  it  enabled  more  than 
one  overlay-related  graphical  operation  by  a  single 
process  to  be  made  and  Identified.  The  latter  could  be 
used  In  cases  when  a  given  process  had  more  than  one 
reason  for  an  Icon  to  be  seen,  in  which  case  It  could 
make  an  overlay  for  that  reason,  associate  the 
overlay  and  Icon  with  each  other,  and  have  the 
reason  utilized  fer  further  graphical  operations. 

With  display  reason  attributes,  erasure  control  for 
a  given  tactical  map  was  provided  by  enforcing  a 
rule  that  an  Icon  would  only  be  erased  If  its  display 
reason  attribute  for  that  map  was  n’l.  This  relied  on 
an  agreement  between  processes  (and  respective 
system  developers)  that  no  process  would  use 
another  process*  name  or  overlay. 


SHOW-ICON 

(Show-Icon  ICON  (&key  (map-alu  nil)  (overlays  In-overlays)  (conditional-show  t)  (caller  owner})) 

Required  Arguments  :  ICON,  Name  of  Icon  object. 

Optional  Arguments: 

Data  Typa  Default 

Map-alu  List  of  two  elements.  Fli * «.  Is  the  name  ct  a  Nil. 

map  object.  Second  Is  the  Indicator  of  icon  color. 

Overlays  List  of  nanes  of  overlay  objects.  Overlays  that  Icon  Is  associated  with. 

Conditional-show  T  or  nil.  T* 

Caller  Name  of  process.  Name  of  process  th?t  owns/created  Icon. 

Figure  Four  :  Show-Icon  function _ 
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•  «qo*st  by  proem  P  to  erase 
tea  C  which  1*  visl He  on  sap  M,  tt  the  vfe-raasoa 
(C  P)  nt  a.nember  ol  Use  suHEst  lx  U  In  the 
Icons  visibility-reasons  attribute.  teen  II  was 
removed.  If  tiers  wees  no  mors  vts-reeeons  for  K 
tee  sob-list  for  H  In  tee  Icon’s  vlslble-oo-ma  ps 
was  removed,  and  tee  Icon  was  teen  erased  from  ITs 
tespJay  screen.  A  similar  role  was  followed  for  a 
recces!  to  erase  an  overlay  teat  C  was  in.  Tbos,  a 
process  coo  Id  freely  can  for  symbology  erasers  and 
nol  conflict  with  the  display  needs  of  other 
processes. 


P^£grf»m*L  EKHauceycKT  eRcao 

Several  problems  arose  during  tee  prelect,  relating 
to  A1  and  compulse  graphics. 

Unit  symbols  frequently  overlap  on.  large  scale 
maps,  requiring  repositioning  and  offset  Indicators. 
A  mechanism  for  automated  repositioning -that  would 
be  sensitive  lo  optimal  location  and  that  would 
Insure  that  the  repositioned  Icon  would  not  cover 
another  Icon  was  a  desirable  enhancement  for  the 
prototype. 


Queries  relating  to  troop  movement  rely  on  terrain 
characteristics.  Symbols  like  ths -avenue  of' approach 
fcon,  fn  Figure  Ffve  B,  are  used  to  outline  tee 
appropriate  area  and  movement,  drawn  as  a  polygon 
In  figure  Five  A.  Given- a  digital  terrain  database,  a 
binary  coded  two-dimensional  array  can  be 
constructed  to  represent  the  query  area  with  the 
portions,  of  the  area  which  support  troop  movement. 
TTie  capability  to  efficiently  automate  the  drawing  ot 
this  loon  for  any  region.  Irregular  or  compound,  teas 
another  desirable  enhancement  for  the  prototype. 


fealty,  although  not  At,  a  compact  graphics  engine 
ttat  cocld.-tanage  a  large  number  of  bit  plane 
outlays  was  deslreabie  to  demonstrate  fielding 
capability. 


BLCOVCtUStO)/ 

This  ^effort  provided  Insight  Into  tee  applicability  of 
object-oriented  tactical  graphics.  It  provided  new 
techniques,  notably  those  Imbedded  lo  tee  Display 
Access  Language,  and  defined  areas  for  future 
research. 
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ABSTRACT 

The  construction  of  user  interfaces  for  computer- 
based  systems  is  often  one  of  the  most  troublesome  and 
costly  aspects  of  a'  system.  This  is  because  requirements 
and  functions  often  change  during  the  design,  develop¬ 
ment,  and  implementation  phases,  and  because  most  user 
interface  software  is  constructed  using  traditional  pro¬ 
gramming  techniques.  Thus,  each  time  the  user  interface 
must  be  changed,  the  software  must  be  redesigned, 
recoded,  and  retested.  This  is  very  costly  to  the  developer 
and  the  user. 

These  costs  have  motivated  the  development  of  user 
interface  software  packages  that  can  be  used  to  prototype 
user  interfaces  long  befere  embedding  them  into  a  system. 
Although  this  is  an  excellent  start,  most  of  these  packages 
fall  short  of  providing  a  true  user  interface  manager.  Most 
of  them  proride  either  a  tool  for  drawing  displays  or  an 
applications  subroutine  call,  but  not  both,  and  ’-cry  few 
are  portable,  extensible,  and  usable  by  both  programmers 
and  nonprogrammers.  /• 

This  paper  presents  the  Lockheed  User  Interface 
System  (LUIS),  a  user  interface  manager  system"  that  is 
hardware  independent,  portable,  flexible^,  extensible,  and 
usable  by  technical  programmers  and  operational,  users 
alike.  LUIS  provides  rapid  prototyping  of  user  interfaces 
that  can  be  moved  easily  into  operational  environments. 

J.  ■THEJEBPPIEM 

The  user  interface  aspect  of  a  software  system  is 
one  of  the  most  problematic  and  frequently  one  of  the 
most  costly  components  of  the  system.  This  is  due  in  part 
to  requirements  changes  during  the  typically  long  develop¬ 
ment  phase  and  due.  to  the  use  of  traditional  programming 
techniques  to  produce  the  man-machine  interface. 

In  the  past,  most  user  interfaces  have  been  created 
by  computer  programmers  using  traditional  programming 
methodologies.  Thus,  when  requi regents’  or  design 
changes  occur,  the  software  developer  must  redesign, 
recode,  and  retest  the  interface.  Further,  if  during  the.  re¬ 
view  process  the  new  interface  is  found  to  need  modifica¬ 
tion,  the  entire  process  of  design,  . code,  and  test  must  be 
repeated.  This  can  result  in  significant  costs  to  tHe  devel¬ 
oper  and  to  the  user. 


Over  the  past  few  years,  these  costs  have  motivated 
the  development  of  software  packages  to  pro-ride  the  soft¬ 
ware  developer,  and,  yes.  even  the  user,  with  tools  that 
can  be  used  to  create,  modify,  and  evaluate  user  inter¬ 
faces  long  before  they  are  embedded  into  a  system.  Al¬ 
though  there  are  several  software  packages  for  proriding 
user  interface  prototyping  on  the  market,  most  of  them  are 
hardware  dependent  or  focus  on  either  the  prototyping 
aspect  (allc*  mg  a  user  to  draw  or  create  screen  displays 
that  do  not  connect  to  an  application)  or  on  the  program¬ 
mer’s  subroutine  library  approach  to  manage  objects  on 
the  screen.  Few  of  these  packages  combine  capabilities, 
that  is,  creation  and  management  of  the  display  Even 
fewer  are  extensible,  portable,  proride  the  capability  to 
specify  control  relationships  at  the  screen-creation  level 
without  software  development,  or  proride  a  logging  fea¬ 
ture  to  assist' in  identification  of  problem  areas. 

2  THE_REQUTRHMHNT  FQR_A  USER-INTERFACE 

MANAGER 

Because  a  flexible,  portable,  broadly  usable,  and  ro¬ 
bust  method  of  constructing  user  interfaces  can  signifi¬ 
cantly  enhance  software  development  and  reduce  costs,  a 
requirement  exists  to 'develop  a  User  Interface  Manager 
(UIM).  The  UIM  must  be  able  to  do  the  following 

•  Provide  a  basic  set  of  primitives  or  building  blocks 
from  which  a  wide  variety  of  interfaces  may  be  con¬ 
structed  without  restriction  to  a  particular  style 

•  Provide  facilities  for- logging  user  interactions  such  as 
user  picks,  keystroke  entry,  and  operational  events 

•v  Separate  user  interface  management  funcuons  from 
applications  functions 

•  Contain  mechanisms  for  interprocess  communications 
that  allow  the  UIM  to  manage  applications  running  in 
separate  processes  in  a  distributed  environment 

•  Support  extensibility  to  add  new  features  and  new  ap¬ 
plications 

•  Support  portability  to  other  hardware  environments 
and  be  able  to  communicate  with  other  software  com¬ 
ponents 
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Figure  1.  LUIS  provides  basic  objects  to  allow  the  designer  the  freedom  to  customize  user  interfaces. 

Provide  direct  use  of  applications  LUIS  consists  of  a  set  of  subsystems  th 

Qtmnrtrt  „  user  interface  specification  and  management.  Ti 

Support  a  variety  of  interface  styles  tcms  facijttatc  efficient  implementation  of  i 


•  Be  usable  by  both  programmers  and  nonprogram¬ 
mers. 


Over  the  past  4  years,  the  Lockheed  Austin  Division 
has  been  developing  a  UIM  for  use  in  C3I  systems:  the 
Lockheed  User  Interface  System  (LUIS).  LUIS  Is  a  soft¬ 
ware  too!  used  in  many  applications  that  provides  rapid 
prototyping  capabilities  and' functions  as  a  mature  user 
interface  manager.  It  currently  operates  within  the  UNIX 
operating  environment^  on  both  Sun  and  Silicon  Graphics 
workstations  and  within  the  AEGIS  operating  system  on 
Apollo  workstations.  It  is  currently  being  ported  to  the 
ULTRIX  operating  system  on  the  Micro Vax  GPS  worksta¬ 
tion  using  X  Windows  and  to  the  UNIX,  operating  system 
on  the  Hewlett  Packard  330  using  X  Windows. 

The  LUIS  UIM  is  based  on  a  dialogue  model  ap¬ 
proach  to  user  interface  management.  Dialogue  models 
consist  of  basic  user  interface  objects  and  operations  that 
are  versatile  Dialogues  can  be  created  and  executed  .with¬ 
out  writing  code  in  traditional  programming  languages.  In 
a  later  phase  of  systems  implementation,  the  LUIS-crc- 
ated  prototypes  can  be  integrated  with  other  applications 
programs.  The  dialogue  approach  has  enabled  the^LUIS 
UIM  to  construct  functional  prototypes,  modify  them,  and 
move  them  into  operational  systems,  all  very  easily. 


LUIS  consists  of  a  set  of  subsystems  that  support 
user  interface  specification  and  management.  The  subsys¬ 
tems  facilitate  the  efficient  implementation  of  user  inter¬ 
faces  consisting  of  a  set  of  basic  objects  types.  These  ob¬ 
jects  provide  different  visual  and  functional  effects  in  an 
interface  system,  can  be  combined,  and  can  be  tailored  to 
Implement  a  wide  variety  of  interface  designs.  Both  the 
subsystems  and  the  objects  are  at  a  sufficiently  high  level 
that  the  LUIS  UIM  can  be  used  effectively  by  both  pro¬ 
grammers  and  nonprogrammers. 


The  LUIS  object  structure  provides  both  graphic  and 
textual  user  interfaces  and  consists  of  two  object  classes, 
visual  and  funct.jnal.  Visual  objects  provide  graphic  and 
textual  components  panels,  popups,  options,  text, 
textfields,  and  analogs  Panels  are  individual  displays  in  a 
user  interface  and  consist  of  some  combination  of  other 
objects.  Popups  are  windows  within  a  panel  m  which  re¬ 
lated  objects  can  be  grouped.  Options  represent  alterna¬ 
tives  from  which  the  usei  can  select,  either  within  a  panel 
or  a  popup.  Text  objects  arc  character  strings  that  are 
used  for  the  display  of  textual  messages  and  instructions, 
and  textfields  are  regions  in  a  popup  or  a  panel  where  the 
user  can  input  textual  data.  Analogs  allow  a  user  to  spec¬ 
ify  values  in  a  direct  and  natural  way.  Figure  1  illustrates 
the.casic  LUIS  visual  objects. 
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Figure  2.  The  LUIS  subsystems  allow  rapid  development  and  full-scale  management  of  user  interfaces 


Functional  objects  within  LUIS  control  and  allow 
the  user  to  produce  the  desired  effects  after  the  input 
event.  Five  basic  functional  objects  exist:  implications, 
states,  actions,  transfers,  and  logical  sets.  Implications  are 
lists  of  interface  operations  that  are  carried  out  in  se¬ 
quence  after  a  designated  event.  They  are  used  to  define 
the  semantic  behavior  of  LUIS  objects.  Example  implica¬ 
tions  include:  enabling/disabling  objects,  invoking  applica¬ 
tions  subroutines,  moving  the  cursor  to  designated  points 
on  the  screen,  and  saving  user  inputs.  States  enable  more 
conditionality  in  specifying  when  implications  are  exe¬ 
cuted.  These  are  logical  expressions  that  are  used  to  test 
what  the  end-user  has  selected  or  entered  in  the  user  in¬ 
terface  -Different  implications  will  be  carried  out  depend¬ 
ing  on  whether  the  expression  is  true  or  false. 

Actions  are  used  to  establish  calls  to  applications 
subroutines  from  the  user  interface.  They  describe  charac¬ 
teristics  of  the  subroutine  that  are  necessary  for  successful 
invocation  Transfers  provide  a  vehicle  for  interpanel  com¬ 
munications  in  LUIS,  transferring  the  states  of  options  and 
textfields  In  one  panel  to  options  and  textfields  in  another 
panel  Finally,  logical  sets  are  used  to  define  mutually  ex 
elusive  and/or  associative  relationships  for  groups  of  op¬ 
tions  within  a  panel. 


b, 

The  subsystems  in  LUIS  are  used  to  construct  and 
execute  the  basic  objects.  Subsystems  for  interface  or  dia¬ 
logue  specification  allow  user  interfaces  to  be  built  with¬ 
out  conventional  coding.  Figure  2  illustrates  the  LUIS  UIM 
subsystem  functional  design. 

(1)  The  Language  Parser  processes  object  defini¬ 
tions  contained  in  a  dialogue  specification  file  The  object 
definitions  are  constructed -with  an  English-like  authoring 
language  that  provides  an  abstract,  device-inuependem 
specification  of  the  user  interface.  The  goal  of  the  Parser 
is  to  generate  a  computationally  efficient  representation  of 
the  textual  object  definitions.  This  representation  is  re¬ 
ferred  to  as  a  dialogue  model  and  consists  of  binary  data 
structures  that  are  accessed  by  LUIS  to  execute  the  speci¬ 
fied  user  interface. 

(2)  The  Language  Editor  subsystem  is  used  to  spec¬ 
ify  objects  interactively  through  menus  and  single  key¬ 
stroke  commands.  The  Language  Editor  provides  an  alter¬ 
native  to  the  Language  Parser  as  a  dialogue  specification 
method  for  developers.  It  supports  direct  creation  and  ma¬ 
nipulation  of  the  functional  and  visible  objects  in  a  dia¬ 
logue  model,  a  what-you-see-is-what-you-get  approach 
It  can  be  invoked  when  the  user  interface  is  executing  to 
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enable  rapid  interface  modifications,  yet  it  allows  a  return 
to  execution  mode  to  enable  the  developer  to  assess  the 
changes  immediately.  The  Language  Editor  produces  a 
dialogue  specification  file  that  can  be  modified  and  run 
through  the  parser  subsystem.  Thus,  the  Parser  and  Editor 
subsystems  are  distinct  but  complementary  specification 
subsystems. 

(3)  The  Graphics  Editor  supports  the  interactive 
creation  and  modification  of  special  graphic  images  that 
may  be  required  in  user  interfaces.  Diagrams,  icons,  sym¬ 
bols,  and  analog  objects  (e.g.,  dials,  gauges,  histograms), 
can  be  developed  with  this  editor.  The  Graphics  Editor 
provides  a  set  of  primitive  shapes  from  which  complex 
images  can  be  built.  It  includes  facilities  for  color  and  font 
specification,  image'  resizing,  and  analog  indicator  and 
scale  definition.  Constructed  images  are  saved  and  then 
associated  with  the  dialogue  model  by  specifying  them  in 
either  the  Language  Editor  or  dialogue  specification  file. 

(4)  The  Dialogue  Manager  subsystem  executes  the 
user  interface  by  accessing  and  interpreting  the  dialogue 
model  This  subsystem  presents  the  visual  objects  in  the 
model,  processes  user  inputs,  invokes  application  func¬ 
tions,  performs  action  sequences,  and  responds  to  re¬ 
quests  from  applications  for  dialogue  services.  The  Dia¬ 
logue  Manager  can  execute  the  user  interface  with  or 
without  applications.  This  allows  dialogue  prototypes  to  be 


executed  and  evaluated  before  applications  are  developed 
After  application  development,  applications  can  be  inte¬ 
grated  with  the  user  interface  to  produce  an  operational 
system. 

gJLUlS.BunJims  EnyiEwracm 

User  interfaces  that  are  built  with  the  LUIS  UIM 
can  execute  alone  or  as  a  part  of  functional  applications 
systems.  In  both  cases,  the  LUIS  UIM  Dialogue  Manager 
waits  for  end-user  input  from  either  a  locator  device,  such 
as  a  mouse  or  trackball,  or  from  the  keyboard  When  an 
event  is  returned,  the  Dialogue  Manager  carries  out  the 
operations  (implications)  that  were  specified  for  that  event 
in  the  dialogue  model. 

The  Dialogue  Manager  controls  the  creation  and  op¬ 
eration  of  displays  and  the  integration  of  the  user  interface 
within  a  system  of  applications  Figure  3  illustrates  the 
LUIS  UIM  Run-Time  env,ronment.  User  selections  or  in¬ 
puts  can  be  designated  in  the  user  interface  design  to  in¬ 
voke  specified  applications  routines  that  carry  out  specific 
system  functions  The  D,alogue  Manager  processes  user 
inputs  and  invokes  the  necessary  applications  routines 
During  execution  of  the  applications  routines,  the  Dia¬ 
logue  Manage!  assumes  the  role  of  dialogue  server.  The 
Dialogue  Manager  passes  data  to  the  invoked  routines  and 
changes  the  user  interface  based  on  data  received  from 
the  applications. 
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Figure  4.  Different  architectures  for  defining  interaction  with  application  programs  allow  developers  to  use  the 
method  best  suited  to  the  application. 


Applications  code  can  be  interfaced  through  two  al¬ 
ternative  types  of  architectures,  allowing  the  developer/ 
user  great  flexibility  when  specifying  the  methods  for  in¬ 
terfacing  applications  programs  with  the  user  interface. 
These  alternatives  arc  based  on  the  distinction  between 
tightly  coupled  and  loosely  coupled  applications.  Develop¬ 
ers  can  use  either  architecture  or  combine  the  two  archi¬ 
tectures  to  integrate  applications  into  the  LUiS  UIM 
Figure  4  illustrates  the  functional  use  of  tightly  and  loosely 
bound  applications  programs. 

(1)  Tightly  coupled  applications  routines  are  bound 
into  the  LUIS  UIM  executable  image.  These  routines  are 
linked  with  the  other  routines  comprising  LUIS  and  exe¬ 
cute  in  the  same  process  as  LUIS. 

(2)  Loosely  .coupled  applications  routines  provide  a 
true  parallelism  of  operation-  LUIS  and  the  external  proc¬ 
ess  operate  at  the  same  time.  A  loosely  coupled  applica¬ 
tions  program  operates  in  a  separate  operating  system 
process  or  window  from  the  LUIS  process  and  executes 
concurrently  with  the  user  interface.  Data  between  LUIS 
and  the  applications  are  sent  across  the  operating  system 
interprocess  communication  channels  Applications  use  a 
subroutine  interface  to  send  and  receive  messages  across 
these  channels.  These  messages  reflect  changes  in  the 
user  interface,  obtain  the  current  status  of  specified  ob¬ 
jects  m  the  user  interface,  and  notify  LUIS  of  the  applica¬ 
tion's  status, 

i^B-RESULIS 

The  LUIS  UIM  is  being  used  very  effectively  in 
many  applications  where  a  UIM  is  the  most  efficient,  least 
costly,  and  fastest  method  of  producing  a  wide  variety  of 
user  irterfaces  for  a  system  The  LUIS  UIM  applications- 
oriented  approach  has  enabled  the  rapid-prototyping  of 


user  interfaces  and  the  easy  migration  of  those  prototypes 
into  operational  systems.  The  LUIS  UIM  contains  all  of 
the  significant  UIM  features. 

Extensibility.  Steady  growth  over  4  years  into  multi¬ 
ple  architectures,  map  graphics  control,  data  base  inter¬ 
face  and  management,  and  decision-aid  applications 

Portability.  The  LUIS  UIM  is  written  in  C  program¬ 
ming  language  and  is  based  on  proven  kernels  that  supply 
graphics  and  operating  system  level  functionality  Current 
hardware.  Sun,  Silicon  Graphics,  Apollo  Soon  MicroVax 
and  HP. 

Usability.  The  requirement  for  ease  of  use  was 
started  in  1984  and  has  continued.  Both  programmers  and 
nonprogrammers  con  use  the  LUIS  UIM  to  produce  dis¬ 
plays  and  to  manage  the  screen  Applications  program¬ 
mers  and  developers  find  it  very  quick  and  easy  to  use, 
permitting  them  to  concentrate  on  the  application,  not  the 
display. 

Performance  Evaluation.  The  LUIS  UIM  provides 
logging/timing  of  user  inputs,  thereby  permitting  evalu¬ 
ation  of  specific  user  interfaces  for  particular  applications 
and  evaluation  of  system  performance. 

Flexibility,  fhe  LUIS  UIM  supports  a  variety  of  m 
tcrfacc  styles  (menus,  forms,  graphical  interactions)  and 
input  devices  (trackball,  mouse,  touch  pane)  and  provides 
complete  two-way  communication  between  the  user  inter¬ 
face  and  applications. 

The  LUIS  UIM  has  been  used  to  support  Govern¬ 
ment  contract  work  in  the  following  areas  Command  & 
Control,  Weapons  Control,  Battle  Management,  Commu¬ 
nications.  Intelligence,  and  Human  Engineering  Evalu¬ 
ation,  Weather  Display,  and  Crisis  Management 
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Abstract 


The  concurrency  control  of  transactions  in  a.  real¬ 
time  database  must  sau'sfy  not  only  the  consistency 
constraints  of  the  database  but  also  the  timing  con¬ 
straints  of  individual  transactions.  In  this  paper,  we 
focus  on  the  issues  in  the  integration  of  a  locking 
concurrency  control  protocol  and  a  priority  driven 
real-time  scheduling  protocol.  We  present  a  real¬ 
time  concurrency  control  protocol  called  the 
rwjjrioriiy  ceiling  protocol  which  not  only 
prevents  mutual  deadlocks  but  also  tightly  bounds 
the  duration  of  blocking  due  to  concurrency  control 
in  a  centralized  database  environment.  In  addition, 
we  investigate  the  application  of  this  protocol  in  a 
distributed  environment.* 


1.  Introduction 


1.1.  Motivation 

Real-time  databases  are  used  in  a  wide  range  of  ap¬ 
plications  such  as  aircraft  tracking  and  the  monitor¬ 
ing  and  cpntrol  of  modern  manufacturing  facilities. 
In  a  real-time  database  context,  concurrency  control 
protocols  must  not  only  maintain  the  consistency 
constraints  of  the  database  but  also  satisfy  the 
timing  requirements  of  the  transactions  accessing 
the  database.  In  standard  database  applications  such 
as  banking,  one  can  lock  data  objects  and  prevent 
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from  accessing  them- in  order  to 
maintain  consis.ency.  In  a  real-time  apDlication 
S  ?  uackrng,  the  consistency  is  still  important 
bat  11  ,S  f.!so  critical  that  the  values  of  the  data  ob- 
Ifan  ob-’ecl  bcin£  traced  is  moving 
last,  very  stringent  timing  requirements  will  be 
placed  on  transactions  that  update  the  object  loca- 

remier  dleTrapt?6**  'h“C  requirements  will 
data  willbc™t  oTi“CrciSt  “  bccause  1116 

consistcr-cy  and  real-time  con¬ 
oid!?’  tbcrc  IS  nced  to  mtegrate  concuircncy 
nmrnniic  PTrot,v°  Wlth  real-time  scheduling 
'  STwi.1?  Uus  PaP“- we  focus  on  the  integrauon 
of  a  locking  .  concurrency  protocol  with  a  static 
keal-trme  scheduling  protocol,  since  both 
these  two  types  of  protocols  are  widely  used  in  prac- 
,‘CC-  A  major  source  of  problems  in  integrating  the 
two  protocols  is  the  lack  of  coordination  in  the 
concurrency  control  protocols  and 
of  real-ume  scheduling  protocols.  In  the  design  of 
many  real-ume  scheduling  protocols,  a  commonly 
used  assumpuon  is  that  tasks  are  independent, 
rontfni  c{fect  ^cckrag  due  to  concurrency 
’  l?1™’  application  of  a  real-ume  schedul- 
’”£?JSOntfnn  to  tasks  (transacuons)  may  result  in  a 
condiuon  known  as  unbounded  priority  inversion, 
*5*5  a,b!«hf  Pnom>’  task  is  blocked  by  lower 
priority  tasks  for  an  indefinite  penod  of  time.  Con- 
scmwitly,  the  management  of  task  pnoriues  durum 
task  synchromzauon  is  a  major  issue  in  our  iuves- 
UgaUon.  On  the  other  hand,  in  the  design  of  concur, 
rency-conuol  protocols,  it  is  often  assumed  that  the 
more  concurrency  offered  by  the  protocol,  the  better 
is  the  performance.  For  example,  the  two-phase 
locking  protocol  with  read  and  write  semantics  is 
considered  to  be  superior  than  two  phase  lock 
protocol  using  exclusive  locks.  However,  as  we 
will  see  in  Secuon  2.2,  a  direct  applicaUon  of  the 
read  and  write  semantic  can  actually  lead  to  poorer 
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scbedulabilityb.  The  sharing  of  a  read-lock  can  im¬ 
prove  real-time  performance  only  if-,  certain  con¬ 
ditions  regarding  the  priorities  of  readers  and  writers 
are  satisfied.  In  this  paper,  we  will  address  these 
issues  arising  from  the  integration  of  a  concurrency 
control  protocol  with  a  real-time  scheduling 
protocol. '  However,  before  we  address  the  integra¬ 
tion  issues,  we  give  a  brief  review  of  the  concur¬ 
rency  control  protocol  and  the  real-time  scheduling 
protocol  that  we  aim  to  integrate. 


1.2.  Relaled  Work 

Both  concurrency  control2' 3'  5, 6, 7, 8, 9, 10,  II.  12 
and  real-time  scheduling 

algorithms13- 14, 15>  16- 17>  18' 19,20  are  active  areas 
of  research  in  their  own  right  It  is  beyond  the  scope 
of  this  paper  to  examine  the  possible  combinations 
of  concurrency  control  and  real-time  scheduling 
protocols.  Rather,  we  limit  ourselves  to  the  integra¬ 
tion  of  two  particular  protocols:  the  rate  monotomc 
scheduling  algorithm17  and  the  modular  concur¬ 
rency  control  protocol21.  The  rate  monotomc 
scheduling  algorithm  is  a  simple  static  priority 
scheduling  algorithm  for  periodic  tasks  which  as¬ 
signs  higher  priorities  to  tasks  with  shorter  periods. 
It  was  shown  in17  that  this  is  an  optimal  static 
pnonty  scheduling  algorithm.  This  means  that  any 
task  set  which  can  be  scheduled  by  any  slauc 
priority  scheduling  algorithm  can  be  scheduled  by 
the  rate  monotonic  scheduling  algorithm.  The  rate 
monotonic  scheduling'  igbrithm-nas  been  extended 
to  address  a  wide  range  of  practical  problems,  e.g„ 
scheduling  of  apcnodic  and  periodic  tasks  , 
scheduling  of  communication  media13,  the  handling 
of  transient  processor  overloads23  and  the  use  of  bi¬ 
nary  semaphores  for  mutual  exclusion24. 

The  concurrency  control  protocol  examined  in  this 
paper  is  the  modular  concurrency  control 
protocol21.  This  protocol  offers  reduced  blocking 
time  through  the  decomposition  of  the  database  and 
the  transactions.  The  decomposition  approach  used 
in21  has  two  aspects.  First,  data  objects  in  the 
database  are  decomposed  into  disjoint  sets  called 
atomic  data  sets  (ADS).  The  consistency  of  each 
atomic  data  set  can  be  maintained  independent  of 
the  other  atomic  data  sets.  The  union  of  atomic  data 
sets  is  still  an  atomic  data  set,  and  the  conjunction 
of  the  consistency  constraints  of  all  the  atomic  data 
sets  is  assumed  to  be  equivalent  to  the  consistency 
constraints  of  the  database.  Secondly,  each  trans¬ 
action  is  decomposed  into  a  partially  ordered  set  of 
elementary  transactions  and  tasks.  The  entire  trans- 


^Schedulability  is  the  level  of  processor  utilization  si  or 
below  which  the  deadlines  of  s  -et  of  periodic  tasks  can  always 
be  met. 


action  is  called  a  compound  transaction.  The  model 
of  a  compound  transaction  in  this  theory  allows  us 
to  address  the  real-rime  schedulmg  of  a  mixture  of 
non-database  operations,  elementary  tasks,  and 
database-accessing  activities,  elementary 
transactions,  in  a  single  !ask.c  Each  of  the' elemen¬ 
tary  transactions  m  a  compound  transaction  main¬ 
tains  the  consistency  of  the  accessed  atomic  data  set 
when  executing  alone  on  the  set  m  addition,  the 
post-condition  of  the  compound  transaction  is  as¬ 
sumed  to  be  equivalent  to  the'  conjunction  of  the 
post-conditions  of  the  elementary  tasks  and  trans¬ 
actions  of  a  compound  transaction  in  any  execution 
path.  Since  compound  transaction  is  a  model  of  our 
tasks,  we  will  use  the  terms  "tasks"  and  "compound 
transactions"1 interchangeably  in  the  following  dis¬ 
cussions. 

Having  decomposed  the  database  and  the  trans¬ 
actions,  we  use  the  setwise  two  phase  lock  protocol1* 
to  make  sure  that  elementary  transactions  are  run 
senalizably  with  respect  to  each  of  the  atomic  data 
sets.  It  was  shown  in21  that  the  resulting  schedules 
form  a  supeiset  of  sets  of  serializable  schedules.  In 
addition,  these  schedules  possess  the  properties  of 
consistency,  correctness  and  modularity21.  Com¬ 
pound  transactions  and  atomic  data  sets  provide  us 
with  a  useful  model  for  real-time  database  applica¬ 
tions  such  as  tracking,  and  we  illustrate  then  ap¬ 
plications  in  the  following  example. 

Suppose  that  an  auplane  is  being  tracked  by  two 
radar  stations,  and  the  collection  of  data  objects,  0, 
and  02,  represent  the  local  views  of  these  two  sta¬ 
tions.  These  data  objects  might  include  the  current 
location,  velocity,  and  identification  of  the  airplane 
as  seen  by  the  particular  station.  Each  of  these  two 
data  objects  forms  an  atomic  data  set.  This  is  be¬ 
cause  the  consistency  constraints  associated  with 


'Although  the  ongmal  theory21  did  not  address  non-database 
operations,  non-database  opeiauons  such  as  data-processing 
tasks  can  be  viewed  as  a  special  elementary  transaction  which 
locks  some  dummy  data  object  that  no  other  transaction  will 
either  read  or  write.  Hence,  no  special  treatment  is  needed  from 
a  concurrency  control  point  of  view.  However,  from  a  real-time 
schedulmg  point  of  view,  it  is  important  to  distinguish  the  data 
processing  and  the  database  operations,  because  an  elementary 
task  will  always  be  preempted  by  the  execution  of  higher 
pnomy  tasks,  bat  an  elementary  transaction  can  block  the  ex 
ecution  of  higher  pnonty  ones-  The  blocking  of  high  pnonty 
tasks,  as  we  will  see,  has  important  implications  to  the 
schedulability  of  a  real-time  system. 

dUnder  this  protocol,  a  transaction  cannot  release  any  lock  on 
any  atomic  data  sel  until  it  has  obtained  all  the  locks  on  tin: 
atomic  dala  set.  Once  it  has  released  a  lock  on  any  atomic  data 
set,  it  cannot  c  -tain  a  new  lock  on  that  atomic  data  set.  The 
transaction  can,  however,  obtain  new  locks  on  other  atomic  dala 
sett. 


each  track- can  be  checked  and’ validated  locally. 
Each  new  scan  creates  a  new  version  of  the  data  ob¬ 
ject,  and  in  the  course  of  time,  the  values  of  Oj  and 
O’  form  two  correlated  multivariate  time  series.  The 
correlation  can  be  used  to  create  a  new  atomic  data 
set  consisting  of  the  global  track,  represented  by 
data  object  O3.  The  global  ADS,  i.e.,  the  union  G  = 
{Oj,  Oj,  O3},  represents  the(global  and  local  views 
of  the  airplane  being  tracked. 


The  notion  of  atomic  data  sets  is  especially  useful 
for  tracking  multiple  targets.  Before  the  formation 
of  the  global  atomic  data  sets,  we-need  to  correlate 
all  the  local  hacks  near  each  other  to  find  out  which 
tracks  are  associated  with  which  targets.  Once- a 
global  ADS  associated  with  a  parucular  target  is 
formed,  the  informauon  from  the  global  track  can  be 
referenced  as  a  global  context  to  aid  the  local  opera- 
uons.  In  addiuon,  the  knowledge  of  a  set  of  local 
tracks  belonging,  to  the  same  global  ADS  helps  to 
reduce  the  number  of  correlation  operah'ons.  when 
dam  from  new  scans  are  used  to  update  the  local 
tracks  of  a  global  ADS,  we  will  correlate  them  first. 
If  the  correlation  is  successful,  then  the  hypothesis 
that  all  the  ADS  s  in  G  are  tracking  the  same  target 
is  considered  to  be  valid  and  there  is  no  need  to  fur- 
with  the  tracks  from  other 
ADS  s.  This  may  substantially  reduce  the  computa- 
tion  time  required  in  tracking.'  Conceptually,  the 
“  We,  creation  of  a  global  track),  growth  - 
(adding/deleting  local  ADS ’s  in  G)  and  death  (the 
“waMated  by  new  discoveries)  of 
iatabas^^  S  m^el  dynamics  °f  a  tracking 


In  real-time  tracking  applications,  an  instance  of  a 
periodic  task  consists  of  both  non-database  opera¬ 
tions  and  database  operations.  In  fact,  the  non¬ 
database  operations  such  as  signal  processing  is  of¬ 
ten  more  time-consuming  than  reading  and  writing 
the  tracks  in  the  database.  The  structure  of  a  cora- 
pound  transaction  provides  a  useful  model  for  such 
tasks  To  illustrate  the  syntax  of  a  compound  trans¬ 
action,  consider  a  simple  distributed  tracking 
database  consisting  of  a  global  database  GD  and  a 
set  of  local  databases  LDj,  ...,  LD  .  Each  local 
database  is  associated  with  a  particular  sensor,  and 
the  data  from  the  sensor  is  processed  to  create  local 
tracks.  Compound  transaction  Global.View  reads 
the  local  tracks  of  a  global  ADS,  correlates  them 


It  11 ;  important  to  emphasize  dm  while  the  ADS'*  in  G  axe 
linked  by  correlation,  the  degree  of  correlation  is  no:  a  consis¬ 
tency  constrain*.  Consistency  constraints  arc  relationships  be- 
tween  dau  objects  dm  must  be  maintained  by  all  the  trans- 
*£*£”**  0Jhcr  b*nd,  transaction,  io  not  have  any  respon¬ 
sibility  to  maintain  the  correlation  between  the  ADS’s  in  G.  In 
fact,  if  the  initial  correlation  is  due  to  some  signal  processing 
cnor,  then  the  globe!  ADS  will  become  invalid  and  mutt  be 
eliminated,  the  socner  the  bettei. 


ana  then  updates  the  global  track  if  the  correlation  is 
successful.  The  following  is  the  pseudo-code  of  the 
transaction  Global_View. 

Compound_Transactioo  Glob*l_Vi*v; 

AtomkVariable  cbj  new  vector:  Oracle  Victor; 
BfginScrUl  ~  ~ 

BeglnPanllt! 

El  tment*ry_Tr*  reaction  R*ad  Local  ads  1 
BeglnStrUI  “ 

Lock  Lock_Track_l ; 

objjttw  vector  :»  LocaX_Track_l; 

Commit  and- Unlock  Local  Trick  1 
Ends  trial; 


Ekmenttr y_T ransaction  Local  ADS  n 

BeglnStrUI 


EndStrUl 

EndParalltl; 


Eltmtnt*ry_T*sk 

BtglnStrU! 

Corrolnt*  <Ut*  in  obi  new  vector} 

EndSerlal; 

If  corrolntion^auccosaful  Then 
Begin  ~ 

EiemtnUry_Tntosaction  Global  Vi«w 

BeglnStrUI 

Lock  Glob*l_Track; 

Dpdat*  Clebal_Track; 

Commit  and  Unlock  Global  Track; 

EndSerlal; 

End; 

Eke  Begin 

Corralata  tha  data  with  naarby 
tracka  froa  othar  ADS' a 

End; 

EndSerlal; 

This  example  illustrates  the  following  characteristic 
of  our  approach.  The  database  is  decomposed,  and 
the  compound  transaction  models  a  generalized  task 
which  has  both  database  and  non-Hatabase  opera* 
lions.  In  addition,  elementary  transactions  are  ex¬ 
ecuted  serializably  with  respect  to  the  atomic  data 
sets.'  Having  reviewed  the  protocols  that  we  want  to 
integrate,  we  now  outline  the  organization  of  the 
rest  of  the  paper.  In  Section  2.1,  we  examine  the 
priority  inversion  problem  that  must  be  solved  in  the 
development  of  a  real-time  concurrency  control 
protocol.  In  Section  2.2,  we  develop  the  read-wnte 
(rw)  priority  ceiling  protocol  for  real-time  concur¬ 
rency  control  in  the  context  of  a  centralized 


'The  atomic  vanablet  are  global  vanablec  of  a  compound 
transaction  and  arc  shared  by  the  elementary  transactions  and 
tasks. 
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database.  la  Section  23.  w  address  Css  real-time 
ccacsrcacy  control  emblem  in  a  dassgrwd  en¬ 
vironment.  Finally,  Section  3  presens  is  esnria- 
sioa. 


2.  Real-Time  Concurrency  Control  Issues 


21.  The  Priority  Inversion  Problem 
The  major  problem  as  imeeratine  a  larking  protocol 
with  2  priority  driven  sdaetfailihg  protocol  is  tbe 
problem  known  2s  priority  inversion,  which  is  said 
to  cccur  wben  2  high  pnorin-  ask  is  blocked  by 
lower  priority  lasts.  Priority  inversion  is  iaevr^We 
ia  transacuon  systems.  However,  to  achieve  a  high 
degree  of  sefcedulability  in  realtime  applications, 
we  must  overcome  the  problem  of  unccmrcllrd 
priority  inversion,  where  the  priority  inversioa  oc¬ 
curs  over  2a  indefinite  period  of  time.  This  is  il¬ 
lustrated  by  the  following  ammple. 

Example  1:  Suppose  Tj.  r->  and  tj  are  three  task* 
arranged  in  descending  order  of  priority  with  -ij 
having  tbe  highest  priority.  Assume  flat  elemcat2^' 
transacuons  T,  of  rash  r,  and  T3  of  Tj  access  the 
same  data  object  O.  Suppose  flat  at  time  r,  trans¬ 
action  T3  obtains  a  write-lock  on  O.  During  the 
execution  of  T3,  the  high  priority  task  Tj  arrives, 
preempts  T3  and  later  attempts  to  execute  Tj  to  ac¬ 
cess  the  object  O.  Task  tj  will  be  blocked.  «nce  O 
is  already  locked.  We  would  expect  flat  Tj,  being 
the  highest  priority  task,  will  be  blocked  no  longer 
than  the  tune  for  transaction  T3  to  complete  and  un¬ 
lock  O.  However,  the  duration  of  blocking  may,  in 
fact,  be  unpredictable.  This  is  because  transaction 
T3  can  be  preempted  by  the  intermedia^  priority 
task  Tj  that  does  not  need  to  access  0.  The  block¬ 
ing  of  T3,  and  hence  that  of  tj,  will  continue  until  To 
and  any  other  pending  intermediate  priority  level 
asks  are  completed. 

The  blocking  duration  m  Example  1  can  be  ar¬ 
bitrarily  long.  This  situation  can  be  partially 
remedied  if  transactions  are  not  allowed  to  be 
preempted:  however,  this  solution  is  only  ap¬ 
propriate  for  very  short  transactions,  because  n 
creates  unnecessary  blocking.  For  instance,  once  a 
long  low  priority  transacuon  starts  execution,  a  high 
priority  transacuon  not  requiring  access  to  the  same 
set  of  data  objects  may  be  needlessly  blocked^.  An 


Hhe  pnoniy  inversion  problem  was  fliu  discosicd  by 
Lampion  and  Redall25  in  the  cornea  of  monitors.  They  suggest 
that  each  monitor  hr  always  executed  at  a  pnonty  level  higher 
than  all  talks  thst  would  ever  call  the  monitor. 


obyccriTt  eff  tB I  goer  s  a  desH a  za  tcccogrire 
FssBsii*  gzrageuceai  rrenoeof  for  a  grreb*  conrc.-- 
reccy  censed  txeeaxS  a  tbs  iW' i-rVt  cm  be 
xroisi  a ad  tie  tirmricn  of  Eojmi  is  tirMr 
bounded. 

Tee  use  of  priority  iaxrtsocc  is  < —  zyxtsteh  to 
bound  the  niicay  diayt  caused  by  ~z  kcica 
protocol.  Tbe  basic  idea  rdf  prrcrlcv  inbe  tirua  -  -e 
tbs  when  a  ask  g's  tansartks  T  bixks  bife: 
pekein-  asks,  h  exeemes  is  eferaenarv  cansamkia 
21  the  mgbess  jrioeity  of  an  the  tamacfecs  Harked 
by  T.  To  ferrate  ties  idea,  fa  us  z^fy  ribs 
protocol  to  Example  i .  Sccpoie  tea:  task  CjYtrars- 
acrioci  T,  is  Mocked  by  tad:  Tj’s  transaction  T3.  Tbe 
priority  irhccinnrc  protocol  reettires  thai  act- 
action  T3  excrete  i»  transaction  aftaskij's  priority 
As  2  resell.  t2sk  r,  win  be  unable  to  preempt  trans¬ 
action  T3  and  will  itself  be  blocked.  In  oher  weeds, 
tbe  higher  priority  ask  to  crass  wait  for  the  eiemeri- 
csy  transaction  of  lower  priority  tad:  t3  to  be  ex- 
ecmed  because  transaction  T-  "inherits"  the  pricriy 
of  task'].  Oflarwise.Tj  mv  be  forced  to  wait  for 
task  Tj  to  complete.  When  task  Tj's  efemennsy 
transaction  T-  completes.  c.  raems  to  its  rwm«d 
lowest  prirahv  and  awakens  transaction  Tj  waiting 
for  the  lock  on  shared  data  object  O.  Tj.  baring  the 
highest  priority.  imm.-diatrjy  preempt  c-  rod  inns 
to  completion.  This  enables  T,  and  Tj  to  resume  in 
succession  and  run  to  completion. 

As  we  can  see,  this  simple  priority  inheritance  idea 
reduces  tire  blocking  time  of  a  higher  orioritv  task 
from  the  entire  execution  times  of  Iowa  prioriiy 
tasks  to  only  the  duration  of  lower  prioritv  tasks' 
elementary  transacuons.  However,  this  simple  idea 
is  inadequate  for  two  reasons.  First,  the  oroblem  of 
deadlock  has  not  been  solved.  Second,  tlie  blocking 
duration  for  a  task,  though  bounded,  can  still  be 
substantial,  because  a  chain  of  blocking  can  be 
framed.  For  instance,  suppose  that  task  Tj  needs  to 
sequentially  access  objects  0,  and  02.  Also  sup¬ 
pose  that  Tj  preempts  t3  which  has  already  locked 
02.  Then,  Tj  locks  object  O  j.  Transaction  T,  arrives 
at  this  instant  and  finds  that  the  objects  0,  and  02 
have  been  respectively  locked  by  the  lower  priority 
transactions  Tj  and  t3.  As  a  result.  Tj  would  be 
blocked  for  the  duration  of  two  elementaiy  trans¬ 
actions.  once  to  wait  for  Tj  to  release  0,  and  again 
to  wait  for  t3  to  release  02.  Thus,  a  chain  of  block¬ 
ing  can  be  formed. 

The  above  two  reasons  motivate  us  to  develop  the 
rw jiriority  ceiling  protocol ,  which  not  only  min¬ 
imizes  the  blocking  time  of  a  task  t  to  the  duration 
of  at  most  one  elementaiy  transaction  but  also 
prevents  the  formation  of  deadlocks.  The  under- 
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*y~±r  Jis  rfS  prraxol  is  so  ect  t^s  «"v-i  2 
C5:S==  earacoon.  lie 
«=i2c~F  a  rt=  fcs  near  trarsnxo  win  -r— -- 
ass2_ ctt  --  to  be  senary  hirher  dsn  sh- 
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g»a=ri£  —  Scooose  tin  a»  bn-.  ■' —  mvVc  -  - 
z=<3  -r,  znaoed  n  descenfeg  order  of  prioriiy.  tj 
2*5003.  there  are  two  dara  objects  O,  and  O, 
bste^og  to  the  sameADS  A.  We  rf-fw*.  ±: 
priori?  ceding  of  2  daraoopet  2S  the  priority  of  the 

pCDiSI  pnen^'  C22$2aif3Q  rw  Irv-V-  «fcj* 


M-  t-  u  ^  ui  ^  rora.u  rco:'$c2a 

^CTI^>‘.l2s^  &21  a  E23S2Ct203  Th?l  tas 
la^.  only  O  caa  irh-xiL  Suppose  the  secueoccs 
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Figure  2-1:  Sequent  of  Events  described 
in  Example  2. 

"Tbe  sequence  of  events  described  below  is  depicted 
n  Figure  2-2.  A  line  at  a  low  level  indicates  that 
the  corresponding  task  is  blocked  or  has  been 
preempted  by  a  higher  priority  task.  A  line  raised  10 


2  higher  tad  rr*r?:es  Cat  the  task  is  exeaataz 
The  ahserre  of  a  Ese  radicals  that  the  task  has  sxk 
yea  arrived  or  has  completed.  Shaded  pertbons  in- 
oa^ggaicQcftmgaggt. 

Recall  that  the  prioriri- of  transaction  Tj  is  assumed 

to  be  higher  than  that  of  cassation  T,.  Thus,  the 
priority  cerihgs  of  both  obymts  Oi  and  6,  ae  equal 
to  the  priority  of  trassaerioa  Tj.  Suppose  that  at 
time  /j.  transaction  T2  has  execumd  Iock(02).  At 
recant,  task  Tj  is  inrriated  and  preempts  trans- 
ection  Tj.  However,  when  task  Tj  tries  to  enter  its 
elementary  tsansactioa  at  time  r,  by  making  an  in¬ 
divisible  syctm  call  10  execute  LockfO,).  the 
scheduler  will  End  that  csk'  Tj’s  prioriiy  is  nos 
higher  than  the  priority  ceiling  of  locked  data  object 
Oj.  Hence,  the  scheduler  suspends  transaction  t2 
without  locking  0,.  Nota  that  Tj  is  blocked  outside 
BS  dement2ry  transaction.  Transaction  T2  now 
inherus  the  priority  of  task  Tj  and  resumes  execu¬ 
tion.  Since  t,  is  denied  the  lock  on  O,  and 
suspended  instead,  a  potential  deadlock  between  Tj 
2nd  T2  is  prevented.  If  c,  were  granted  the  lock  on 
Oj,  then  tj  would  later  wait  for  T,  to  release  the 
lock  on  02.  while  ^  would  wait  for  Tj  to  release  the 
lock  on  Oj. 

On  the  other  h2nd.  suppose  ih2t  at  time  r3.  while  T2 
is  still  in  its  transaction,  the  highest  priority  125k  Tp 
arrives  and  attempts  to  lock  data  object  Op.  Since 
the  prioriiy  of  Tp  is  higher  than  the  priority  ceiling 
of  locked  data  object  02.  task  Tp's  transaction  T0 
will  be  granted  the  lock  on  the  data  object  Op.  Task 
Tp  will  therefore  continue  and  execute  its  trans¬ 
action,  thereby  effectively  preempting  T2  in  its 
transaction  and  not  encountering  any  blocking.  At 
time  r4,  T0  completes  execution  and  T-  is 
awakened,  since  T,  is  blocked  by  T2.  T2  continues 
execution  and  locks  0,.  At  time  tj,  T2  releases  O,. 
At  lime  r6,  when  T2  releases  02,  task  c,  resumes  its 
assigned  priority.  Now,  T,  is  signaled.  Having  a 
higher  priority,  it  preempts  T2  and  completes  execu¬ 
tion.  Finally,  T2  resumes  and  completes. 

Note  that  in  the  above  example,  T0  is  never  blocked. 
Tj  was  blocked  by  the  lower  priority  task  t2  during 
the  intervals  [;2,  r3J  and  [r4,  However,  these  two 


mb.c  iaknal  [ij,  I,]  it  no!  considered  lo  be  a  blocking  inter¬ 
val  for  t,.  sinre  it  was  only  pseempled  by  ihe  kigber  priority 
usklj. 
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nervals  coresspand  to  the  deration  that  T,  needs  u> 
ltx±  the  two  data  objects  in  A.  Thus,  tbs  blocking 
duration  of  X,  is  ears]  to  tbs  duration  of  2  single 
ft*- senary  transaction  ofX2  lower  priority  trans¬ 
action  Tj.  even  though  tbs  actual  blocking  occurs 
av  er  disjoint  lists  intervals.  It  is,  indeed.  2  property 
of  tbts  proton!  that  any  task  can  bs  blocked  by  at 
most  one  lower  prioritv'clcctigtiacy  transaction  until 
it  suspends  itself  or  compleres-  This  property  is  fur¬ 
ther  iUustnued  by  tbs  following  example. 

Example  3:  Suppose  that  Aj  =  {Ojl  2nd  A,  = 
(Of).  Consider  tbs  example  where  2  chain  of 
blocking  can  be  formed.  We  assumed  that  t2sk  Xj 
needs  to  access  data  objects  0,  and  02  sequentially, 
while  x,  accesses  02,  and  T3  accesses  Oj.  Hence, 
the  priority  ceilings  of  data  objects  Oj  and  02  are 
equal  to  P,.  the  priority  of  z j.  As  before,  let  Xj  lock 
Oj  at  time  Iq.  At  time  lj.  task  u  anives  and 
preempts  z3.  However,  at  time  r2,  when  task  x2  at¬ 
tempts  to  enter  its  transaction  T2  and  lock  02,  the 
run-time  system  finds  that  the  priority  of  z2  is  not 
higher  rhan  th;  priority  ceiling  P,  of  the  locked  ob¬ 
ject  Oj.  Hence,  Xj  is  denied  the  lock  on  02  and  is 
blocked.  Transaction  T3  resumes  execution  at  z^s 
priority.  At  time  r3,  when  T3  is  still  executing,  Xj 
anives  and  preempts  T3.  At  time  t,,  z(  attempts  to 
enter  its  transaction  T,  to  lock  Oj  and  is  blocked  by 
X-  which  holds  the  lock  on  Oj.  Hence,  x3  inherits 
the  priority  of  x,.  At  time  r5,  task  x3  exits  its  trans¬ 
action,  resumes  its  original  priori!}  and  awakens  Xj. 
Task  Xj,  havuig  the  highest  priority,  preempts  x3 
and  runs  to  completion.  Next,  Xj,  which  is  no 
longer  blocked,  completes  its  execution  and  is  fol¬ 
lowed  by  z^  Again,  note  that  Xj  is  blocked  by  x3 
during  the  intervals  (r4,  r^j  which  corresponds  to  the 
single  elementary  transaction.  Also,  task  x2  is 
blocked  by  x3  during  the  disjoint  intervals  [r2,  r3] 
and  [r4,  r5]  which  also  correspond  to  the  duration  of 
task  x3's  elementary  transaction. 

22.  The  Read-Write  Priority  Ceiling 
protocol 

Having  reviewed  the  basic  concepts  of  our  ap- 
roach,  we  now  formalize  our  approach.  Before  wc 
egin  the  technical  investigation,  we  first  list  our  as¬ 
sumptions  and  state  the  notation  used.  We  assume 
that  we  have  a  set  of  loosely  coupled  uni-processors. 
In  each  processor,  there  is  a  set  of  statically  al¬ 
located  periodic  tasks.-  A  task  can  execute  in  paral¬ 
lel  on  more  than  one  processor.  For  example,  task  x 
can  update  an  ADS  and  its  replication  on  processors 


X  and  Y  in  parallel.  We  assume  that  each  stream  of 
aperiodic  tasks,  if  any,  will  be  converted  to  periodic 
activities  via  a  periodic  server  task.  For  example,  to 
handle  random  requests  from- an  operator,  we  can 
buffer  his  input  and  use  a  periodic  server  task  to 
resoend  to  Ms  reouests  periodically".  Since  tracking 
operations  consist  of  both  signal  processing  and 
database,  accessing,  we  assume  that  each  instance  of 
a  periodic  t2sk  is  an  interleaving  of  dam-processing 
code  and  database  operations  modeled  as  elemen¬ 
tary  tasks  or-  elementary  transactions  of  a  com¬ 
pound  transaction  respectively.  We  shall  ossfeme 
th2t  the  database  is  uacomposed  into  atomic  data 
sets,  and  the  setwise  two-phase  lock  protocol  is  used 
by  elementary  transactions  for  concurrency  control. 
We  assume  that  the  rate-monotoaic  algorithm  is 
used  to  asrign  a  priority  to  each  task.  This  algo¬ 
rithm  assigns  higher  priorities  to  tasks  with  shorter 
periods  and  is  ah  optimal  static  priority  algorithm 
for  periodic  tasks17.  If  two  tasks  are  ready  to  run  on 
a  processor,  the  higher  priority  task  will  run.  Equal 
pnority  tasks  are  run  in  a  FCFS  order.  We  also  as¬ 
sume  that  a  transaction  does  not  attempt  to  lock  an 
object  that  it  has  already  locked  and  thus  deadlock 
with  itself.  In  addition,  we  assume  that  in  each 
processor  the  runtime  system  will  serialize  the  ex¬ 
ecution  of  syntactically  parallel  elementary  tasks 
and  transactions.  For  example,  in  a  uni-processor  if 
a  compound  transaction  has  the  construction  { 
BeginParallel  Elemcntary_Transaction_l; 

Elcmentary_Transaction_2;  EndParailel  -  -  - ),  then 
cither  Elementary_Transaction_l  completes  before 
the  start  of  Elementary_transaction_2,  or  vice  versa. 
These  two  elementary  transactions  will,  of  course, 
execute  in  parallel,  should  they  execute  on  different 
processors.  A  task  can  suspend  itself  dunng  its  ex¬ 
ecution  of  non-database  operatiops,  e.g.  waiting  for 
I/O.  However,  self  suspension  is  not  permitted  when 
it  holds  locks  on  database  objects.  This  also  implies 
that  we  do  not  permit  a  transaction  to  lock  across 
the  network.  Wc  also  assume  that  either  multiple 
"read”  leeks  or  a  single  "write"  lock  can  be  held  on 
a  data  object 

Notation:  We  use  the  notation  jA,,  ,  Ak)  to 
denote  the  atomic  data  sets  of  database  D. 

Notation:  V/e  denote  the  given  tasks  as  an  ordered 
set  (Xj,  -  -  ■ ,  xn)  where  the  tasks  are  listed  in  des¬ 
cending  order  of  priority,  with  Xj  having  the  highest 
priority. 

Notation:  We  use  T;j  to  denote  an  elementary  trans¬ 
action  of  task  x1  that  accesses  ADS  Aj.  We  will  also 
use  the  simplified  notation  T,  when  the  identity  of 
the  ADS  is  not  important 


*F6r  an  advanced  treumenl  of  aperiodic  tasks,  reader*  are 
referred  10". 
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Notation:  We  use  the  notation  B-  to  denote  the 
priority  of  t2skT;. 


Definmon:  The  lock  on  a  data  object  can  either  be  a 
reac-IocFor  a  write-lock.  A  task  t  that  holds  a  read- 
locfc  (write-lock)  on  a  d3ta  object  0  is  said  to  have 
read-locked  (wnte-locked)  object  O.  The  vrite 
pnonry  ceiling  of  a  .  data  object  is  defined  as  the 
niehtst  pnontj-  task  that  mav  write  this  object  The 
absolve  priority  ceiling  is  defined  as  the  highest 
K°my  task  that  may  read  or  write  this  data  object 
When  a  data  .object  0  is  write-locked,  the 
nv  priority  ceiling  of  O  is  defined  to  be  equal  to  th- 
absolme  priority  ceiling  of  0.  When  a  data  object 
V  tpaa-lockcd,  the  rw_priority  ceiling  of  0  is 
defined  to  be  equal  to  the  write  priority  ceding  of  0. 


Having  stated  our  objectives  and  our  assumptions 
we  now  define  the.rw_oriority  ceiling  protocol  that 
is  used  on  each  processor. 


1-Task  T,  having  the  highest  priority 
among  the  tasks  ready  to  run;  ig  as¬ 
signed  the  processor.  Before  task  x 
enters  an  elementary  transaction  T,  it 
must  first  obtain  the  locks  on  the  data 
objects  that  it  accesses.  Suppose  that 
'  attempts  to  lock  data  object  O.  Let 
O’  be  the  data  object  with  the  highest 
rw_priority  ceiling  of  all  data  objects 
currently  locked  by  transactions  other 
than  those  of  x.  Task  x  will  be 
blocked  and  the  lock  on  an  object  0 
will  be  denied,  if  the  priority  of  task  X 
is  not  higher  than  the  rw_priority  ceil¬ 
ing  of  data  object  0  .  In  this  case,  task 
t  is  said  to  be  blocked  by  the  task 
whose  transaction  holds  the  lock  on 
0  .  If  msk  t’s  priority  is  higher  than 
the  rw_priority  ceiling  of  O’,  then  x  is 
granted  the  lock  on  Ob  When  a  task  x 
exits  its  elementary  transaction,  the 
data  objects  associated  with  the  trans¬ 
action  will  be  unlocked. 


2.  A  task  r’s  transaction  T  uses  its  as¬ 
signed  priority,  unless  it  is  in  its  trans¬ 
action  and  blocks  higher  priority 
transactions.  If  transaction  T  blocks 
higher  priority  tasks,  T  inherits  PH, 
the  highest  priority  of.  the  tasks 
blocked  by  T,  When  task  t  exits  its 


'Under  thit  condmon.  iherc  willbe  no  reod-write  confhel  on 
the  object  O,  and  we  need  not  check  if  O  hu  been  locked.  See 
the  icoo.od  rcmuklhal  follows  the  protocol  definition. 


transaction,  it  resumes  its  original 
priority.  Priority  inheritance  is  tran¬ 
sitive.  Finally,  the  operations  of 
priority  inheritance  and  of  the  resump¬ 
tion  of  original  priority  must  be  in¬ 
divisible. 

3.  When  a  task  x  does  not  attempt  to 
enter  an  elementary  transaction,  it  can 
preempt  another  task  xL  executing  at  a 
lower  priority,  inherited  or  assigned. 

—^The  objective  of  this  protocol  is  to  ensure 
£5““. elementary  transaction  is  executed  at  a 
mghCT  jmonty  level  than  the  priority  levels  which 
“2.?:  preempted  elementary  trans¬ 

actions.  When  a  task  x  write-locks  a  single  object 
htowT  rw_pnonty  ceiling  of  O  represents  the 
highest  pnonty  that  x  can  inherit  through  O  For 
exmmp  e  when  t  write-locks  O.  it  can  block  the 
highest  pnonty  task  Tjj  that  may  read  or  write  O 
and  hence  inherit  th’s  priority.  Therefore,  the 

'^P™"1)'  ceiling  of  a  write-locked  object  is 
defined  to  be  equal  to  the  absolute  priority  ceiling 

lock  on  a  data  object  0  and  let  task  ~w  be  the 

^u®5fs~PIjonty  task  that  may  request  a  write  lock 
on  0.  Task  T  can  block  xw  arid  iSerit  tJpnonTy 

„v-C,.th-e  I?/-Pncjmy  ceiling  of  a  read-locked 
data  object  is  defined  as  the  data  object’s  write 
pnonty  ceiling.  A  read-locked  object  O  can  be,  of 
course,  read-locked  again  by  a  task  x  which  has 
pnonty  higher  than  that  of  xv  However,  in  this 
case,  task  xt  has  preempted  x  and  there  is  no  block¬ 
ing. 

Remark;  Under  this  protocol,  wc  need  not  explicitly 
check  lor  the  possibility  of  rcad-write  conflicts.  For 
instance,  when  an  object  O  is  write-locked  by  a  task 

cclHnS  is  e9uaI  t0  the  highest 
pnonty  task  that  can  access  (XHcncc,  the  protocol 


Priority  task  thaT  may  wanuo 
0.  On  the  other  hand,  suppose  that  the 

<*.!<*'  Oisrcad-locked  by  ?.  Then,  th?m  Sy 

mavwrim  n  1ST,equal  10  the  highest  priority  Task  that 
may  wntc  0.  Hence,  a  task  that  attempts  to  write  0 

Will  nave  a  nnnniv  nn  hifthAv  tbnr.  _ 


V  rv—v  *“&•***  *  w  unomy  ceil- 

SecompatiWc0"  ‘°  rad‘l0c!:  °’ 

,rw-Prio.rily  ceiling  protocol,  mutual 
deadlock  of  transactions  cannot  occur  and  each  task 
can  be  blocked  by  at  most  one  elementary  trans* 
acuon  until  it  completes  or  suspends  itself.  We  shall 
now  prove  both  these  properties  of  the  rw  priority 
ceiung  protocol.  J 

Lemma  1:  Under  the  rw_priority  ceiling 
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protocol,  each  transaction  will  execute  at  a 
higher  priority  level  Uiaa  the  level  that  the 
preempted  transactions  can  inherit. 

Proof:  By  the  definition  of  the  rw_priority 
ceiling  protocol,  when  a  task  x  locks  a  set  of 
data  objects,  the  highest  priority  level  x  can 
inherit  is  equal  to  the  highest  rw_priority 
ceiling  of  the  data  objects  locked  by  x. 
Hence,  when  a  task  xH’s  priority  is  higher 
than  the  highest  rw_priority  ceiling  of  the 
data  objects  locked  by  a  transaction  T  of 
task  x,  the  transactions  of  Xjj  will  execute  at 
a  priority  that  is  higher  than  the  preempted 
transaction  T  can  inherit. 

Theorem  2:  There  is  no  mutual  deadlock 
under  the  rw_priority  ceiling  protocol. 

Proof:  Suppose  that  a  mutual  deadlock  can 
occur.  Let  the  highest  priority  of  all  the  tasks 
involved  in  the  deadlock  be  P.  Due  to  the 
transitivity  of  priority  inheritance,  all  the 
tasks  involved  in  the  deadlock  will  even¬ 
tually  inherit  the  same  highest  priority  P. 
This  contradicts  Lemma  1. 

Lemma  3:  Under  the  rw_priority  ceiling 
protocol,  until  task  X  cither  completes  its  ex¬ 
ecution  or  suspends  itself,  task  t  can  be 
blocked  at  most  once  by  a  single  elementary 
transacuon  of  a  lower  priority  task  xL,  even 
if  \  has  multiple  elementary  transactions. 

Proof:  Suppose  that  task  x  is  blocked  by  a 
lower  priority  task  xL.  By  Theorem  2,  there 
will  be  no  deadlock  and  hence  task  xL  will 
exit  its  current  transaction  at  some  instant  r,. 
Once  task  xL  exits  its  transaction  at  ume  rt, 
task  is  preempted  by  ",  Since  xL  is  no 
longer  within  a  transaction,  it  cannot  inherit 
a  higher  priority  than  its  own  priority  unless 
it  enters  another  transaction.  However,  xL 
cannot  resume  execution  until  x  completes 
or  suspends  itself.  The  Lemma  follows. 
Theorem  4:  Under  the  rw_priority  ceiling 
protocol,  a  task  x  can  be  blocked  by  at  most 
a  single  elementary  transaction  of  one  lower 
priority  task  until  cither  x  completes  its  ex¬ 
ecution  or  suspends  itself. 

Proof:  Suppose  that  x  is  blocked  by  n  lower 
priority  transactions.  By  Lemma  3,  x  must 
be  blocked  by  the  transactions  of  n  different 
lower  priority  tasks,  x, . xn,  where  the 


priority  of  Xj  is  assumed  to  be  higher  than  or 
equal  to  that  of  xi+1.  Since  a  lower  priority 
task  cannot  block  a  higher  priority  task  un¬ 
less  it  is  already  in  its  transaction,  tasks  Xj. 

_.,  x3  must  be  in  their  transactions  when  x 
arrives.  By  assumption,  x.is  blocked  by  xa 
and  xn  inherits  the  priority  of  x.  Since  x  can 
be  blocked  by  x0,  task  x's  priority  cannot  be 
higher  than  the  highest  priority  P  that  can  be 
inherited  by  xa.  On  the  other  hand,  by  lemma 
1.  task  xn.,'s  priority  is  higher  than  P.  It  fol¬ 
lows  that  task  x0.j’s  priority  is  higher  than 
that  of  task  x.  This  contradicts  the  assump¬ 
tion  that  x's  priority  is  higher  than  that  of 
tasksx, . xn. 

Corollary  5:  If  a  task  x;  suspends  itself  at 
most  k  times,  then  the  above  theorem  holds 
with  the  duration  of  blocking  equal  to  Jfc+7 
elementary  transactions. 

’Remark:  The  rw_priority  ceiling  protocol  is  selec- 
Uveiy  restrictive  on  the  sharing  of  read-locks.  The 
reason  is  that  a  direct  application  of  the  read  and 
write  semantic  can  lead  to  prolonged  durations  of 
blocking.  For  example,  suppose  that  we  have  a 
single  write  transacuon  at  the  highest  priority  level 
and  ten  lower  priority  read  transacbons.  If  we  let  ten 
transactions  concurrently  holding  read-locks  on  data 
object  O,  then  when  a'higher  priority  task  arrives 
later  and  attempts  to  write  0,  it  has  to  wait  for  all 
ten  of  these  transactions  to  complete.  That  is.  some 
forms  of  concurrency  can  lengthen  the  worst-case 
duration  of  blocking,  resulting  in  poorer 
schedulability. 

We  now  develop  a  set  of  sufficient  conditions  under 
which  a  set- of  periodic  tasks  with  hard  deadlines  at 
the  end  of  the  periods  can  be  scheduled  by  the  rate- 
monotonic  algorithm'7  when  the  rw_prionty  ceiling 
protocol  is  used.k 

We  quote  the  following  theorem  due  to  Liu  and 
Layland  which  was  proved  under  the  assumption  of 
independent  tasks,  i.e.  when  there  is  no  blocking 
due  to  data  sharing  and  synchronization. 

Theorem  6:  A  set  of  n  periodic  tasks 
scheduled  by  the  ralc-monotonic  algorithm 
can  always  meet  their  deadlines  if 


kAn  aperiodic  task  can  be  convened  to  a  penodic  task  by  the 
use  of  a  penodic  wrver  task  ard  buffering  the  amving  aperiodic 
tasks. 
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while  Cj  aad  Tj  aie.iht  execution  time,  2nd 
period  of  I2st  T-  respectively. 

Theorem  6  offers  2  sufficient  (worst -case)  condition 
that  characterizes  the  rate-monotonic  schedulability 
of  a  given  periodic  task  set.  An  exact  characteriza¬ 
tion  of  rate-monotonic  schedulability  r'' n  be  found 


When  tasks  are  independent  of  one  another'and  do 
not  access  shared  data.  Theorem  6  provides  us  .with 
the  condition  under  which  a  set  of  n  periodic  tasks 
can  be  scheduled  by  the  rate-monotonic  aleorithm.1 
Although  this  theorem  takes  into  account  the  effect 
of  a  task  being  preempted  by  higher  priority  tasks',  it 
does  not  consider  the  effect  of  blocking  caused  by 
lower  priority  tasks  upon  schedulability  analysis. 
We  now  consider  the  effect  of  blocking. 

Theorem  7:  A  lower  priority  write  trans¬ 
action  Tw  can  block  a  higher  priority  task  ~ 
with  priority  P,  if  and  only  if  Tw  may  write- 
lock  a  data  object  whose  absolute  priority 
ceiling  is  higher  than  or  equal  to  P.  A  lower 
priority  read  transaction  Tr  can  block  a 
higher  priority  task  c  with  priority  P,  if  and 
only  if  Tr  may  read-lock  a  data  object  whose 
write  priority  ceiling  is  higher  than  or  equal 
to  P. 

Proof:  It  directly  follows  from  the  defini¬ 
tions  of  the  rw_priority  ceiling  protocol. 

Let  Z  be  the  set  of  elementary  transactions  that 
could  block  task  1,  By  Theorem  4,  task  r  can  be 
blocked  for  at  most  the  duration  of  a  single  element 
in  Z  if  it  does  not  suspend  itself.  Hence  the  worst- 
case  blocking  time  for  1  is  the  duration  of  the 
longest  elementary  transaction  in  Z  when  1  does  not 
suspend  itself.  If  the  task  1  suspends  itself  k  times, 
then  the  worst-case  blocking  time  is  equal  to  the 
sum  of  the  k+1  longest  elements  in  Z.  We  denote 
this  worst-case  blocking  time  of  task  r;  as  Bj.  Note 
that  given  a  set  of  n  periodic  tasks,  Bn  -  0,  since 
there  is  no  lower  priority  task  to  block  tn. 

Theorem  6  can  now  be  generalized  in  a  straightfor¬ 
ward  fashion.  In  order  to  test  the  schedulability  of 
tj,  we  need  to  consider  both  the  preemptions  caused 
by  higher  priority  tasks  and  blocking  by  lower 
priority  tasks  along  with  T,’s  own  utilization.  The 
blocking  of  any  instance  of  r;  is  bounded  by  B  . 
Thus,  Theorem  6  becomes 


Thu  i*.  the  conditions  under  which  ill  the  instances  of  all 
the  n  tasks  will  racellheir  deadlines. 


Theorem  8:  Suppose  that  a  task  dots  not 
suspend  itself  from  initiation  to  completion. 
A  set  of  n  periodic  t2sks  using  the 
fw_priority  ceiling  protocol  can  be 
scheduled  by.  the  rate  monotonia  algorithm  if 
the  following  conditions  are  satisfied: 


VidSi'Se., 


h  % 


C.  B; 

VZ 


£  Cw-J) 


Proof:  Suppose  that  for  each  task  it  the 
equation  is  satisfied.  It  follows  that  the  equa¬ 
tion  of  Theorem  6  will  also  be  satisfied  with 
n  =  1  and  C;  replaced  by  C*  =  (C;  +  Bj).  That 
is,  in  the  absence  of  blocking,  any  instance 
of  task  ij  will  still  meet  its  deadline  even  if  it 
executes  for  (C-  +  B;)  units  of  time.  It  fol¬ 
lows  that  task  x;,  if  it  executes  for  only  Cl 
units  of  time,  can  be  delayed  by  B-t  units  of 
time  and  still  meet  its  deadline.  Hence  the 
theorem  follows. 

Remark:  The  first  /  terms  in  the  above  inequality 
constitute  the  effect  of  preemptions  from  all  higher 
priority  tasks  and  T;’s  own  execution  time,  while  B, 
of  the  last  term  represents  the  worst  case  blocking 
time  due  10  all  lower  priority  tasks  for  one  instance 
of  task 

Corollary  9:  A  set  of  n  periodic  tasks  using 
the  rw_priority  ceiling  protocol  can  be 
scheduled  by  the  rate  monotonic  algorithm  if 
the  following  condition  is  satisfied: 

ci  c„  B,  B  . 

_+•  •  •  '  . . ,  ,jri)Sr.(2l/-_l) 

J1  •'»  T1  r»-l 


Proof  Since  n(21/"-l)£i'(21/,-l)  and 

"““Op  ,  ~)  J,  if  this  equation 

1 

holds  then  all  the  equations  in  Theorem  8 
also  hold. 


23.  Distributed  Database  Issues 
In  this  section,  we  investigate  the  use  of  rw_pnonty 
ceiling  protocol  as  a  basis  for  real-time  concurrency 
control  in  a  distributed  environment.  While  a  lock¬ 
ing  protocol  is  still  an  efficient  method  to  ensure 
consistency  within  a  node,  holding  locks  across  the 
network  is  unattractive.  Owing  to  communication 
delay,  locking  across  the  network  will  only  force  the 
local  copy  to  be  as  outdated  as  Ihe  remote  copies 
and  this  is  counter-productive  for  real-time  applica¬ 
tions  such  as  tracking.  It  is  better  to  have  an  ud-,o- 
date  local  copy  and  let  the  remote  copies  be  hiitori- 
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cal  versions.  That  is,  we  will  adopt  a  multiple  ver- 
sjct  approach  for  -eoncurrcnev  -control "lor  dis¬ 
tributed  data  objects.  The  priority,  driven  and  lock- 
roe  based  concurrency  control  protocol  will  be  used 
within  each  node  in  the  the  network.  In  addition,  we 
assume  2  sincle  writer  and  multiple  readers  model 
for  distributed  data  objects.  This  is  a  simple  model 
Ih2t  effectively  models  applications  such  as  dis*- 
tnbuied  tracking  in  which  each  radir  station  prain- 
tarns  its  view  and  makes  it  available  to  other  nodes 
in  the  network.  The  extension  to  multiple  writers  is 
presented  at  the  end  of  this  section.  c 

In  a  distributed  database  environment,  an  atomic 
data  set  is  a  logical  unit  of  data  objects  for  distribu¬ 
tion,  because  it  represents  a  logically  consistent' 
view.  An  elementary  transaction  operating  upon  an 
ADS  represents  an  atomic  unit  of  operation  for  con¬ 
current  execution.  For  example,  a  global  ADS  G  can 
be  the  union  of  many  local  track  AjDS’s  and  a  global 
uack  ADS.  Each  ADS  in  the  union  can  reside  on  a 
different  computer;  To  address  the  problem  of 
reliability,  we, can  replicate  an  atomic  data  set  on 
another  processor.  It  may  seem  that  the  replicated 
ADS  -  and  the  original  ADS  are  part  of  a  single 
atomic  data  set,  however,  they  are  two  atomic  data 
SClS  *2i°ne  ,S  a^0we^ 10  3  historical  version  of  the 

o^er21.  For  example,  suppose  that  we  have  two 
ADS’s  residing  on  two  nodes  in  a  network.  Aj~= 
{Oj}  and  its  copy  A2  =  {02}.  If  we  insist  that  Aj 
and  A2  must  be  identical  with  respect  to  all 
references,  i.e.  Oj  =  02,  then  these  data  objects  will 
be  part  of  a  single  ADS.  The  updates  to  them  must 
appear  to  be  an  instantaneous  event  with  respect  to 
other  transactions  that  access  Oj  and  Q2.  This  can 
be  accomplished  by  using  jhc  setwise  two-phase 
*^clanS  protocol  to  perform  synchronous  updates  to 
Oj  and  02.  However,  locking  them  across  the  net¬ 
work  can  lead  to  long  durations  of  blocking,  be¬ 
cause  of  the  communication  delay.  To  satisfy  the 
requirement  of  one  being  a  historical  copy  of  the 
other,  A,  and.  A2  can  be  modeled  as  two  ADS’ s  and 
be  updated  asynchronously.  The  following  is  the 
pseudo-code  of  the  compound  transaction 
Update_Both  that  maintams:a  historical  relationship 
between  Aj  and  A2.  Note  that  there  is  no  attempt  to 

ensure  that  other  transactions  will  read  identical  ver¬ 
sions  of  Oj  and  02. 


C«^»ssrfTr»«Kii)* £&t2s; 

BfjxaParaEd  “  „ 

Efemcat*^_Trac0ctk>o  Lotil  Ceyy  i. 

BfjmSrrbl  ^  ~  — 

Lock  O. 

O.  *  »*v*ls*; 

Unlock  Oj 
EodSeriaJ; 

Elemecxary  TraasacbOD  Op<Ut*.  JUsot*  Copr  X. 
BcjlaScfW  “  - 

Lode  Oa 

Oj  •  niw 

Unlock  O" 

EodScrbI;  ,  . 

EndPanllcI;  * 


wmie  atomic  data  sets  provide  us  with  logically 
consisant.iaews  me  copes  of  the  logically  lonsts- 
tent  views  could  be,  owing  to  the.dclays  in  the  net¬ 
work,  temporally  inconsistent.  That  is,  some  of  the 
w‘w  ??  bs  out„of  date-  There  are  applications 
where  a  temporally  consistent  view  is  better  than 
just  the  latest  information  that  can  be  obtainedat 
each  site.  In  an,  application  like' tracking,  a  local 
track  would  be  updated  periodically  in  conjunction 
with  repetitive  scans.  Hence,  in  order  to  provide  a 
temporally  consistent  view  in  a  distributed  environ¬ 
ment,  we  can  utilize  the  periodicity  of  the  writer  as  a 
um^stamp  mechanism.  For  example,  given  an 
ADS  and  Its  replication,  if  for  each  data  object  there 
IS  only  a  single  periodic  writer  and  if  the  deadlines 
ol  this  single  periodic  writer  can  be  guaranteed  on 
all  the  processors,  then  all  these  data  objects  will  be 
updated  by  the  end  of  the  writer’s  period.  That  is  on 
‘ P,roc^sor’  during  period  n  the  versions’  of 
(«-!)  *«  consistent.  It  is,  of  course,  difficult 
to  observe  identical  deadlines  on  local  and’  remote 
K?fcss°rs  because  of  ihe  network  communication 
delay  Typical  y.  the  versions  of  the  data  objects  at 
remote  sites  will  lag  behind  ihe  local  sue.  Thus,  the 
problem  of  ensuring  a  temporally  consistent  view 
becomes  a  network-level  real-time  scheduling 
problem  m  which  the  time  lags  in  the-distributcd 
^  '?,nS.,arCiCOn'ro"cd-  0nce  'he  lags  are  con- 
SS&W-M  can  read  the  proper  ver- 
fil0? Sj  —e  distnhutcd  data  objects  and  ensure  that 
S??  d^S10nnaic  bas?d  HPon  temporally  consistent 
Jlf  "hen  all  the  tasks  in  each  scheduling  clement 
in  Ihe  network,  e.g.  processor  or  coramunicauon 
2'?d'u™'  ate  scheduled  by  the  ratc-monotonic  algo- 
ninm,  the  version  lag  between  two  replicated  data 
?  network  is  bounded  by  the  number  of 
scheduling  elements  on  its  update  path. 


Lemma  10;  Let  AJv)  denote  the  version  v 
of  an  ADS  residing  in  processor  i.  Suppose 
that  ADS  A!  and  its  replications,  (A,,  .... 
An),  are  distributed  in  n  processors.  Assume 
that  a  real-time  scheduling  algorithm 
guarantees  that  maxtyjij)  £  k,  1  £i,j£n. 
That  is,  the  maximal  lag  between  the  ver- 
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sioas  of  these  ADS's  at  different  processors 
is  bounded  by  k.  At  period  n,  we  have 
{Aj[n-i]  =  Ajfn-iJ  = ...  -  A n[n-iJ,  n  2  k] 
available  at  all  the  n  processors. 

Proof:-  It  mrectly  follows  from  our  single 
•’  writer  assumption  and  our  assumption  that 
the  maximal  lag  is  fc 

Remark:  Since  we  do  not  have  deadlock  within  each 
■processor  and  locks  are  not  allowed  to  be  held 
across  processor  boundaries,  we  do  not-have  the 
problem  of  distributed  deadlocks. 

To  calculate  the  version  lags,  each  scheduling  ele¬ 
ment  on  the  path  is  counted  as  a  node.  Thus,  S  two 
-  replicated  data  objects  reside  in  two  processors  con¬ 
nected  by  a  communication  medium,  we  consider 
that  there.are  three  nodes  on  the  path:  the  local 
processor,  the  communication  medium  and  the 
remote  processor.  For  example,  suppose  that  we 
have  a  set  of  processors  connected  by  a  communica¬ 
tion  bus  and  that  all  the  processors  and  communica¬ 
tion  bus  are  scheduled  by  the  rate  monotonic 
algorithm.0  Let  ADS  Aj  and  ^  reside  in  two  dif¬ 
ferent  processors  and  A,  be  at  the  home  site.  The 
ram  monotonic  algorithm  guarantees  that  Aj  can  be 
updated  by  the  end  of  the  first  period.  That  is,  we 
can  initiate  the  send  operation  no  later  than  the  start¬ 
ing  time  of  Jhs  second  period.  The  rate  monotonic 
algorithm  on  the  communication  medium  ensures 
that  the  message  will  be  delivered  to  the  receiving 
processor  by  the  end  of  the  second  period.  It  fob 
lows  that- the  "update  A2"  request  is  ready  at  the  in¬ 
itiation  time  of  the  third  period  and  can  be  carried 
out  by  the  end  of  the  third  period. 

Theorem  11:  When  all  the  tasks  in  every 
element  of  the  network  arc  schedulable  by 
the  rate-monotonic  algorithm,  the  version 
lag  between  two  replicated  ADS’s  in  a  net¬ 
work  is  bounded  by  the  number  of, nodes  on 
its  update  path. 

Proof:  Suppose  that  replicated  ADS’s  At 
and  A2  can  be  updated  within  the  same 
period.  The  version  lag  is  1,  because  ADS 
A,  can  be  .  updated  before  A2.  But  both  of 
them  will  be  updated  by  the  end  of  the  same 
period.  Thus,  the  lag  between  the  versions  of 
these  two  ADS’s  is  at  most  1.  By  introduc¬ 
ing  each  additional  full  period  delay  between 
the  updates  of  the  two  ADS’s,  the  version 
lag  increases  by  1.  That  is,  when  the  updates 


—Readers  who  are  interested  m  the  scheduling  issues  of  com* 
municsiion  media  ire  referred  to1*. 


are  separated  by  n  periods,  the  version  lag  is 
at  most  (n  +  1).  When  there  are*  nodes  on 
the  path,  Aj  will  be  updated  by  the  end  of 
the  firs  t  period  and  A2  will  be  updated  by 
the  end  of  the  period.  That  is,  they  are 
separated  by  at  most  (1-1)  periods.  It  fol¬ 
lows  that  the  version  lag  between  them  is  at 
most  (L-l)  +  l=  k. 

Corollary  12:  When  all  the  tasks  in  every 
dement  of  the  network  are  schedulable  by 
the  rate-monotonic  algorithm,  the  time  lag 
between  the  information  provided  by  two 
replicated  ADS’s  in  a  network  is  bounded  by 
the  product  of  the  writer  period  and  the  num¬ 
ber  of  nodes  on  its  update  path. 

approach  can  be  extended  to  address 
we  multiple  readers  and  writers  problem  when  a 
home  site  of  an  ADS  can  be  defined.  We  RrsTic- 

write  the  ADS  ai  the  home 
site  by  following  the  setwise  two-phase  locking 

PnovSP  Wllh  fW-Phonty  ceiling.  Hus  ensures  Ih! 
logical  consistency  of  the  ADS  at  the  home  site  Fbr 
copie?  of  1,1,5  w  can  let  the  highSt 
frequency  writer  th  to  copy  the  home  site  ADS  ver- 

fShcT.  l0.ti<Tremote  S''65-  For  example,  suppose 
that  the  latest  update  to  ADS  A  by  -rH  produces  A[51 

and  the  next  update,  of  A  by  tH  produces  A[7),  i  e 

uPda>ed  A  once  during  the 
interval  between  rH  s  updates.  In  this  case,  t  will 

Theytim7lav°S  10  the  remote  sites. 

The  time  lag  for  the  mformauon  between  the  home 
site  and  remote  sites  is  given  by  Corollary  12.  Since 
>H  wntes  all  the  sites  periodically,  a  logically  and 
temporally  consistent  view  can  be  obtained  bv  read¬ 
ing  the  properly  delayed  versions  produced  by  th. 

3.  Conclusions 

ofSrSUte5  teal-time  database  is  an  important  area 

tara  torthhlu  apph?a,ions  ranging  from  surveil- 
m!  In  f  ,  manufacturing  and  production  con- 
??„•  “  111)5  psper.  WC  have  integrated  a  modular 
concurrency  control  theory  with  a  real-time  schedul¬ 
ing  protocol  to  create  a  real-time  database  concur- 
fnnCn  c?nm!  P™tocol,  the  setwise  two-phase  lock- 
mg  protocol  with  read-write  priority  ceiling.  We 
have  shown  that  this  integrated  approach  is  free 
rerM  ?ea<lloc,c?  311(1  hountfs  the  blocking  encoun¬ 
tered  by  a  task  at  each  processor  to  at  most  one 
elementary  transaction  until  it  suspends  itself  or 
““£*•*  addition,  we  havPe  provided  a 
schedulabihly  analysis  for  a  set  of  periodic  tasks 
with  embedded  IransacUons.  Finally,  we  examined 
the  problem  of  ensuring  a  both  logically  andtem- 
f0115’515111  view  in  a  distributed  environ¬ 
ment,  where  multiple  versions  of  data  with  different 
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ages  are  provided  to  users. 

References 


1.  Eswaran,  K.  P.,  J.  N.  Gray,  R.  A.  Lone  and 
I.  L.  Traiger,  "The  Notion  of  Consistency 
and  Predicate  Lock  in  a  Database  System”, 
CACM.  Vol.  19,  No  11,  Nov.  1976. 

2.  Attar,  R.,  Bernstein  P.  A.  and  Goodman  N., 
"Site  Initialization,  Recover  and  Backup  in 
a  Distributed  Database  System”,  IEEE 
Transaction  on  Software  Engineering,  Nov., 

1984. 

3.  Been,  C.,  P.  A.  Bernstein,  N.  Goodman,  and 
M.  Y.  Lai,  “A  Concunency  Control  Theory 
for  Nested  Transactions”,  ACM  S1GACT- 
SIGOPS  Symposium  on  Principles  of  Dis¬ 
tributed  Computing,  1983. 

4.  Bernstein,  Phillip  A.,  David  W.  Shipman, 
and  Wing  S.  Wong,  "Formal  Aspects  of 
Serializability  in  Database  Concurrency 
Control",  IEEE  Transactions  on  Software 
Engineering,  1979,  pp.  pages  203  -  216. 

5.  Garcia-Molina,  H„  “Using  Semantic 
Knowledge  For  Transaction  Processing  In  A 
Distributed  Database”,  ACM  Transaction  on 
Database  Systems,  Vol  S,  No,  2,  June,  1983. 

6.  Lynch,  N.  A.,  "Multi-level  Atomicity  -  A 
New  Correctness  Criterion  for  Database 
Concurrency  Control”,  ACM  Transaction 
on  Database  Systems,  Vo's.  8,  No. 
4,  December,  1983. 

7.  Mohan,  C„  Fussell,  D„  Kcdem  Z.  M.  and 
Silberschatz  A.,  "Lock  Conversion  in  Non- 
Two-Phase  Locking  Protocols",  IEEE 
Transaction  on  Software  Engineering,  Jan., 

1985. 

8.  Mohan,  C.,  Lindsay,  B.  and  Obermarck  R., 
“Transaction  Management  in  The  R’  Dis¬ 
tributed  Database  Management  System”, 
ACM  Transactions  on  Database  Systems, 
Vol.  11,  No.  4,  Dec.  1986. 

9.  Papadimitriou,  C.  H.  and  Kanellakis,  P.  C„ 
“On  Concurrency  Control  by  Multiple 
Versions”,  ACM  Transaction  on  Database 
Systems,  Mar.,  1984. 


10.  Papadimitriou,  C.,  The  Theory  of  Database 
Concurrency  Control,  Computer  Science 
Press,  1986. 

11.  Schwarz,  P. .Transactions  on  Typed  Objects, 
PhD  dissertation.  Department  of  Computer 
Science,  Camegie-Mellon  University,  1984. 

12.  Weihl,  W.  E.  and  Liskov,  B„  “Specification 
and  Implementation  of  Resilient  Atomic 
Data  Types”,  Proceedings  of  The  SIGPLAN 
Symposium  on  Programming  Language 
Issues,  hmc,  1983. 

13.  Lehoczky,  Jr  P.  and  Sha,  L.,  "Performance 
pf  Real-Time  Bus  Scheduling  Algorithms”, 
ACM  Performance  Evaluation  Review,  Spe¬ 
cial  Issue  Vol.  14,  No.  1,  May,  1986. 

14.  Lehoczky,  J.  P.,  Sha  L  and  Strosuder,  J., 
“Enhancing  Aperiodic  Responsiveness  in  A 
Hard  Real-Time  Environment”,  IEEE  Real- 
Time  System  Symposium,  1987. 

15.  Lcinbaugh,  D.  W„  "Guaranteed  Response 
Tune  in  a  Hard  Real-Time  Environment”, 
IEEE  Transaction  on  Software 
Engineering,  Jan.  1980. 

16.  Leung,  J.  Y.  and  Merrill  M.  L.,  “A  Note  on 
Preemptive  Scheduling  of  Periodic,  Real 
Time  Tasks”,  Information  Processing 
Letters, Vol.  11  (3),  Nov.  1980,  pp.  115  - 
113. 

17.  Liu,  C.  L.  and  Layland  J.  W„  “Scheduling 
Algorithms  for  Multiprogramming  in  a  Hard 
Real  Time  Environment”,  JACM.N ol.  20 
(1),  1973,  pp.  46-61. 

18.  Mok,  A.  K.,  Fundamental  Design  Problems 
of  Distributed  Systems  For  The  Hard  Real 
Time  Environment,  PhD  dissertation, .’.I.T., 
1983. 

19.  Ramaritham  K.  and  Stankovic  J.  A., 
"Dynamic  Task  Scheduling  in  Hard  Real- 
Time  Distributed  Systems”,  IEEE 
Software,  July,  1984. 

20.  Zhao,  W„  Ramamntham,  K.  and  Stankovic, 
J.,  “Preemptive  Scheduling  Under  Time  and 
Resource  Constraints”,  IEEE  Transactions 
on  Computers,  Aug.  1987. 

21.  Sha,  L.,  Lehoczky,  J.  P.  and  Jensen  E.  D., 
“Modular  Concurrency-Control  and  Failure 


288 


Recovery”,  to  appear  in  lEEETransaction 
on  Computers ,  1988. 

22.  Lehoczky,  J.  P„  Sha,  L.  and  Ding,  Y.,  “The 
Rate  Monotonic  Scheduling  Algorithm1  — 
Exact-  Charaterizatioa*  and  Average  Case 
Behavior”,  Tech’,  report.  Department  'of 
Statistics,  Camegie-Mellon  University. 
1987. 

23.  Sha,  L.,  Lehoczky,  J.  P.  and  Rajkumar,  R„ 
“Solutions  for  Some  Practical  Problems  in 
Prioritized  Preemptive  Scheduling”,  IEEE 
Real-Time  Systems  Symposium,  1986. 

24.  Sha,  L„  Rajkumar,  R.  and  Lehoczky,  J.  P„ 
“Priority  Inheritance  Protocols:  An  Ap¬ 
proach  to  Real-Time  Synchronization", 
Technical  Report  ■  (CMU-CS-87-181), 
Department  of  Computer  Science, 
CMU,  1987. 

25.  Lampson,  B.W.,  Redell,  D.D.,  “Experience 
with  Processes  and  Monitors  in  Mesa”, 
Communications  of  the  ACAf.Vol.  23, No. 
2, February  1980,  pp.  105-1 17. 


289 


1, 


,4 


A  DISTRIBUTED  DECISION  AID 
FOR  ARMY  AVIATION* 

Kshcmendra'^f  Paul  Gilmer  L.  Blankenship* 
.Lawrence  G.  Lebow 

Frank  McLeskey*  © 
Techno-Sciences,  Inc- 
7833  Walker  Drive,  Suite  620 

Greenbelt,  MD  20770  -> 

(301)345-0375 


ABSTRACT  0 

This  paper  describes  the  Array  Aviation  Mission  Planning  Sys- 
tem(AAMPS),  a  distributed  decision  aid  developed  for  Army  Avi¬ 
ation  Operations  Management  AAMPS  is  an  application  for  the 
Array-DARPA  'Distributed  Communicatioac  and 'Processing  Ex- 
perimentfADDCOMPE)'  testbeds  The  decision  aid  wa*  developed 
with  considerable  input  from,  and  b  currently  resident  with,.the 
82nd  Aviation  Brigade  (Avj^  Bde)  St  Fort  Bragg,  INC. 

The  paper  wiU  be  divided  into  three  sections.  After  aa  overview 
of  the  paper,  we  will  discuss  the  motivation  for  the  decision  aid, 
the  development  strategy  we  are  pursuing  and  the  operational  con* 
cept  for  implementation.  Next,  we  discuss  the  technical  approach 
and  describe  the  configuration  of  the  decision  aid.  Our  technical 
approach  consists  of ’combining  constraint  directed  reasoning  with 
stochastic  scheduling  algorithms.  The  implementation  of  the  deci¬ 
sion  aid  exploits  interactive  software  and  workstation  technology, 
and  is  distributed  at  the  company,  battalion,  and  brigade  level. 
Finally,  w t  will  discuss  our  results  and  observations  to  date. 


1  Introduction 

Army  Aviation  will  play  a  major  combat  and  support  role  in  the 
future  Airland  battlefield.  Aviation  is  j  highly  capable  resource 
adding  to  the  effectiveness  of  combat  operations,  -Yet  they  are 
scarce  and  expensive,  requiring  careful  management  by  Comman¬ 
ders  Effective  Command  and  Control  (C1)  b  a  prerequisite  to 
success  on  the  AirLand  Battlefield,  but  Atmy  studies  and  reviews 
indicate  that  the  current  C*  is  less  effective  than  might  be  the 
case.  This  paper  describes  an  automated,  distributed  decision  aid 
for  Aviation  Operations  Management, 

Operations  Management  for  Army  Aviation  is  an  extremely 
complex  and  time  consuming  task,  made  even  more  so  by  the  Air- 
Laud  Battle  doctrine  The  AirLand  Battle  doctrine  requires  Atmy 
Aviation  to  be  responsive  to  a  dynamically  changing  environment 
and  to  fight  three  simultaneous  battles,  namely  deep  attack,  close 
in,  and  rear  area  In  particular.  Army  Aviation  Operations  Man¬ 
agement  requires 

•  Rapid,  accurate  aircraft  schedule  generation  in  the  face  of  a 
large  number  of  time  sensitive,  dynamically  evolving  changes 
for  aircraft  support. 

*Thi»  work  M  tupj>otl*d  In  )pwt  by  the  C«ivravuu<»i»©M  Eltdroak*  Coro- 
nvand  (CECOM1  of  the  U  S.  Army  under  Contract  No.  DAAB07  M-C-AWO. 

*Ttu»  author »»  *!(©  with  the  Diywtmnl  of  El«trk*l  Eoguveermg,  Unit  tr¬ 
uly  ©f  Maryland. CoUt**  Park,  MD  »T« 

lThi*  author  »*  with  Seiewe  Apphcattont  Int  emotion*!  Coeporelkn*  Min 
VVetiwood  Center  Drive,  Vienna,  VA  itlSO 


•  Ability  for  scheduling  cell  to  perform  vhat  t/analysb. 

•  Accurate  Command/Staff  integration  of  crew,  aircraft,  main¬ 
tenance,  mission,  and  doctrinal  data. 

•  Ability  to  understand  explicitly  the  relationship  between  schedo 
ing  const  rair  Is  and  the  ability  to  satisfy  mission 

demand. 

Scheduling  constraints  can  be  doctrinal,  like  the  one  tftirrf  rule1, 
aircraft  related,  like  scheduled  maintenance  which  is  a  function  of 
flight  time,  or  crew  related,  like  crew  endurance.  These  same  re¬ 
quirements  carry  over  to  peacetime  garrison  operations,  to  allow  for 
more  efficient  use  of  assets  and  to  maintain  readiness  and  training 
levels. 

The  current  manual  system  for  operations  management  of  avia¬ 
tion  assets  has  response  time  which  arc  not  compatible  with  the  dy¬ 
namics  of  the  AirLand  Battle.  This  manual  system  includes  posting 
and  updates  of  status/update  boards,  development  of  mission  as¬ 
signment  through  <t wMy  pencil  analysis,  detailed  mission  planning 
through  the  use  of  checklists  and  manually  developed  worksheets. 
Aviation  activities  are  inherently  distributed  and  current  doctrine 
calls  for  single  and  multiband  voice  communications  with  limited 
teletype  (data)  capability.  Aviation  units  will  in  general  have  to 
coordinate  activities  with  not  only  supported  units  but  also,  for 
example,  air  defence  artillery,  and  overflown  units,  as  well  as  inter¬ 
nally  with  maintenance  components, 

The  design  of  the  Man/Machine  Interface,  as  well  as  much  of 
the  functionality  of  the  aid,  were  driven  by  82nd  Avn  Bde  per¬ 
sonnel,  Currently,  the  decision  aid  is  resident  with  the  82nd  Avn 
Bde,  and  they  are  providing  us  with  feedback  which  will  allow  us 
to  modify  the  operational  concept  and  enhance  the  functionality  of 
the  decision  aid.  This  will  continue  through  th^  test  and  evalua¬ 
tion  phase  m  an  iterative  fashion  to  allow  the  interaction  between 
technology  and  doctrine  to  reach  a  steady  state. 

The  rest  of  this  section  provides  a  framework  and  motivation 
for  AAMPS  After  a  discussion  of  the  AirLand  Battle  Doctrine, 
the  role  of  Aviation  is  explored  and  current  methods  for  operations 
management  are  discussed.  The  Operations  Management  problem 
for  Army  Aviation  »$  then  defined,  and  its  characteristics  and  rela¬ 
tionships  are  described  The  second  part  of  this  paper  k  a  discus¬ 
sion  of  the  technical  approach.  The  approach  used  rs  a  combination 
of  constraint  directed  reasoning,  stochastic  scheduling  theory,  and 
interactive,  frame  based  software.  The  last  part  of  the  paper  is  a 
discussion  of  the  results  and  observations  to  date, 

*  To  rnuntun  «,  tontmuoui  pretence,  one  (Surd  of  the  force  Ux-utd  be  on 
$to.lion.oive  iMrd  en  route,  end  one  thud  reloading  *»>d  refuting 
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1.1  AirLand  Battle  Doctrine 

This  section  provides  a  background  discussion  of  the  Array’s  Air- 
Land  Battle  doctrine  and  its  relationship  with  Army  Aviation  Com¬ 
mand  and  Control  (C*)-  It  highlights  the  key  areas  of  the  AirLand 
Battle  doctrine  that  ate  important  to  the  fulfillment  of  Army  avia¬ 
tion  radons  on  the  battlefield.  References  on  AirLand  Battle  and 
the  ADDCOMPE  testbed  are  (IE1N83),  (LElN8t),'and  [FM  100-5] 

The  AirLand  battle  concept  of  extending  the  battlefield  in  depth 
and  time,  with  a  focus  on  three  simultaneous  battles-deep,  close-in, 
rear,  was  studied  extensively  and  formulated  into  a  written  opera¬ 
tional  concept  in  March  1981.  The  AirLand  battle  doctrine  became 
a  formal  part  of  the  Army’s  tactical  doctrine  with  the  revision  of 
the  key  Field  Manual  (FM)  100-5,  in  October  1982.  The  Field 
Manual  was  revised  again  in  May  1986,  but  maintains  the  AirLand 
Battle  as  its  Central  focus. 

The  essence  of  AirLand  battle  is  the  deep  attack  of  enemy  sec¬ 
ond  echelon  and  follow-on  forces  as  an  absolute  necessity.  Airland 
Battle  requires  the  attack  of  enemy  forces  to  their  full  depth  simul¬ 
taneously  while  defending  against  similar  enemy  action.  Second, 
deep  attack  required  tight  coordination  with  the  decisive  close-in 
battle  and  with  the  rear  battte  so  that  scarce  resources  (means) 
of  attack  would  not  be  wasted  on  targets  that  had  little  impact 
on  the  end  result.  The  concept  of  Aiiland  battle  dearly  delin¬ 
eated  the  time  aspects  of  combat  operations,  particularly  the  deep 
battle.  At  each  echelon,  times  ate  specified  for  brigade,  division, 
and  corps  commanders  to  attack  respective  elements  of  the  en¬ 
emy  second  echelon  formations.  It  should  be  noted  here  that  the 
Corps  Commander  became  the  central,  coordinating  figure  in  Aif- 
Laml  tactical  operations.  To  make  AirLand  battle  work,  the  Corps 
would  control  sensors  and  deep  attack  weapons  and  would  coor- 
dmate  closely  with  the  Ait  Force  to  develop  a  single,  integrated 
air  and  land  interdiction  campaign  to  defeat  follow-on  forces.  As 
will  be  discussed  below,  the  AirLand  battle  concepts  and  doctrine 
have  major  implications  for  the  planning  and  employment  of  Army 
aviation  assets,  ...  ,  .  , 

The  AirLand  battle  will  be  influenced  by  time,  distance,  and 
resources  on  battlefield  where  the  enemy  is  attacked  to  the  full 
depth  of  his  formations,  Operations,  including  Army  aviation,  will 
be  conducted  continuously  in  advene  weather  and  light  conditions. 
Logistical  readiness  and  sustainability  ate  critical  to  succofnlim- 
pleiuentalion  In  summary,  the  AirLand  Battlefield  has  the 
mg  characteristics,  all  of  whkh  point  out  the  need  for  effective  C 


•  Nonlinear  in  flow, 

•  Highly  dynamic. 

•  Continuous  operations 

•  Multiple  simultaneous  engagements. 


1.2  Hole  of  Aviation 

The  salient  feature  of  the  AirLand  battle  concept  is  maneuver  in 
which  Aviation  operations  play  a  major  role.  Successful  application 
of  maneuver  will  include  rapid  movement  of  forces,  speed,  surprise, 
fire  power  and  deception  to  obtain  a  significant  advantage  at  the 
decisive  point  in  the  rear,  close-in.  or  deep  battle,  ou 

Aviation  Operation*  Management  are  (PM  17-50),  and  (FM  1-100). 


Army  aviation  is  required  to  provide  both  a  vertical  and  tune  di- 
rnensma  to  AirLand  battle  operations.  Army  aviation  can  provide 
rapid  movement  of  forces,  add  speed,  time  compression  and  mo¬ 
mentum  to  U.S.  forces  military  operations."  It  can  significantly  en- 
haace  key  Airland  battle  missions.  For  example,  in  dose  combat, 
Army  aviation  can  prOcide  quick  dispersion  and  massing  of  forces, 
surprise  and  security,  and  undertake  offensive  actions  rapidly  la 
fire  support, "Army* aviation  can  detect  targets  rapidly,  provide  an 
area  fire  weapoWsystem  to  destroy  enemy  targets,  provide  aerial 
fire  support  adjustment  capability,  and  rapidly  transport  weapons 
systems,  supplies,  and  personnel  about  the  battlefield.  In  air  de¬ 
fense,  Army  aviation  missions  include  engaging  enemy  air  elements 
with  air-to-air  weapons,  acquire  and  engage  enemy  air  defense 
weapons,  provide  visual  identification  of  enemy  air  units  to  ground 
air  defense  units,  and  rapidly  transport  air  defense  personnel  and 
equipment  about  the  battlefield.  In  combat  .support.  Army  avia- 
tion  missions  are  to  move  all  types  of  support  across  the  battlefield 
using  utility,  medium  and  heavy-lift  helicopters,  and  rapidly  trans¬ 
port  ait  assault  forces  and  materiel  into  deep  attack  on  Ifai 

The  above  are  examples  of  Army  aviation  missions  on  the  Air- 
Land  battlefield.  The  key  point  is  that  Army  aviation  olTers  re¬ 
sources  that  can  be  applied  in  support  of  many  mission  areas  Army 
helicopters,  if  employed  properly,  can  lx  a  highly  effective  resource, 
adding  significantly  to  the  effectiveness  of  conducting  combat  op¬ 
erations.  Helicopter  assets  must  be  intensively  managed  and  con¬ 
trolled  by  Corps  and  Division  commander*  for  maximum  payoff 
However,  Army  stCfes  and  pviewsindicate  that  the  management, 
control,  and  overall  utilisation  of  helicopters  as  envisioned  in  Air¬ 
Land  battle  operations  is  much  less  than  optimum  and  must  be 
improved. 

1.3  Current  Methods  for  Operations  Manage¬ 
ment 

The  section  discusses  how  the  XVIII  Corps,  101st  Airborne  Division, 
82nd  Airborne  Division,  and  28th  National  Guard  Divinon  are  lm- 
ptemrnting  Airland  battle  doctrine  in  their  control  and  scheduling 
of  helicopter  assets.  .  . 

The  XVIII  Corps  Aviation  section *»  primary  activity  is  to  ta«x 
subordinate  units  to  carry  out  missions  in  both  peace  and  war 
Tasking  of  aviation  assets  in  peacetime  is  bwed  on  mission  requests 
from  Corps  units  that  are  received  in  the  aviation  office.  A  manual, 
ledger  system  is  used  to  record  all  of  the  pertinent  mission  request 
information.  Once  a  request  is  logged  in,  telephonic  procedures  ate 
used  to  task  an  aviation  unit  (e,g ,  269lh  battalion)  to  carry  out 
the  mission.  The  269th  will  accept  or  reject  the  mission  based  on 
faetoi*  such  as  aircraft  availability.  The  Corps  aviation  section  does 
not  specify  to  the  tasked  aviation  unit  such  items  ai  the  aircraft 
tail  number  or  how  the  mission  is  to  be  flown.  The  tasked  aviation 
unit  works  out  the  detail*  of  the  mission  directly  with  the  unit 
requesting  support, 

While  Corps  aviatiou  perform*  the  administrative  aviation  al¬ 
location  function  in  peacetime,  wartime  planning  on  the  «*e  of 
aviation  as*et*  would  be  accomplished  in  close  coordination  with 
the  <J-3  (operations/plans)  *taff  section.  The  result  of  tint  «w- 
dmation  would  be  the  Corps’  tasking  of  *peafic  aviation  unit*  to 
fulfill  combat/combat  support/eombat  service  support  missions. 

Airspace  management/control  is  a  problem  area  of  major  con¬ 
cern  to  the  Corps.  Mission  deconfliction  and  safety  of  Air  Force 
high  performance  aircraft  and  Army  helicopters  in  the  air  corridors 
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is  ntandaloiy  nndti  AnLand  b»iU«  doclnrs.  Sp«ifa  impacts  of 
AitLand  battle  doctrine  (e  g.,  simultaneous  battles,  activities  be- 
yond  visual  range)  on  Aimy  aviatioS  funetions/activities  have  not 
yet  been  addressed  at  the  Corps  level.  A  general  requirement  for 
aviation  logistics  activities  to  have  automated  support  s  been 
identified  by  the  Corps  to  track  repair/spare  parts  and  job  orders 
and  to  schedule  maintenance  on  aircraft.  _  t 

A  macro  view  of  Corps  aircraft  readiness  (aircraft  availability, 
by  type)  is  the  key  factor  in  helicopter  planning  activities.  Mis- 
sion  planning  takes  place  based  on  these  availability  numbers  aud 
subordinate  aviation  units  are  tasked  catty  out  specific  missions 
Aircraft  awls  arc  not  centrally  controlled/managed  in  the  18th 
Corps  aviation  section  in  peacetime  and  no  mechanism  appears  to 
exist  to  modify  this  (or  wartime  operations.  #  _ 

At  the  82nd  Combat  Aviation  Brigade  (CAB)  there  is  insa¬ 
tiable  demand  for  helicopter  support  within  the  division  during 
peacetime.  Much  of  this  demand  is  caused  by  the  requirement 
to  provide  T  day,  24  hour  per  day  support  to  the  three  maneuver 
brigades,  as  they  proceed  through  the  standard  mission,  support, 
and  training  cycles.  In  addition,  many  requests  for  aviation  sup¬ 
port  are  also  received  from  the  division  artillery  and  division  sup¬ 
port  command.  The  current  scheduling  system  is  semi-automated, 
the  G-3  establishes  user  pnonties  and  approves  unit  requests  The 
aviation  brigade  attempts  to  satisfy  all  mission*  through  aircraft 
availability  rates.  Corrective  maintenance  scheduling,  pilot/erew 
availability /shortages,  and  mdividud/unit  flight  training  require* 
menls  have  been  analysed  and  a  daily  availability  rate  has  been 
established  by  the  division  commander.. 

The  current  seuu-automated  support  used  by  the  CAP  does 
not  provide  adequate  information  to  project  aircraft  availability 
(t  g ,  8  Blackhawks/day)  with  an  acceptable  degree  of  flexibil- 
ity  and  confidence.  A  specific  need  exists  to  maximise  the  uti¬ 
lisation  of  the  Blackhawk  (UH-60).  Currently  the  2  Blackhawk 
companies  of  15  aircraft  each  cannot  effectively  support  the  divi¬ 
sion’s  integrated  training  cycle  without  major  demands  on  aircraft 
seheduling/allocation  personuel,  maintenance  workloads,  and  jug- 
glmg  crew  training/assigninents.  Because  of  peacetime  scheduling 
problems,  little  emphasis  has  been  placed  on  how  Airland  battle 
operations  missions  should  be  conducted. 

The  lOht  Division  also  focuses  primarily  on  peacetime  opera¬ 
tions.  Little  information  was  available  on  carrying  out  combat  avja- 
tion  operations  Emphasis  is  on  automating  Information  (or  main- 
tenance/readmess  purposes.  The  lQlst  Aviation  Battalion  main¬ 
tains  a  data  base  on  380  aircraft.  The  primary  use  of  the  data  base 
is  to  assist  in  schedub'ng  maintenance  and  to  update  flight  hou is 
for  each  aircraft.  The  large  number  of  aircraft  in  the  division  al 
lows  the  CAD  staff  to  allocate  mission*  to  the  aviation  battalior 
aud  the  battalions  either  perform  the  missions  or  request  that  lhe 
CAB  task  another  unit.  The  CAB  staff  either  tasks  another  unit  to 
perform  the  mission  or  directs  the  originally  tasked  unit  to  perform 
the  mission  in  heu  of  a  lower  priority  mission. 

The  101st  CAB  does  not  have  the  same  problem  as  the  82nd 
CAB  in  providing  the  required  support  to  the  division's  integrated 
training  cycle.  Less  than  20  percent  (80  of  380  aircraft)  ate  re¬ 
quired  per  day  to  support  training  requiiements  The  division  also 
has  not  participated  fully  in  field  exercises  in  which  the  range  of 
Airland  battle  operations  (i  e  ,  dose,  rear,  deep  battles)  have 
practiced.  Where  dtep  battle  exercise*  have  been  held,  detailed 
planning  was  conducted  weeks  in  advance  At  the  101st  CAB  level, 
status  of  aucraft/crew*  during  exercise*  i*  maintained  on  a  Urge, 


grease  pencil  chsrt.  Updates  are  provided  several  times  daily  dur¬ 
ing  the  exercise  by  the  aviation  battabon*. 

The  28th  National  Guard  CAB  is  orginued  under  the  Army 
of  Excellence  (AOE)  structure,  the  same  as  the  82nd  CAB.  UH-I’s 
arc  assigned  to  the  units  instead  of  Blackhawk*,  The  system  to 
tvk/ respond  to  missions  is  totally  manual  The,  G-3  of  the  divi¬ 
sion  tasks  the  28th  CAB  to  carry  out  missions  that  subordinate 
.its  have  requested  There  is  no  apparent  priority  system  to  fil¬ 
ter  the  missions  if  the  helicopter  company  cannot  perform  the 
mission  due  to  helicopter  availability,  crew  status,  or  other  reason, 
the  company  informs  the  Brigade  S-3.  The  tasking  system  also 
uses  mission  request  forms  similar  to  iho«e  used  in  the  82nd  CAB 
Communication  of  the  requests  to  the  314th  is  either  by  unsecured 
telephone  or  courier.  At  the  company  level,  mission  assignments  of 
helicopter  and  crews  for  exercise  activities  are  made  the  night  be- 
foie  the  mission  is  to  be  flown.  Problems  arise  if  ongoing  missions 
go  longer  than  expected  and  force  changes  in  helicopters  or  crews 

The  28th  CAB  has  identified  requirements  for  ADp  support 
for  operations  scheduling  and  to  track  key  C3  data  such  as  picknp 
times,  rones,  crew  status,  maintenance  status.  The  types  of  mis¬ 
sions  requested  to  be  flown,  concerns  (e  g.,  maintenance),  need  for 
responsive  planning  time  frames,  and  oveiatl  lack  of  an  efficient 
scheduling  system  are  similar,  on  a  smaller  scale,  to  that  of  the 
82nd  CAB, 


l.-l  Deficiencies 

The  most  significant  deficiencies  of  the  C3  system  are  a  listed  below 
and  are  with  respect  to  the  AitLand  Doctrine.  The  listed  deficien¬ 
cies  serve  as  a  motivation  for  AAMPS. 

•  lack  of  sufficient  emphasis  on  Army  Aviation  C*  m  the  con¬ 
duct  of  Airland  battle  training. 

•  Emphasis  bv  aviation  umn  on  peacetime  operations  and  readi¬ 
ness  rather  than  on  training  for  the  execution  of  Airland 
battle  operations, 

•  Response  limes  m  planning  and  controlling  helicopter  assets 
that  .are  inadequate  in  peacetime  and  are  projected  to  be 
seriously  deficient  in  wartime, 

•  Reliance  on  communications  and  manual  system*  that  are 
limited  m  updating  critical  mission,  helicopter  status  and 
other  key  information  required  for  responsive  helicopter  man¬ 
agement  and  scheduling. 

•  Time  response  required  to  meet  helicopter  mission  pluming 
cycles. 

•  Inability  to  deal  with  dynamically  changing  fa*  tors  such  a* 
aircraft  status,  crew  avadability/jtatus,  maintenance  re«po«te 
time.',  aircraft  flying  hour  requirements,  mission  changes,  and 
envucnmeiital  changes,  for  example. 

Annv  aviation  has  the  mission  to  support  Airland  battle  oper¬ 
ations  by  becoming  a  force  multiplied  in  two  diiuensions-ait'pace 
and  time.  Army  aviation  can  overcome  terrain  impediments  to 
support  AuLand  missions  aud  can  react  much  more  rapidly  than 
ground  forces  to  place  combat  power  at  decisive  poiuts  in  the  battle 
However,  the  complexities  of  Airland  battle  (and  Army  Aviation 
implementation  of  it)  dictate  that  a  responsive  CJ  system  is  the 
ley  to  achieving  these  goals. 
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1.5  Problem  Statement 

Oar  approach  to  the  Army  Action  management,  command,  and 
control  was  to  Identify  a  hiuiied  scope  problem  which  captured 
as  much  of  the  essential'difficulties  as  possible  while  remaining 
small  enough  to  take  to  completion  within  the  scope  of  our  effort. 
We  were  to  identify  a  line  Army  Aviation  unit  to  work  with,  and 
with  their  input  develop  a  prototype  distributed  decision  aid.  The 
aid  was  to  be  installed  and  evaluated  in  the  user  site,  with  the 
active  participation  of  the  aviation  unit  in  both  garrison  and  field 
environments. 

The  limited  scope  problem  we  chose  is  to  do  operations  man* 
aamenl  (ot  BU<kh»»k  Aviation  Compotiit.,  «nd  th.  owl  ««  *>e 
working  with  U  tho  82nd  Avn  Bdo.  SptdSMilr,  -t  h»vo  dwlopri 
a  prototype  distributed  decision  aid  fer  operations  management 
for  Companies  A  and  B,  2/82nd  Ait  Assault  Battalion.  The  de* 
tision  aid  is  called  the  Army  Aviation  Mission  Planning  System 

(AAMPS).  .  ,  . 

The  operations  management  problem  was  formulated  as  a  re¬ 
source  allocation  problem  imbedded  in  a  constraint  ditected  reason¬ 
ing  framework  The  objective  function  for  the  resource  allocation 
problem  has  two  layers  The  first  goal  was  to  select  a  flight  sched- 
ule  which  minimized  the  nnmbcr  of  unscheduled  missions.  Among 
proposed  missions,  there  exists  a  quantifiable  priority  structure. 
The  second  goal  was  to  maximise  the  readiness  (availability  over 
time)  of  the  aircraft  fleet.  A  related  goal  was  to  minimize  the  nuni- 
bet  and  total  flight  hours  used  to  met  the  mission  demand.  To  be 
acceptable,  the  schedole  ha?  to  be  within  all  of  the  constraints. 

Constraints  can  be  categorized  as  hard  or  left.  A  soft  constraint 
is  one  that  <an  be  relaxed,  up  to  some  limit,  in  order  to  produce 
a  schedule  which  is  within  all  constraints.  When  a  hard  constraint 
U  one  that  cannot  be  relaxed.  Organizational  Constraints  are  ex¬ 
amples  of  soft  constraints.  Limits  on  cargo  loads  is  an  example 
of  a  hybrid  constraint.  The  maximum  cargo  load  for  an  aircraft 
starts  at  the  maximum  safe  load,  and  is  zelaxable  up  to  the  maxi¬ 
mum  load  allowed  by  lift  capacity  of  the  aircraft.  An  example  of  a 
hard  constraint  is  the  physical  limitation  of  aircraft  to  do  only  one 
thing  at  any  instant  of  time.  Many  constraints  can  be  thought  of 
as  decision  variables  for  the  operations  management  problem,  and 
the  relaxation  of  a  constraint  can  be  interpreted  as  a  command 

The  operations  management  problem  thus  becomes  the  foltow- 


1.  Produce  a  candidate  flight  schedule,  using  the  two  tiered  ob¬ 
jective  function: 

•  Minimize  the  number  of  unscheduled  missions. 

•  Maximize  the  readiness  of  the  aircraft  flee*. 

2.  The  candidate  schedule  must  obey  all  of  the  constraints.  Mis¬ 
sions  which  could  not  be  scheduled  must  produce  a  list  of  ac¬ 
tive  constraints  which  prohibited  their  scheduling,  and  sug¬ 
gestions  as  to  which  constraints  should  '  *  relaxed  in  order  to 
schedule  the  mission. 


3.  The  flight  scheduling  officer  cau  do  what  if  analysis  using 
the  suggestions  and  his/her  own  insight.  This  process  con¬ 
tinues  in  au  iterative  fashion  until  the  flight  operations  offi¬ 
cer  reaches  a  balance  between  scheduling  constraints  and  the 
mission  demand. 


The  operations  management  problem  is  inherently  distributed. 
Mission  demand  is  generated  throughout  the  division  and  corps, 
and  status  information  fo;  the  aircraft  is  generated  in  the  avia¬ 
tion  companies  which  execute  the  missions  and  maintain  the  air¬ 
craft.  These  facts  motivated  the  initial  operational  concept  calls 
for  AAMPS,  which  is  a  functionally  distributed  implementation  of 
the  decision  aid, ,  with,  nodes  at 'company,  battalion  and  brigade 
level  At  the  brigade  level,  the  decision  aid  would  perform  a  nnv 
sion  filtering  and  unit  assignment  function.  The  mission  filtering 
function  is  basically  a  capacity  analysis  and  allows  the  brigade  to 
decide  if  it  can  support  the  mission  or  not.  Typically,  the  brigade 
has  a  planning  horizon  of  six  weeks  in  peacetime,  three  to  five  day* 
in  wartime 

At  the  battalion  level,  the  decision  aid  would  be  used  to  sched¬ 
ule  helicopters  by  tail  number.  Typically,  the  battalion  has  a  plan¬ 
ning  horizon  of  two  weeks  in  peacetime,  two  days  in  wartime.  The 
battalion  level  includes  inputs  from  the  subordinate  maintenance 
company  on  aircraft  status.  At  the  company  level,  the  decision  aid 
would  be  used  to  schedule  crews  and  to  receive  orders  in  the  form 
of  schedules.  The  companies  typically  have  a  planning  horizon  of 
one  week  in  peacetime,  one  day  in  wartime.  AH  of  the  status  infor¬ 
mation  on  crews  and  aircraft  are  generated  and  enter  the  system 
at  the  company  level.  The  same  decision  aid  would  be  used  at  all 
levels,  but  for  different  purposes.  Also,  there  is  a  single  database 
which  is  shared  among  all  users.  This  initial  operational  concept 
for  the  decision  aid  was  developed  in  conjunction  with  the  82nd 
AvnBde  and  represents  only  a  starting  point  As  stated  in  the  de¬ 
velopment  strategy,  we  expect  it  to  change  as  we  gain  experience 
with  it, 

2  Technical  Approach 

It  has  been  shown  that  the  kind  of  scheduling  activities  involved 
m  Aviation  Operations  Management  is  a  constraint  driven  pro¬ 
cess.  Our  decision  aid  is  predicated  on  this  assumption  and  is 
an  implementation  of  the  constiaint  directed  reasoning  paradigm 
Constraint  directed  reasoning  allow*  the  user  to  see  explicit  rela¬ 
tionships  between  constraints  and  unsatisfied  mission  demand  The 
user  can  then  relax  the  constraint(i)  in  question  if  the  need  (un 
satisfied  mission  demand)  so  warrants.  By  making  the  relationship 
between  constraints  and  unsatisfied  demand  explicit,  the  user  can 
make  quantitative  judgments  about  allocating  resources. 

The  scheduling  algorithms  we  used  are  based  on  stochastic  mod- 
els  for  the  availability  of  assets  and  for  potent’. demand.  They 
are  motivated  by  index  rule  approach  for  scheduling  many  jobs  on 
many  parallel  independent  machines.  We  cannot  use  the  optimal 
results  for  out  problem  because  of  the  complex  maintenance  models 
involved.  In  the  course  of  our  effort,  we  discovered  that  the  algo¬ 
rithms  we  developed,  motivated  by  stochastic  operations  research 
ideas,  were  similar  in  structure  to  the  approach  used  by  the  opera- 
tio.is  officers  we  spoke  with.  This  »  because  the  availability  models 
we  assume  ate  strongly  stochastic  in  nature,  and  tins  reflects  actual 
experience. 

2.1  Stochastic  Modeling 

As  Pmedo  (PIHE83)  correctly  points  out,  there  vs  a  fundamental 
difference  between  deterministic  and  stochastic  scheduling  prob¬ 
lems.  Often  (FORE78),  (PATT82),  (GLA280),  (GLAZ79)  stochas¬ 
tic  scheduling  problems  with  exponential  (in  continuous  lime)  ot 
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These  tasdom  piesotnesa  hart  bee*  ncotp«*M  is  the  schedul¬ 
ing  algorithm*  developed  dint;  tie  <ouk  of  tit  rJort.  It »  quite 
foilo »ale  tiat  typically  tie  latte*  «  swli  rimpkr  lias  deter- 
ministk.  algorithm*.  Sate  «e  casoot  oblais  optimal  jJtilfp.it, 
doe  to  tie  problem  complexity  asj  to  sos-qnaalitatm:  scheduling 
rales  (such  a*  priority  comnwei,  military  dot  It  toe  etc),  it  it  re 
ally  n«w  to  ioclade  veiy  cotaplex  asd  compalatiosaQj  iatesrire 
optimal  dries  mi  ntsltc  sckedaEcg  algorithms. 

2.2  Dynamic  Scheduling 

Ba»x  refrteotet  on  sequencing  are  (RAKE74 J,  [LENS77AJ,  (ELM  A7J], 
[ASH072J,  (C0FF7SJ.  [WEISS2]  Abstractly  speaking.  a  sequesc 
ing  problem  it  lie  determination  of  a  sequence  of  execution  tiroes 
for  a  tel  of  partially  ordered  operations.  Sari  partial  order  tags 
are  typically  called  precedence  relationship*.  Siaee  il  is  veil  kion 
that  the  great  majority  of  sequencing  problem*  are  NT-complete 
if  formulated  as  optimization  problems,  it  wotld.  be  fatik  !*•  al- 
lempl  the  solotion  of  a  multiple  criteria  sequencing  problem.  Tin* 
we  will  not  attempt  to  solve  a  bage  malliple  criteria  seqaencing 
optimization  problem  Rat  bet  we  are  looking  for  systematic  ways 
to  evaluate  alternative  allocation  plant,  or  to  attest  tbeir  perfor 
mance  by  a  variety  of  performance  criteria.  With  sack  a  goal  in 
mind,  it  it  indeed  ad  vantageoas  to  look  into  optimization  based  for 
mutations,  since  through  l he  appropriate  duality  relationship  these 
optimization  based  foimoUl ion*  do  provide  the  took  for  systematic 
evaluation  of  sequencing  strategies. 

Clearly  the  problem  is  combinatorial  in  nature,  A  variety  of 
techniques  exist  to  determine  feasible  sequences.  There  exists  a 
variety  of  tools  for  comparing  pairwise  feasible  sequences.  One  of 
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One  of  the  greatest  riasti^*  of  hi  pAoes,  is  Iks  hsj&iIt 
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poBcsc*  are  ako  u34  drain,  pcwol;  tuipsrsl  jAm.  Is 
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xg  proWrms  are  LETT  (Longest  Expected  Processes*  Toy)  asd 
SEPT  (Shortest  Expected  Procecnxg  Tone).  The  Utter  are  ako 
optimal  fov  the  scirdateg  problems  they  solve,  uln  a  variety  of 
perforaMsrc  seuatn. 

Initially  we-  the  kit  potty  we  ased  was  standir  to  tk  SEPT  rale. 
wWk  wiD  te»d  lo  saruie  the  total  number  of  laKoi  wssckedakd 
amion*.  Feedback  frocn  the  n*ei  made  »  change  to  a  nnul  c4 
the  LEFT  rak,  srwee  it  tarns  ont  that  larger  smwM  have  as 
irspScrt  higher  priority  than  satafirr  mwwb,  eves  if  they  have 
the  same  exp&cil  priority.  Here  tie  we  of  a  taksfon  »  naea*««ed 
as  tie  number  of  aircraft  required  times  tie  expected  fight  time 
foe  tie  ssuml 

The  second  goal  of  Ik  two  tiered  objective  function  t*  lo  max- 
iwuze  tie  readraess  <4  tie  aircraft  feet.  Readusess  i*  measured  a* 
tie  a um bn  of  mission  capable  amraft  (both  fully  asd  parUaSy; 
over  some  period  of  lime.  Tie  Army  articulate*  tin  goal  as  mu- 
rntriBg  Ike  maxnaam  iimki  o!  aircraft  out  «l  mrK'  for  a  jv-tud 
oi  time  Ose  example  of  this  t*  that  it  is  a  desrralfe  characlemlic 
for  a  feet  of  aircraft  to  be  banked  silk  respect  to  fight  boars  liS 
pha*e  maiatesascets  due  Phase  ciaintcnaace  t*  tie  periodic  mayor 
overhaul  of  tie  aircraft7  Banked  mean*  that  the  aircraft  are  evenly 
separated  is  f  ighl  time  so  tiat  tie  maxi  mum  number  of  aircraft  in 
phav  maintenance  is  tniaimued.  Tie  concept  of  banked  boars  caa 
be  expanded  to  include  aO  types  of  sciedaled  downtime,  suggest¬ 
ing  a  natural  ranking  of  aircraft  with  respect  to  tie  desirability  of 
flying.  The  ranking  is  calculated  as  follows: 


I,  All  of  lie  aircraft  carrently  araiUbfo  are  sorted  with  respect 
to  flight  hours  left  until  the  scheduled  downtime  t*  due 
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^l«alop>rae,WMbtit^te^  Abtwtoafsirorf^t 
bo ^-d fa  tV PA^i .oa^,  l|»I|yr«ml,KBllW 

i~Jaot.  maj  >1^,  .!*>  „Vd,fe5  a.  M.f^A  an^,.  s«. 
~^r.t-^,p„tiUo.  of  mtii,  <Mt^  aJaau^  b 
,  **h*^  "*  tW  “F6*  «k*!ili*.  of  Ik  rfirt  .odd  UU 
.,  ,1“ *>.  btn  fooird  nhablo  fa  aadfar 

AAVPS 10  "“!”■*>  opiiat^aJ  „po„„, 

2.4  Implementation 

2E«  ir.ir*  “rkr»w  **  *■  ^.110. « n*  add. 

t  F“‘  S“**-  Kortl  C"<*“.  ««k  Ik  ipoa- 

*p  USA  cecotb  7W  ronpitn  popaa  il  arittn  b  lb 

,.  laaioaa^TOb  oISUK'  aoilita- 

'"T-  ***  f>D  od™uto  of  Ik  «U.r  oido,,,, 

aod  eiajkf*  C-tai«oflk  SUN.  arf  b  naSal  to  k  ^  i.  J 
mlnaliToaa.^,  r^aia | aaf2attKKmd.ap.of Ikinlm 
la  «•*■,  aad  tky  aic  rxplauad  bdow. 

Tk  Hitaglb  of  Ik  ptopati  k.  m  Ik  i.Innal  daU  |W 

r^f*S*S  ■U^“  A  d'u3o>  dwriplio.  b  kjimd  Ik  nope 

of  lb,  papa,,  bat  a  dneuio.  of  Ik  d,..mic  fmalnml  of  IbH 

aISS  •  ,k'  -lot=I..S  afro.il  bow  mt. 

^Ufire  ».,  .p  a  6,1, d  61  of  lima  Uo,l  dala  dnclm.  fkl 
Uine  Mock  icpcciaau  a  bomorccoai  aclbiip,  fo,  ,„mplc  na.tki- 
pab-S  >»  a  «„oo.  o,  ki.s  ickd.lcdlo  mai.lma.ca.  Each  l,ma 
J*1  *'7.  »•*»  AAMPS  laprcianli  i.l,,. 
•all/  ai  Ik  o.mbai  of  larondi  (tom  Ja»«acp  I,  J97I.  AAMPS 
m..l  bare  a  l,W  bomo».  which  il  cut  lo  imlialiia  Iba  lima  bbwk 
“a  .a  1  >m  ‘0'i>o■  “«•  >o  lew  week,  hot  II, b  ba,Ul,a,r 
aad  coobi  b>  la.  jca„.  The  mol.lio.  of  AAMPS  b  a  «ao.d  If 
ao  acl,nl,  a  mkdolcd.  a  lima  Mock  „.„  k  aDocirf  .„j 
'iir  ™.  S'  'PflOfoiata  place  i.  Ik  bil  of  lime  Mock,  ami 
JlS  m'’‘  U  "pdlt,d  Drt»mk  l.ma  lltoclotci  „a 

.«d  lo  keep  back  of  ai.cafl  icbcd.lai,  lima  .i,r,„,  to., I, mob. 
*oa  rrsoarcr  alilbalioB. 

Figare  I  iiatmndiinp  wHkI.  i«Wpj  tht  AAMPS  command 
window,  (he  ttmebae  dapUy,  and  (he  sehednle  awbUnce  window. 

e  command  window  i«  (he  detaal(  di<pby,  and  from  i(  (he  aeer 
can  accaii  Iba  dak  atcai  (by  way  of  Ibe  ico..),  uva  /  load  data 
’III  SUN  tbcratjitmw 
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from  dak,  f't  ihc  user  mode ,  a ««*  the  AAMPS  online,  context 
***,l'T-  Mp  t*dEtj,  *ad  cseiny  ofuULtie*.  Tie  iiifity  program* 
ratlnde  generation  of  a  schedule,  viewing  the  schedule  graphic*]!/ 
generalmg  operations  order*  (text  icon),- and  displaying  schedule 
(a*  is  done  la  the  figure). 

Kxflre  2  tv  *  Kirrn  damp  of  ihc  tinHine  window  wliicli  re- 
1«U  the  xlcdnl.  will,  poiotlino  dal,  boars  for  He  iaietensire 
comp.1/.  PeaceUnie  daijr  boars  are  lea  boars  a  da/.  See  da/s  a 
week,  ffole  lhat  Ibis  caases  raissioas  lobeaiucbedaled,  Infigarel 
the  maiateaaace  eootpaajr  b  assoraed  On  dnl>  24  bodrs  a  da/  seeea’. 
da/s  a  week  Tie  maialeaaaee  baj  eapaeil/  after  sebedcliae  is  also 
dnpla/ed  as,a5  Ihe  limeb'ae  tarihl/.  critical  rrsoarees 

aad  eoaslraral  leeels  is  osefal  betaase  il  allows  the  sdredabag  of- 
feet  to  qaaatif/  pertorraaaee,  aad  it  allows  for  iadeht  into  how  to . 
iraproee  the  sehedale. 

3  Results/  Observations 

He  projetl  is  stdl  onjoutg,  aad  the  balk  of  the  work  left  is  ra  the 
area  of  lest  aad  eejlaatioa.  Noaetheless,  seeeral  eoadusions  can 
be  drawa  aad  obsereatleas  made  at  thb  stage.  The/  are  ia  the 
following  categories:  operalioaai  /  doctrinal  tdeeaace,  ntibl/  of 
AAMPS,  and  the  research  approach  taken, 

A*  highlighted  by  the  discussion  abort  responsive  C3  n  the  key 
to,,  success  on  the  AirLand  battlefield,  and  responsiveness  is  the 
[7  dfficKn<7  ,n  implementation*  of  Ariation  Operation* 
Management  AAMPS  was  designed  with  these  two  assertions  a* 
central  tenet*.  The  feedback  so  tar  from  operational  user*  is  quite 
posrtire,  and  in  the  near  future  we  will  take  AAMPS  into  a  field 
cantonment,  for  a  more  complete  picture  of  the  relevance  and  lira- 
itation*  of  AAMPS  with  respect  to  Airlcnd  battle  doctrine. 

The  goal  of  out  effort  was  to  inrestigate  the  feasibility  of  zip. 
plying  the  technical  methodologies  ontbned  in  the  paper  to  Army 
Anation  C  problem*.  We  were  to  do  thi*  by  investigating  a  lim¬ 
ited  scope  problem  which  w«  representative,  and  derelop  a  pro- 
otype  deernon  aid.  AAMPS  i*  the  prototype,  and  a*  mentioned 
^ operation*  management  problem. 
AAMPS  should  be  expanded  in  both  jeope  and  functionality  before 
becoming  a  fielded  system.  It  should  expand  to  include  the  entire 
Avution  Brigade  structure,  with  nodes  located  with  all  divisional 
major  subordinate  commands  and  the  division  G-3.  The  scope 
should  be  expanded  to  include  scheduling  of  crews,  brigade  admin¬ 
istrative  functions,  and  mission  planning.  The  system  should  be 
ported  to  standard  military  hardware  in  the  future,  after  the  design 
and  configuration  becomes  stable. 

The  approach  we  took  to  the  research  project  was  to  identify  a 
fine  Army  Aviation  unit,  identify  appropriate  personnel  and  under¬ 
stand  the  C  problem  from  their  point  of  view.  Then  in  conjunc¬ 
tion  with  the  aviation  personnel  identify  the  limited  scope  problem. 
Next,  in  an  iterative  fashion,  develop  the  functionality  and  MM1  of 
the  system.  Finally,  test  and  evaluate  the  prototype  with  the  avi¬ 
ation  unit  using  real  data,  The  danger  here  is  that  the  prototype 
is  just  an  automation  of  current  procedure.  We  feel  that  we  wete 
able  to  avoid  this  trap,  and  develop  a  prototype  which  has  utility 
but  still  represents  a  significant  innovation. 
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ABSTRACT 

This  study  examines  the  problea  of  organizing 
EV  information  to  support  naval  tactics.  EV 
inforaation  is  fused  from  intelligence,  security 
(cryptologic)  and  organic  sources,  and  is  needed 
to  successfully  conduct  broad  EV  tactics  (EMCON, 
OPSEC,  C3CH,  etc.)  In  support  of  force  objectives. 
The  problea  is  presented  from  a  system  perspective 
where  it  is  partitioned  and  discussed  within  a 
coherent  fraaevork.  This  decoaposition  results  in 
three  different  asscssnents  dealing  with  the 
nature  and  flow  of  the  inforaation,  the  proper  way 
to  organize  it  and  the  extraction  of  relevant  and 
timely  inforaation  to  support  tactical  actions.  A 
general  theory  of  coabat  tactics  is  presented 
leading  to  development  of  models  which  guide  the 
organization  of  information.  A  general  EV  fusion 
system  is  postulated  vhich  should  be  capable  of 
analyzing  those  conditions  for  the  successful 
commitment  of  EV  tactics  and  countermeasures.  An 
example  is  given  which  illustrates  the  problem  and 
illuminates  the  conditions  for  a  technical 
solution. 


INTRODUCTION 


The  ability  to  acquire  and  apply  information 
concerning  enemy  coabat  forces  is  a  central  problem 
of  command  and  control.  Because  tactical  EV 
resources  collectively  comprise  a  priaary  means  of 
threat  observation,  this  report  examines  the  problea 
of  EV  inforaation  handling  as  it  supports  the 
eaployment  of  tactical  actions  in  coabat.  The 
problea  consists  of  how  the  EV  inforaation  should  be 
handled  to  reflect  the  dynamics  of  the  operational 
world  in  a  manner  that  is  relevant  for  planning,  for 
recognizing  the  conditions  for  tactical  commitment, 
and  for  providing  the  conditions  that  permit  control 
of  the  tactics  execution.  The  focus  of  this  study 
is  to  expose  and  address  key  issues  affecting  this 
problem  so  that  technical  solutions  may  evolve. 

One  way  of  explaining  the  problem  is  to  do  so  in 
terms  of  the  flow,  organization  and  relevance  of  the 
information.  Consideir'  a'  simple  model  of  a  general 
force  system  (fig.  1).  At  each  echelon,  the 
tactician  is  required  to  deal  vith  the  flov  of  two 
fundamentally  different  kinds  of  inforaation. 
information  flowing  from  above  and  information 
flowing  from  within.  The  former  are  reports  from 


sources '  outside  the  force,  and  the  latter  are 
reports  from  sources  controlled  by  the  force.  The 
former  tend  to  be  more  strategic  or  technical  and 
broad  ranging.  The  latter  are  more  detailed  and 
voluminous.  Normally  the  principal  tactician  does 
not  control  the  sources  from  above,  but  exercises 
full  control  over  those  from  within  since  the 
information  is  provided  by  means  organic  to  his 
echelon. 

As  one  proceeds  downward  along  the  battle  time 
line  information  must  be  organized  to  confront  more 
definitive  threat  possibilities,  leading  ultimately 
to  engagement.  This  means  that  at  the  lover 
echelons  the  tactician  must  be  presented  with 
tailored  products  relevant  to  his  needs  and  of 
appropriate  quality  (accuracy,  timeliness, 
coverage).  How  veil  the  structure  handles  the  flow 
and  organization  of  its  information  and  determines 
relevance  is  a  measure  of  its  effectiveness.  It 
must  be  able  to  coordinate  disparate  sources  of 
information  to  focus  upon  the  same  objects.  It  oust 
be  able  to  manage  information  so  that  its 
organization  reflects  the  nature,  status  and  trends 
of  on  going  operations.  Finally  it  oust  provide 
inforaation  of  the  right  type,  of  the  right  amount, 
at  the  right  tine,  to  the  right  users  to  detexmine 
windows  of  tactical  opportunity  and  vulnerability. 
The  result  will  be  the  selection  of  tactics  and 
countermeasures  optimized  for  success  and  impact 
against  a  threat  in  almost  any  tactical  situation. 


THE  NATURE  OF  EV  INFORMATION 

There  are  essentially  three  basic  categories  of 
tactical  information  that  are  available  to  a 
tactician  at  the  force  level  and  in  some  cases  the 
platform  level  -  intelligence,  security 
(cryptologic)  and  organic.  EV  inforaation  is  a 
product  drawn  from  these  three  types  as  veil  as  from 
other  classes  of  information  which  forms  a  bounded 
set  of  information  needed  to  formulate  tactical  EV 
plans.  As  such,  EV  information  contains  data  both 
from  above  and  within.  The  kinds  of  EV  tactics 
supported  by  this  inforaation  are  broad  in  scope  and 
are  intended  to  impact  the  thinking  of  the  enemy 
commander.  They  include  tactics  to: 

-  gain  inforaation  (directed  observation) 

-  withhold  information  (EMCON,  OPSEC) 

-  provide  misinformation  (OPDEC,  Countertargeting) 

-  disrupt  information  (C3CM,  Offensive  ECM) 

-  protect  information  (0vn-C3  protect) 
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GENERAL  FORCE  SYSTEM 
Figure  1 


and  have  been  previously  discussed  by  Layman  |ll» 
Terminal  defense  jamming  and  other  isolated  EV 
actions  are  not  included. 

These  tactics  share  other  characteristics  as 
vell>  they  require  persistence  in  their  execution 
and  consistency  In  the  operational  patterns  that 
they  expose  to  a  hostile  force.  This  implies  a  need 
for  further  information  to  evaluate  the 
effectiveness  of  the  tactic  and  to  replan, 
reposition  and  refocus  effort  where  required. 

The  structure  of  Etf  information  is  shown  in 
figure  2.  At  the  top  of  the  figure,  data  in  the 
fora  of  emitter  detections,  direction  of  arrival  and 
modulation  parameters  usually  furnish  the  first 
subjects  for  assessments.  Upon  initial  assessment 
these  fall  into  either  of  two  categories  EL1NT  and 
COHINT  where  further  analysis  will  lead  to  the 
identification  of  platforms  and  facilities,  in  the 
case  of  ELINT  or  the  identification  of  nets  and 
commands  in  the  case  of  COHINT.  As  the  fusion 
process  continues,  and  further  technical  and  combat 
information  is  brought  to  bear,  the  quality  of 
information  reaches  a  point  where  it  is  possible  to 
gauge  the  progress  of  an  ongoing  threat  tactic.  It 
should  be  emphasized,  however,  that  the  figure 
represents  an  ideal  situation  where  all  of  the  data 
is  available  and  that  there  is  enough  time  for 
assessments.  In  the  vast  majority  of  cases,  the 
information  Vill  be  incomplete. 


EW  INFORMATION  STRUCTURE 

Figure  2 
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specifically  for  EV  support,  information  about 
events  and  for  the  specified  contents  of  their 
analysis  files.  The  information  that  flovs  through 
these  three  channels  would  reside  in  the  indicators 
data  base  organized  by  "case". 

A  case  would  be  a  problen  fot  analysis  of 
evidence  about  a  tactical  entity  to  attain  a 
specific  sat  of  assesseents.  For  example,  a  "case" 
could  initially  be  to  evaluate  data  concerning 
detection  of  plat fores  new  to  the  scene  and  to 
classify  sane.  The  analytic  objective  then  could  be 
upgraded  to  determine  the  tactical  organization  to 
which  a  detected  platforn  belongs  and  the  type  o£ 
activity  in  progress.  And  so  on.  Inforoation  would 
be  saved  in  those  indicator  categories  with 
relevance  to  solving  the  required  analytic  problen. 
Sources  insofar  as  possible  would  be  kept  advised  of 
that  problen. 

The  Indicator  Data  Base  is  that  set  of  first 
level  inferences  relating  to  "cases",  fron  which 
second  and  'higher  level  inferences  nay  be  drawn 
regarding  the  analysis’ of  tactics.  Files  and  codes 
oust  exist  in  the  source  data  base  for  the  case 
definitions  and  recording  the  possible  first  level 
inferences  so  automated  techniques  of  query  and 
aggregation  nay  be  employed.  Reporting  centers  oust 
be  required  to  report  in  the  vocabulary  of  these 
codes.  In  situations  of  uncertainty  about  the 
implication  of  data,  it  vouldHe  assigned  to  core 
than  one  case,  or  to  more  than  one  analytic 
possibility  within  a  case. 

Tvo  fundamental  reasons  arc  advanced  for 
recommending  that  the  primary  EV  analytic  data  be 
organized  this  way.  The  first  related- to  the  basic 
differences  aoong  the  three  categories  of  data  that 
would  flow  into  the  EV  Data  Fusion  System  source 
data  base.  Each  of  the  categories  are  generated  by 
a  fundamentally  different  observation  perspective 
regarding  what  is  happening.  There  is  essentially 
no  correlation  between  them  of  the  parameters  of 
related  observable  data  about  the  underlying 
tactical  phenomena.  They  are  independent  and 
analysis  of  one  category  will  tend  to  provide 
validation  of  the  results  of  analysis  fioa  the  other 
categories.  For  example,  intercept  of  the 
modulation  parameters  of  a  missile  control  signal 
could  be  an  alert  of  a  missile  firing  about  to 
occur.  Track  data  of  platforms  in  the  area  can 
independently  confirm  if  a  launch  is  reasonable  in 
terms  of  platforms  in  the  area  and  if  a  missile  is 
physically  present.  Activity  data  will  reveal 
independently  the  possibility  that  the  essential 
pre-launch  coordination  has  occurred.  If  activity 
data,  structural  data  and  track  data  do  not 
reasonably  relate,  the  presumption  of  the  analysis 
i?  not  correct. 

The  second  reason  for  organizing  input  data  in 
this  way  is  that  analysis  oust  be  purposeful  i.e., 
case  oriented.  EV  tactics  oust  be  committed 
according  to  a  plan  of  action  against  a  finite 
entity,  hip-shooting  will  simply  draw  the  enemy  and 
the  isolated  actions  that  ensue,  will  provide 
ineffective  results.  A  main  purpose  of  the  EV  data 
fusion  system  is  to  perform  the  analysis  that  will 
allow  the  plan  to  be  selected  and  put  into  effect. 
This  is  the  ultimate  analytic  problem,  and  all  prior 


analytic  tasks  must  have  laid  the  groundwork  for 
that. 

In  essence  then  a  case  represents  a  "snapshot" 
of  a  tactical  situation  and  a  series  of  snapshots 
will  contain  tactical  patterns.  Open  cases  will 
reside  in  the  Tactical  Indications  Data  Base;  closed 
case's  will  be  stored  m  the^Tactical  Situation  Data 
Base. 

As  this  information  accumulates  m  the  Tactical 
Situation  Data  Base,  it  will  form  time-history 
patterns  exposing  the  nature  of  change  of  tactical 
functions  and  indications  of  achievements.  The 
nature  of  change  and  tactics  yield  provides  a 
context  for  assessing  the  significance  of  the 
present  status,  projecting  the  probability  of  forms 
of  activity  for  the  future.  The  problem  however  is 
that  these  patterns  are  implicitly  represented  in 
the  stored  information.  A  means  must  be  found  for 
extracting  this  information  and  converting  it  to  an 
explicit  format  where  it  can  be  useful. 


EV  INFORMATION  ORGANIZATION-EXPLICIT  PATTERNS 

The  effective  organization  of  the  information  is 
dependent  upon  a  proper  perspective  of  the  threat. 
The  operations  of  the  threat  may -be  viewed  as  a 
continuum  along  the  battle  time  line  shown  in  the 
first  figure.  It  deploys,  organizes,  surveys, 
signals,  postures,  targets  and  strikes.  All  of 
these  activities  arc  connected  and  would  form  a 
continuous  explicit  pattern  if  they  could  be  seen. 
On  the  other  hand  tactical  EV  information  is 
fragmentary.  It  deals  with  indicators  —  bits  and 
pieces  of  evidence.  Different  observers  see 
different  parts  of  the  component  activities. 

In  order  to  maintain  this  perspective,  it  is 
submitted  that  there  are  only  a  few  basic  tactics 
components  and  all  combat  tactics  are  made  up  of 
them.  They  are; 

Searching  and  Analyzing 

Honitoring  and  Tracking 

Targeting 

Strike 

Upon  analysis  and  discussion  of  these  generic 
components  it  is  found  that  they  apply  equally  as 
well  to  offensive  and  defensive  postures.  In 
addition,  there  are  a  small  number  of  major 
decisions  that  must  be  made  as  the  battle  progresses 
along  the  time  line.  They  are.  (1)  decisions  to  be 
alert  and  maintain  a  monitoring  and  tracking 

posture,  (2)  decisions  to  accept  the  possibility  of 
combat  and  to  prepare  for  targeting;  and  O) 

decisions  to  strike  and  engage  in  combat.  The  major 
thrust  of  EV  information  and  collection  should  be  to 
obtain  evidence  for  making  any  of  these  decisions, 
or  determining  if  they  have  been  made  by  the  enemy. 

The  dynamics  of  the  situation  is  captured  in  a 
simple  model  shown  in  figure  4.  The  model  simply 
tells  us  that  as  the  threat  progresses  along  the 

battle  tine  line,  he  will  provide  us  with  the 

opportunity  to  observe  and  understand  his 
activities,  Vuh  the  proviso,  that  we  can  place  his 
individual  actions  within  the  context  of  an 
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historical  pattern  of  activities.  If  our  own 
tactical  information  is  arranged  properly,. we  should 
be  able  to  follov  his  progression  step-by-step  and 
predict  his  next  moves,  applying  appropriate 
countermeasures  to  delay  or  thvart  his  intentions. 
TKc  model  also  tells  us  that  unless  the  hostile 
tactician  reacts  irrationally  and,  let's  say,  jumps 
directly  from  search  into  strike  (as  he  might  do  it 
complete  surprise  was  desired)  then  he  will 
transition  sequentially  and  predictably  until  he 
either  engages  or  the  tactic  is  broken  off. 

Uhat  then  is  the .nature  of  the  pattern  that  vill 
allow  us  to  follov  enemy  activities  and  to  determine 
whether  it  is  prop.**  to  apply  a  countermeasure? 
Figure  5  shovs  a  genei ic  pattern  and  a  model  of  hov 
it  might  work.  It  states  that  a  combat  operation 


progresses  by  successfully  achieving  a  series  of 
objectives.  In  the  surveillance  phase,  for  example, 
the  objective  might  be  to  find  the  general  location 
of  the  battle  group.  Once  this-is-done  the  next 
objective  might  be  to  identify  major  combatants  and 
so  on.  Each  objective  is  achieved  by  the "successful 
completion  of  individual  steps  or  functions  that 
lead  to  the  achievement  of  the  objective.  Each 
function  generates  an  activity  which  can  be 
observed.  The  successful  completion  of  a  function 
is  termed  an  event.  An  event  is  a  measured  change 
in  the  tacti  ca  l""s  i  tua  t ion.  It  could  be  signified  by 
the  cessation  of  a  current  activity  and/or  the 
beginning  of  a  nev  one.  The  functions  affiliated 
with  an  objective  fora  a- group.  It  is  possible  to 
affiliate  a  status  indicator  with  each  group  which 
tells  us  hov  far  along  the  enemy  has  progressed 
toward  the  achievement  of  the  group's  objective. 
The  figure  also  shovs  that  each  function  in  the 
pattern  also  has  an  appropriate  countermeasure. 

In  addition  to  the  serial  aspect,  combat 
operations  also  exhibit  cyclical  patterns.  This 
occurs  when  a  decision  has  been  made  not  to  progress 
into  the  next  phase  of  operations,  but  to  either 
sustain  the  current  phase  or  to  revert  back  to  a 
previous  one. 

The- patterns  we  have  described  represent  hostile 
activities  explicitly.  Unfortunately  the  tactical 
information  embedded  in  various  reports,  do  not 
directly  lend  themselves  to  this  form  of 
representation.  It  vas  shown  that  they  must  first 
undergo  assessment  and  then  fora  implicit  patterns 
in  the  Tactical  Situation  Data  Base.  A  data  fusion 
technique  is  needed  to  extract  the  relevant  implicit 
patterns  embedded  in  the  Tactical  Situation  Data 
Base  and  convert  them  into  a  dynamically  changing 
explicit  pattern. 
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EV  information  relevance 

There  are  cany  different  forms  of  patterns 
depending  on  the  level  of  the  threat  condition. 
During  a  confrontational-phase,  of  special  interest 
are  the  few  main  patterns,  of  functional  activity, 
organization  and  coapositions,  deployment  and 
stationing  that  expose  the  coabat  situation  i.e., 
the  status  of  attainment  of  the  principal,  coabat 
related  objectives.  In  a  general  situation 
involving  forces  and  coaaands,  there  are  six  of 
these  basic  patterns.  These  are  (1)  the 
organization,  resource  utilization,  deployaent  and 
activity  to  gain  knowledge  to  enable  targeting;  (2) 
the  deployment  of  suitable  targeting  units  into 
targeting  positions  and  dlsseoination  of 
instructions  '  for  targeting  to  a  suitable 
organization;  (3)  the  accoaplishaent  of  targeting 
and  dissemination  of  target  assignments  and 
coordinates  by  suitable  targeting  and  command 
direction  units;  (4)  movement  of  suitably  configured 
units  into  firing  strike  positions;  (5)  the  coaoand 
interaction  necessary  to  establish  authority  to 
fire/strike;  and  (6)  employment  of  weapons. 


Since  these  patterns  lie  buried  within  the 
Tactical  Situation  Data  Base,  it  is  desirable  to 
construct  modules  that  can  operate  upon  this  file 
and  extract  the  six  patterns  for  further  processing. 

According  to  figure  6,  there  are  six  such 
modules  labeled  "Combat  Assessment  Modules".  The 
following  are  definitions  '£  those  modules: 

a.  Surveillance/Targeting  Readiness  Module: 
Organization  of  the  recent  history  of  evidence  on 
surveillance  and  monitoring  activity  to  enable  that 
activity  to  be  assessed,  and  in  particular  the 
attainment  of  a  state  of  information  readiness  to 
position  for  targeting  and  engagement  when  desired, 
to  be  detected. 

b.  Command  Direction/Engagement  Posture  Module. 
Organization  of  the  recent  history  of  evidence  of 
dissemination  of  Intelligence  to  combat  forces, 
command  direction  of  those  forces,  and  intercommand 
liaison  among  forces  and  between  forces  and 
headquarters,  '  to  enable  the  nature  of  that 
collective  activity  to  be  assessed,  and  In 
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particular  the  existence  of  a  state  of  requirement 
to  target  and  engage,  to  be  detected. 

c.  Deployaent/Engageoent  Posture  Module. 
Organization  of  the  recent  history  of  evidence 
concerning  deployment  ol  units  and  organizations, 
relative  to  our  forces,  to  enable  deployment  posture 
to  be  assessed,  and  in  particular  the  existence  of  a 
deployment  posture  meeting  the  requirements  of 
targeting,  or  of  strike  for  the  weapons  involved,  to 
be  detected. 

d.  Targeting/Strike  Posture  Module.. 
Organization  of  the  recent  history  of  revidence 
concerning  targeting  and  communication  of  target 
data  and  targeuassignments,  to  enable  assessment  of 
that  activity,  and  in  particular  the  achievement  of 
an  information  state  of  readiness  to  strike,  to  be 
detected. 

e.  Weapons  Free  Module.  Organization  of  the 
recent  evidence  on  intercoamand  liaison  and  the 
overall  context  of  activity  to  enable  assessment  of 
that  activity,  and  in  particular  the  estimation  of 
the  intent  to  release  veapons. 

f.  Strike  Action  Module.  Organization  of  the 
recent  history  of  evidence  on  veapons  action  and 
veapons-support  action  (ECM  and  other  combat  direct 
support)  to  enable  assessment  of  that  activity  and 
in  particular  the  determination  of  the  status, 
thrust  and  targets  of  each  component  of  strike,  to 
be  accomplished. 

Next  vc  seek  a  strategy  for  grouping  these 
extracted,  basic  patterns  »o  fora  an  explicit 
pattern  that  vlll  create  the  best  possible  chance 
that  the  true  situation  will  be  apparent  from  the 
pattern  that  results.  Figure  7  shovs  tvo  vays  of 
relating  the  information  embedded  in  the  six  basic 
tactics. 

the  temporal  relation  states  information 
collection  and  reporting  activities  vlll  always 
precede  commands  or  orders.  Events  will  follov 
commands.  The  relation  also  Indicates  that  commands 


are  given  by  appropriate  command  elements  and  that 
tactical  events  are  carried  out  by  tactical 
elements.  Conversely  if  ve  knov  the  type  of  element 
involved,  ve  may  be  able  to  guess  both  the  orders 
given  and  the  event  that  vill  ensue. 

The  operational  relation  allows  us  to  guess  vith 
some  efficiency  vhat  function  is  being  prosecuted  if 
ve  knov-vhat  activities  are  in  effect  and  vhat  event 
has  occurred.  It  also  allows  us  to  guess  at  the 
objective  if  ve  knov  the  function  and  to  guess  the 
status  of  the  functional  group  If  ve  know  vhat 
events  have  been  completed. 

With  these  rules  .of  thumb  (as  veil  as  human 
assistance),  it  may  be  possible  to  fuse  the  basic 
patterns  into  a  dynamic  explicit  pattern  which  may 
be  the  best  information  ve  have  to  go  on.  The  final 
step  is  to  composo  the  evolving  pattern  against  a 
template  pattern  in  the  known  doctrine  of  the  enemy. 
Once  ve  knov  where  ve  are  in  the  tactics  trajectory, 
ve  can  estimate  objectives,  determine  further 
information  requirements,  trends  of  usage  and 
deployment  that  enable  readiness. 


AN  EXAMPLE 

Consider  the  example  shovn  in  figure  8.  The 
question  arises  as  to  vhat  is  actually  conveyed  by 
the  reports.  Do  they  signify  a  transition  from 
surveillance  Into  targeting?  Or  do  they  merely 
indicate  that  a  targeting  resource  Is  being  used  to 
determine  new  locations  for  continued  surveillance. 
Since  the  messages  are  out  of  time  sequence,  hov  do 
they  relate  with  respect  to  progression  of  tactics? 

To  some  degree  all  hostile  activity  can  be 
observed,  but  many  observations  are  not  definitive 
of  the  underlying  capabilities,  deployment  or 
objectives,  and  in  general  no  single  observation  is 
decisive  in  terms  of  analysis  of  vhat  is  really 
happening,  and  so  by  Itself  docs  not  enable  a 
coherent  CM  act.  Observations  generally  create  a 
fog  of  knowledge. 
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This  fact  vas  noted  by  Clausevitz  (2)  vho 
stated: 

"Many  intelligence  reports  in  var  are 
contradictory;  even  note  are  false,  and  most  are 
uncertain.  The  tactician  oust  possess  a  standard  of 
judgment,  vhich  he  can  gain  only  from  knovledge  of 
aen  and  affairs  and  common  sense.” 

Most  reports  that  can  be  generated  in  a  combat 
situation  are  essentially  momentary  snapshots  and 
are  very  United  in  scope.  If  ve  are  to  nake  the 
best  sense  possible  of  such  reports,  they  oust  be 
grouped  as  they  relate  to  functions  in  progress,  and 
the  functions,  as  they  relate  to  overall  tactics. 
Individual  reports  oust  be  vicved  in  the  context 
established  by  both  groups.  Having  formed  these 
groups,  the  information  they  contain  needs  to  be 
interpreted  to  deteroine  those  elements  of 
inforoation  needed  for  our  ovn  purposes. 
Accoaplishing  this  requires  knovledge  of  the  basic 
hostile  lnforaat ion-building  process  and  a  process 
for  systematically  analyzing  an  organized  data  base 
formed  by  these  groups. 

Let's  shov  hov  this  can  be  done.  Starting  vith 
the  case  of  the  helo,  ve  first  create  a  case  vith 
the  helo  as  the  entity  (Fig.  9).  An  assumption  is 
made  that  the  helo  is  being  used  to  target  the 
friendly  force.  Upon  receipt  of  deployment, 
organizational  and  activity  indicators  fwm  the 
analytical  centers,  assessments  are  made. 

The  deployment  and  organization  Indicators 
support  the  hypothesis  that  targeting  of  force 
elements  Is  under  vay.  The  activity  indicators 
hovever  do  not  support  this  preaise.  The  OTC  net  is 
not  normally  used  for  targeting  operations  and  coded 
format  123  is  used  primarily  to  transmit  position 
and  track  data  rather  than  stationing  or  fire 
orders.  Further,  the  quality  of  information  does 
not  suggest  the  high  tempo  of  operations  that  vould 
normally  accompany  a  prelude  to  coabat. 

Conclusion:  Ve  reject  the  targeting  hypothesis. 
It  is  assuaed  that  the  action  supports  an  at  leapt  to 
maintain  contact.  Case  closed! 


Figure  10  demonstrates  hov  the  contents  of  the 
Tactical  Situation  Data  Base  might  look  for  the 
three  reports  after  case  assessments  have  been 
completed.  Earlier  cases  are  not  shovn  nor  vill  the 
data  be  actually  encoded  in  the  manner  shovn.  The 
picture  shovs  that  there  are  two  cases  labeled 
"SAG-3"  (vhich  is  a  surface  action  group  consisting 
of  2  cruisers  and  2  destroyers)  and  that  HE10-1  is 
grouped  vith  them.  The  implicit  patterns  are 
embedded  sequentially  in  the  data  fields.  The  event 
analysis  history  file,  for  example,  suggests  a 
pattern  vhich  shovs  that  events  have  progressed  from 
determining  the  general  location  of  the  blue  force, 
possibly  using  long  range  sensors,  to  established 
contact  vith  the  main  body. 

The  information  quality  suggests  that  vhile 
operations  are  being  conducted  under  a  cloak  of 
security,  the  tempo  of  operations,  the  frequency  of 
data  refresh  and  the  operational  readiness  do  not 
suggest  that  an  engagement  is  imminent. 

Finally,  in  figure  11  the  combat  assessment 
modules  ope* ate  concurrently  upon  the  Tactical 
Situation  Data  Base  to  extract  the  basic  pattirns. 
Applying  the  temporal  and  operational  rules  <\ i  them 
allovs  us  to  create  a  functional  entry  or  record 
into  the  groving  explicit  pattern.  This  pattern  is 
then  compared  against  a  doctrinal  template  vhich  is 
essentially  a  list  of  expected  progressions. 
Projections,  assessments,  countermeasure  selections, 
etc.  ensue. 


CONCLUSION 

There  are  three  objectives  that  this  report  has 
tried  to  achieve.  The  first  of  these  is  to  take  a 
very  complex  information  management  problem  and  to 
articulate  it  vithin  the  framevork  of  a  systems 
concept.  When  the  problem  vas  decomposed  into  the 
flov,  organizational  and  relevance  aspects,  distinct 
technical  as  veil  as  operational  challenges  emerged 
and  vere  exposed.  It  Is  hoped  that  this  vill  be 
useful  in  organizing  efforts  to  attack  the  problem 
in  a  coherent  manner. 
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Figure  10 
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The  second  objective  vas  to  define  the 

requlreoents  for  an  EV  data  fusion  systea  that  vould 
function  at  the  force  level  in  a  proactive 
(continuous)  nanner  and  vhich  vould  possess  the 
generality  to  analyze  any  tactic  countenaeasure 

application.  Force  level  EV  is  a  relatively  nev 

Navy  concept  vhich  is  still  evolving.  There  is 
currently  no  systea  cither  existing  or  proposed 
vhich  attempts  to  fuse  EV  information  to  allov  the 
oind  of  the  commander  to  focus  clearly  on  the 

tactical  situation. 


Finally  ve  have  presented  the  eleoents  of  a 
general  theory  of  cosbat  tactics.  This  has  been 
done  to  provide  greater  insight  into  the 
complexities  of  Naval  varfare  and  because  if  a 
generalized  systea  for  analysis  of  tactics  and 
countermeasures  against  those  tactics  is  to  be 
described,  the  generalized  principles  of  tactics 
themselves  oust  be  understood. 

Vith  a  systems  concept  in  place,  ve  are  ready  to 
pursue  technical  solutions.  Knovfng  of  course  that 
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sections  contain  an  explanation  of  the  normative  model  and  a 
comparison  of  the  model  results  with  human  team  data. 


ABSTRACT 

The  scheduling  of  jobs  by  a  team  of  distributed  decisionmakers 
(DMs)  is  an  important  subtask  of  tactical  decisionmaking  in 
Command  and  CbntroL  To  investigate  this  problem  an 
experiment  was  developed  where  three  geographically  seperated 
DMs  process  tasks  soas  to  maximize  a  predefined  objective. 

The  problem  consists  of  a  team  of  three  DMs  who  share 
a  pool  of  distributed  renewable  resources.  These  resources  arc 
used  process  a  variety  of  tzsks  which  amve  stochastically  and 
have  a  fixed  opportunity  window  or  deadline.  Also,  there  is  a 
varying  penalty  for  each  task  which  is  not  processed  before  the 
deadline. 

The  goal  of  this  research  effort  is  to  develop  a  normative 
descriptive  model  which  will  aid  in  the  understanding  of  how 
DMs  coordinate  and  schedule  jobs  under  varying  input 
conditions.  Some  prehmircuy  results  for  the  above  experiment 
will  be  discussed.  Also,  a  normative  model  is  discussed  for 
solving  the  distributed  scheduling  problem. 


1.  INTRODUCTION 

How  do  teams  adapt  their  decision  strategics  to  task 
environments?  How  should  a  team  organize  and  coordinate  to 
achieve  its  best  performance?  How  do  teams  divide 
responsibility  amongst  members?  Do  teams  choose  a  leader 
when  the  situation  warrants  a  centralized  command?  What  are 
the  issues  that  make  a  team  decision  difficult? 

The  study  presented  in  this  paper  was  motivated  by  the 
above  problems  in  distriouted  tactical  decisionmaking  (DTDM) 
which  arise  in  Naval  Battle  Group  Command  and  Control  (C2). 
The  focus  of  the  study  is  team  task  scheduling  and  resource 
allocation  in  a  distributed  environment  To  investigate  this 
problem  a  test-bed  was  developed  where  three  person  teams 
schedule  tasks  using  a  pool  of  limited  renewable  resources  in 
order  to  maximize  a  predefined  goal. 

The  objective  of  this  research  is  to  develop  a  normative 
descriptive  model  of  how  teams  solve  a  distributed  scheduling 
problem.  Experimental  research  has  been  conducted  so  that 
deviations  in  decision  behavior  from  those  predicted  by 
normative  models  can  be  investigated  The  framework  utilized 
in  the  modeling  effort  is  a  Discrete  Optimization  technique  which 
was  augmented  slightly  to  encompass  the  distributed  nature  of 
the  problem.  This  scheduling  method  matches  jobs  to 
decisionmakers  (DMs)  in  an  optimal  fashion.  Also,  this  method 
models  the  transferring  of  resources  between  DMs. 

The  paper  is  organized  as  follows.  First  an  intuitive 
explanation  of  the  team  scheduling  problem  is  discussed.  Next, 
the  experimental  design  process  is  outlined  along  with  the 
important  dependent  and  independent  variables.  This  is  followed 
by  an  overview  of  some  interesting  experimental  results  that 
confirm  and  disclaim  the  orinal  hypotheses.  The  last  two 


Z  PROBLEM  DEFINITION 

An  experimental  test-bed  has  been  developed  to  aid  in  the 
understanding  of  bow  human  DMs  solve  a  Team  Distributed 
Scheduling  CTDS)  problem.  The  important  issues  of  task 
scheduling  in  C5  systems  arc  incorporated  in  an  experimental 
paradigm  where  input  conditions  can  be  varied  and  dependent 
variables  measured. 

The  TDS  paradigm  can  be  thought  of  in  the  following 
manna.  The  three  DMs  represent  commanders  of  a  battle  group 
who  arc  geographically  separated.  The  battle  group  is 
confronted  with  three  types  of  hostile  threats.  Each  threat  type 
can  be  processed  by  any  of  one,  two,  or  all  three  commanders 
depending  on  the  scenario  (functional  overlap  is  explained 
thoroughly  in  experimental  design  section).  The  battle  group 
employs  a  fixed  number  of  resources  for  its  defense.  The 
resources  can  be  exchanged  among  DMs,  so  that  at  any  time  a 
particular  resource  can  be  under  the  command  of  any  of  the  three 
commanders. 

Threats  arrive  stochastically  (poisson  arrivals),  have 
strict  deadlines,  and  require  varying  numbers  of  resources  to 
complete.  The  attributes  of  each  threat  are  as  follows : 

i)  penalty  -  the  amount  subtracted  from  the  final  strength 
should  this  threat  not  be  attacked  within  its  opportunity 
window  ("penetration’'), 

ii)  resources  required  -  number  of  resources  required  to 
process  this  threat. 

111)  identification  number  -  used  for  communication 
between  team  members. 

Therefore,  the  task  of  the  commanders  is  to  assign  resources  to 
incoming  threats  and  to  share  the  limited  number  of  resources 
so  as  to  maximize  final  survival  strength.  It  should  be  noted 
that  a  single  commander  can  only  process  one  threat  at  a  time. 
This  constraint  is  an  effort  to  simulate  the  limited  capacity  of  a 
commander  to  oversee  many  events  at  one  time.  The  survival 
strength  is  diminished  each  time  a  task  "penetrates",  i.e,  the 
strict  deadline  is  not  met.  The  amount  of  penalty  associated  with 
threats  is. proportional  to  the  number  ol  resources  required,  but 
the  relationship  is  not  linear.  Also,  when  a  commander  decides 
to  rciocate/transfer  some  of  the  resources  a  significant  delay 
occurs  before  the  resources  amve  at  the  new  commanders  post. 

The  commanders  are  permitted  to  communicate  to  each 
other  through  several  pre-formed  messages  \i.e  request 
resources,  request  an  attack  on  a  given  threat).  However,  since 
communication  uses  the  valuable  time  of  the  commanders,  there 
are  occasions  when  communication  is  conciously  omitted  and 
potential  conflict  occurs  (i.c.  two  commanders  send  out 
resources  to  process  the  same  threat).  Therefore,  time  is  wasted 
and  no  extra  reward  is  gained. 
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3°  EXPERIMENTAL  DESIGN 


Since  the  TDS  study  was  a  model  driven  study  (i  e. 
several  modeling  alternatives  were  investigated  before  the 
experiment  was  designed  although  the  normative  model  was  not 
completed).  The  model  was  used  to  select  many  of  the  fixed 
parameters  prior  to  the  actual  running  of  experiments.  Also, 
several  important  features  of  the  TDS  experiment  were 
determined  using  results  of  the  DREAM  and  DDD  experiments. 

As  noted,  the  goal  of  this  experiment  was  to  investigate 
how  teams  coordinate  among  team  members,  and  how  their 
strategies  change  to  achieve  optimal  performance.  A  task 
scheduling  problem  was  selected  since  it  deals  with  many  of  the 
important  facets  of  Naval  Battle  Group  Command  and  Control. 
Also,  a  scheduling  problem  is  a  simplification  of  the  resource 
allocation  problem  encountered  inthe  DREAM  experiment. 

The  team  consists  of  three  decisionmakers  (DMs)  who 
are  of  equal  rank.  This  parallel  structure  was  adopted  since  it  is 
simple  and  allows  the  experimental  objective  to  be  met.  Also, 
the  three  person  parallel  structure  is  a  logical  intermediate  step 
between  the  DREAM  experiment  (2  person  parallel  structure) 
and  future  research  that  will  involve  a  more  complicated 
hierarchical  team  organization. 


3.1  INDEPENDENT  VARIABLES 

Several  independent  variables  were  chosen  based  on 
their  ability  to  affect  a  team  coordination  and  strategy  selection. 
The  four  input  parameters  which  were  expected  to  cause 
significant  deviations  in  strategy  and  coordination  were 
functional  overlap,  balance  of  load  among  team  members, 
resource  scarcity,  and"  tempo  or  arrival  rate  of  tasks. 

Functional  overlap,  in  this  context,  is  defined  as  the 
number  of  DMs  capable  of  processing  a  single  task  type.  Hus 
independent  variable  was  also  implemented  m  the  DDD  and 
DREAM  experiments.  In  addition,  this  variable  was 
investigated  by  Boettcher  and  Levis  (1981)  and  their  work 
md.cates  the  effectiveness  of  a  team  depends  on  the  degree  of 
functional  allocation  and  the  type  of  functional  allocation.  Here 
v,c  vary  the  degree  of  functional  allocation  over  the  following 
three  levels: 

i)  Sole  responsibility  by  a  single  DM  for  a  task  type. 

ii)  Shared  responsibility  between  two  DMs  for  a  single 

task  type. 

iii)  Shared  responsibility  among  three  DMs  for  a  single 

task  type. 

Table  1  displays  how  overlap  of  responsibility  will  be 
implemented. 
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The  second  independent  variable  is  balance  of  workload 
among  team  members.  In  this  case  the  overall  arrival  rate  of 
tasks  will  remain  constant  while  the  anval  probability  of  a  single 
task  type  will  be  increased.  Therefore,  one  DM  will  be  busy 
while  the  other  two  are  idle.  This  quantity  was  expected  to 
cause  teams  to  alter  their  communication  rates  to  and  from  the 
overburdoned  DM. 

The  third  independent  variable  is  the  level  of  resource 
constraint  or  the  number  of  resources  owned  by  a  team.  The 
two  levels  of  resource  scarcity  are  5  resources  for  the  team  and  7 
resources  owned  by  the  team.  The  criterion  used  to  select  these 
quantities  were: 

i)  to  maintain  a  three  person  team  in  most  of  the 
scenario's,  i  e.  to  try  to  assure  that  all  3  team  members 
have  something  to  do  at  all  times. 

ii)  to  require  a  significant  number  of  resource  transfers  in 
most  of  the  scenario's. 

The  effects  of  vaiymg  this  parameter  were  expected  to  be  similar 
to  varying  tempo.  However,  varying  resource  scarcity  m  the 
DDD  experiment  resulted  m  larger  increases  m  workload  than 
those  found  by  varying  tempo.  Also,  this  variable  increases  the 
difficulty  of  the  problem  significantly  as  shown  in  the  normative 
model  section. 

The  last  quantity  which  was  varied  is  the  load  on  the 
team  as  a  whole.  The  mechanism  used  to  vary  load  was  tempo 
or  arival  rate  of  threats  This  method  of  simulating  increased 
workload  was  also  implemented  in  the  DDD,  DREAM,  and  DIS 
experiments.  The  findings  of  Payne,  Johnson  and  Bettman 
(acceleration  and  filtration)  were  expected  to  be  observed  over 
three  levels  of  load,  but  not  neccessanly  equally  among  all  team 
members. 

The  experimental  conditions  tested  in  the  TDS 
expenment  are  shown  in  figure  1  In  the  primary  study  data  was 
collected  for  18  conditions  involving  different  levels  of  tempo, 
resource  scarcity,  and  functional  overlap  Similarly,  the 
secondary  expenment  studies  the  effect  of  imbalance  of  task  load 
over  different  levels  of  tempo  v'nd  functional  overlap  The  data 
collected  in  the  secondary  study  has  yet  to  be  be  fully  analyzed 
Three  teams  of  three  participate*,  in  this  expenment  and  each 
team  completed  two  repetitions  of  each  of  the  expenmental 
conditions  shown  in  figure  1.  Also,  the  duration  of  the 
scenarios  was  13  minutes. 
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interesting  effects  which  arc  discussed  in  this  section.  The 
degree  of  functional  overlap  which  is  defined  as  the  distribution 
of  task  responsibility  caused  teams  to  change  their  strategies  and 
alter  coordination  requirements  over  all  tempos  and  resource 
scarcity  levels. 

An  hypotheses  generated  prior  to  the  experiment  was  that 
performance  would  increase  as  overlap  increases,  but  with  a 
concomitant  need  for  increased  coordination.  This  hypothesis  is 
based  on  the  results  of  Serfaty  1985.  As  seen  in  figure  2,  both 
of  the  dependent  variables  depicting  performance  rise 
significantly  (p  <  0.001)  as  overlap  is  increased.  This  increase 
„  in  performance  is  a  result  of  the  change  in  strategy  shown  in 
figure  3.  Here  teams  were  able  to  decrease  the  number  of 
resource  transfers  required  and  therforc  increase  their  timeliness 
and  subsequent  final  strength. 


Experimental  Conditions 
figure  1 


3.2  DEPENDENT  VARIABLES 

The  dependent  variables  are  grouped  into  four  functional 
categories:  Performance,  Strategy,  Coordination,  and  Workload. 
The  first  category  contains  two  quantities  that  measure  the 
performance  of  a  team.  Final  strength  is  the  variable  that  teams 
strived  to  optimize.  This  quantity  is  a  measure  of  loss'  over  a 
scenario  or  more  quantitatively  the  sum  of  the  values  of  targets 
that  penetrated.  The  second  measure  of  performance  is  s’ink 
time  which  is  defined  as  the  time  available,  minus  the  time 
required  to  process,  at  the  time  of  attack.  This  dependent 
variable  provides  an  indication  of  how  quickly  teams  were  able 
to  perform  the  required  scheduling. 

The  next  category  of  independent-  variables 'measure 
changes  in  team  strategy.  These  variables  measure  how  teams 
adapted  to  the  experimental  conditions  in  their  attempts  to 
achieve  optimal  results.  The  following  four  dependent  variables 
were  collected  to  compare  with  normative  model  results  and 
thereby  determine  human  cognitive  limits  and  biases: 

i)  resource  transfers 

ii)  number  of  tasks  attacked  by  each  DM 

iii)  number  of  each  task  type  (A,B,C)  attacked 

iv)  number  of  tasks  attacked  requiring  1*2,3  resources. 

The  third  category  of  dependent  variables  indicate  how 

teams  coordinated  during  a  scenario.  First,  resource  requests 
give  an  indication  of  team  members  need  for  explicit 
communication  despite  centralized  perfect  information. 
Similarly,  the  amount  of  real  time  planning  required  was 
measured  by  "the  number  of  action  requests  ("can  you  please 
attack")  and  the  number  of  action  transfers  ("I  plan  to  attack"). 
The  last  dependent  variable  in  this  category  measures  the  lack  of 
coordination  over  the  experimental  conditions.  The  number  of 
wasted  attacks  marks  instances  when  two  DMs  attacked  the 
same  target,  thereby  wasting  valuable  time,  while  gaining  no 
extra  reward. 

The  last  dependent  variable  category  is  team  subjective 
workload  assessment  (SWAT).  Although  this  variable  docs  not 
fit  into  any  of  the  above  groups,  it  is  a  valuable  measure  that 
quantifies  how  teams  perceived  their  workload  over  the 
experimental  conditions. 


4  EXPERIMENTAL  RESULTS 

The  experimental  results  continue  to  be  analyzed  at  this 
writing,  however,  one  independent  variable  forced  some 


Effect  of  Overlap  on  Performance 
figure  2 


Also  as  shown  in  figure  4,  when  overlap  increases  the 
scheduling  problem  requires  more  coordination  among  team 
members.  In  fact,  the  team  cannot  fully  coordinate  as  displayed 
by  tire  increase  in  wasted  attacks,  The  dependent  variable 
"plans"  is  defined  as  the  sum  of  action  requests  and  action 
transfers  which  were  defined  in  section  3  2.  The  nonlinear 
increase  in  "plans"  suggests  that  teams  began  to  trade-off  online 
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communication  for  highly  structured  preplanned  strategies. 


“Hie  graph  of-perceived.worklcad  (figure '5)  owr  the 
levels  of  overlap  displays  ah  interesting  result  which  c  n  be 
explained  by  the  elements  which  compnse  workload.  The  ,.igh 
subjective  workload  in  the  "no  overlap"  condition  can  be 
attributed  to  frustration  or  psychological  stress  due  to  the  lack  of 
alternatives  available  to  improve  performance.  In  contrast,  the 
high  subjective  workload  in  the  "full  overlap"  condition  is  a 
result  of  the  increased  scheduling  difficulty  and  subsequent 
coordination  requirements.  The  partially  overlapped 
organization  provides  the  best  trade-off  between  these  two 
elements  of  workload. 


Effect  of  Overlap  on  Workload 
figure  5 

6.0  NORMATIVE  MODEL 


The  objective  of  this  normative  model  is  to  provide  a 
framework  with  which  human  biases  and  cognitive  limits  can  be 
judged.  Therefore,  the  model  should  lead  to  a  normative* 
descriptive  model  that  predicts  human  performance  The  general 
idea  of  the  model  is  to  transform  the  scheduling  problem  into  a 
weighted  assignment  problem  and  solve  the  assignment  problem 
by  a  conventional  algorithm  (Hungarian  Method)  A  simple 
example  is  used  to  explain  the  transformation  from  scheduling 
problem  to  weighted  bipartite  matching. 


In  this  example  we  assume  .there  is  a  single  DM  who 
owns  two  resources  and  is  presently  idle.  At  some  instant  in 
time  we  take  a  snapshot  of  the  dynamic  scenario  and  attempt  to 
schedule  the  tasks  in  the  picture.  First,  the  tasks  are  grouped 
into  the  following  three  sets* 

0  <  slack  time  <30  ==>  SET  1 
30  <  slack  time  <60  ===>SET2 
60  <  slack  time  <90  ===>  SET  3 
Since  the  processing  time  associated  with  each  task  is  constant 
(Tf  =  30),  the  DM  can  schedule  the  tasks  according  to  the  above 
three  sets.  The  fact  that  a  DM  can  only  be  attacking  one  task  at  a 
time  constrains  the  solution  set.  For  instance,  the  DM  can  select 
at  .most  one  task  from  SET  I  because  when  the  attack  is 
completed  30  seconds  have  elapsed  and  the  slack  time  of  tasks  in 
SET  1  will  be  negative.  Similarly,  the  DM  can  select  at  most 
two  tasks  from  SET  2  and  three  tasks  from  SET  3. 

To  implement  the  DM's  task  selection  options,  we 
assume  the  DM  will  attack  three  tasks  in  the  next  90  seconds  (1 
task  every  Tr  seconds).  For  the  DMs  first  attack,  any  tasks  in 
SETs  1,2,3  can  be  selected.  Planning  ahead  to  the  next  attack, 
the  DM  can  only  choose  tasks  from  SETs  2  and  3.  Similarly, 
the  DM  can  only  select  tasks  in  SET  3  for  the  third  attack 
Figure  6  displays  an  example  of  the  available  matchings  to  a 
single  DM  who  owns  2  resources.  The  numbers  displayed  along 
the  arcs  in  figure  6  represent  the  reward  gamed  upon  attacking 
the  associated  task.  Also,  the  task  type  and  resources  required 
to  prosecute  arc  located  within  the  circles  that  represent  tasks. 
The  bold  arcs  show  the  optimal  matching  for  this  example. 

In  the  second  example  (figure  7),  there  are  two  DMs  and 
three  types  of  tasks  displayed.  The  first  DM  owns  2  resources 
and  is  responsible  for  task  types  A  and  B,  while  the  second  DM 
owns  three  resources  and  is  responsible  for  task  types  B  dnd  C 
This  example  is  analagous  to  the  partial  overlap  condition  where 
the  third  DM  has  been  omitted.  The  solution  is  not  as  trivial  as 
in  the  first  example  due  to  the  overlap  of  the  two  DMs.  Fo- 
instance,  if  the  DMs  do  not  plan  ahead  at  least  two  stages  a 
suboptimal  result  will  occur  (i.c.  DMs  will  attack  both  tasks  in 
SET  1).  However,  the  matching  algorithm  is  solved  in  a  similar 
manner.  Similarly,  this  modeling  approach  can  be  extended  to 
three  DMs  in  any  resource  state  and  overlap  condition. 


6.2.3  Resource  Transfers 

Throughout  the  scenario  the  scheduling  problem  is  re¬ 
solved  each  time  a  DM  becomes  idle  and  tasks  are  available. 
Each  time  the  problem  is  resolved  for  all  the  resource  states 
where  resource  states  are  defined  as  (Rdmi  »RdM2  *RdM3>* 
The  two  team  resource  levels  arc  5  and  7.  Therefore,  the 
following  resource  states  arc  available  depending  on  the  scenario 
(table  2): 

When  forming  the  matching  graphs  for  resource  states  other  than 
the  present  state,  the  time  to  effect  the  neccessary  resource 
transfers  must  be  included.  This  resource  transfer  time  is 
comprised  of : 

i)  the  time  until  a  DM  has  free  resources  to  transfer 

ii)  the  actual  resource  transfer  delay. 

Figure  8  shows  two  matching  problems  where  the  first  includes 
no  resource  transfer  time  and  the  second  has  a  nonzero  delay  As 
seen  in  figure  8  tasks  may  change  SETs  when  solving  the 
matching  problem  for  resource  states  other  than  the  present 
resource  state  (l  e  in  alternative  resource  state  task  1  is  no 
longer  available,  task  3  moves  from  SET  2  to  SET  1,  and  task  6 
moves  from  SET  3  to  SET  2)  Therefore,  the  slack  times  are 
largest  when  solving  for  the  present  resource  state  To  transfer 
to  another  resource  state  diminishes  the  time  available  for  all  the 
viewable  tasks. 
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Resource  States 
table  2 
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Resource  Transfer  Time 
figure  8 


6.  MODEL/DATA  COMPARISON 

In  the  first  stage  of  the  normative  descriptive  modeling 
approach,  the  normative  model  predictions  arc  compared  to  the 
experimental  results  The  basic  hypothesis  of  this  approach  is 
that  motivated  expert  decisionmakers  strive  for  optimality,  but 
are  constrained  from  achieving  it  by  inherent  human  perceptual 
limitations  and  cognitive  biases. 

An  hypothesis  that  was  generated  prior  to  the 
experimental  phase  was  that  an  increase  in  tempo  would  cause 
an  lnmeasc  in  resource  transfers  and  a  decrease  in  team 
performance.  This  hypothesis  is  supported  by  the  normative 
model  m  figures  9  and  10.  However,  the  human  data  does  not 
clearly  follow  this  trend  due  to  biases  and  cognitive  limits.  In 
the  low  tempo  scenario’s,  it  appears  that  humans  attempted  to 
evenly  distribute  load  among  all  team  members  and  therefore 


transferred  more  resources  than  necessary.  Also,  it  is  apparent 
that  humans  reduced  the  complexity  of  the  problem  in  medium 
and  high  ter  po  scenarios  by  ruling  out  resource  transfers  This 
is  analagous  to  "filtration"  in  Payne  1986  where  humans  adapt  to 
a  strategy  that  reduces  the  decision  space  at  the  expense  of 
performance. 


Normative  Model  Performance  vs.  Human  Data 
figure  9 
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Normative  Model  Strategy  vs.  Human  Data 
figure  10 

6.  CONCLUSIONS  AND  FUTURE  WORK 

Several  conclusions  can  be  drawn  from  the  material 
presented  in  previous  sections.  First,  the  teams  were  able  to 
adapt  and  coordinate  well  as  more  overlap  of  responsibility  was 
delegated.  However,  an  optimal  amount  of  overlap  exists  with 
respect  to  woikload.  Also,  on  the  basis  of  Serfaty's  results 
(1985)  it  is  believed  that  an  optimal  amount  of  overlap  also  exist 
for  performance  when  the  problem  is  sufficiently  difficult 

Next,  teams  adapted  their  suategies  when  overloaded  to 
reduce  their  decision  space.  The  strategy  change  presented  here 
deals  with  insufficient  resource  transfers  when  the  problem 
became  difficult.  In  addition  to  this  strategy  change,  it  is 
believed  that  humans  selected  a  different  mix  of  tasks  than  the 
normative  model  and  therefore  could  not  perform  as  well  These 
and  other  human  biases  and  cognitive  constraints  must  be 
quantified  so  that  descriptive  factors  can  be  included  in  the 
model. 


314 


An  additional  conclusion  drawn  from  the  results  of  this 
experiment  is  that  a  leader  is  not  required  if  the  problem  is 
sufficienlty  simple.  Therefore,  more  difficult  scenarios  with 
increased  need  for  coordination,  must  be  implemented  to  realize 
the  benefits  of  a  hierarchical  team  structure. 
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ABSTRACT 

Army  Ballistic  Research  Laboratory 
(BKL),  Aberdeen  Proving  Ground,  MD,  as  well  as  other 
agencies,  has  been  investigating  the  problem  associated 
with  allocating  and  distributing  friendly  fire  based  on  the 
importance  of  an  enemy  target  and  its  function  in  a  par¬ 
ticular  tactical  situation.  As  an  alternative  to  standard 
parametric  procedures,  the  BRL  is  applying  recently  pub¬ 
lished  classification  tree  methodology  which  extends  pre- 
hous  developments  in  this  area.1  Unlike  other 
classification  tree  techniques,  Breiman  ct  al.’s  methods 
concurrently  handle  non-standard  data  structures,  a  mix¬ 
ture  of  data  types,  non-homogeneous  variable  relation¬ 
ships,  and  different  degrees  of  influence  of  the  variables. 
Ihese  characteristics  are  common  to  the  data  collected 
by  the  BRL  oa  Fire  Direction  Officers'  decisions  on  155 
mm  howitzer  targets.  An  overview  of  Breiman  et  al.’s 
research  in  the  context  of  this  particular  problem  is 
presented. 


I.  INTRODUCTION 

The  Probability  and  Statistics  Branch  of  the  US 
Army  Ballistic  Research  Laboratory’s  (BRL)  System 
Engineering  and  Concepts  Analysis  Division  has  been  in 
the  process  of  analyzing  two  data  sets  with  rather  unusual 
properties.  Both  data  sets  arc  characterized  by  a  mixture 
of  data  types,  nonhomogeneous  variable  relationships, 
and  different  degrees  of  influence  of  the  variables. 
Several  well  known  and  often  used  statistical  approaches 
have  been  applied  with  the  goals  of  uncovering  the 
relationships  among  the  variables  and  providing  accurate 
predictions.  These  approaches  have  included  multiple 
regression  analysis,  the  MannAVhitney  test,  Kruskal- 
Wallis  analysis  of  variance  by  ranks,  and  cluster  analysis. 
However,  none  of  these  methods  concurrently  handle  the 
nonstandard  data  structures,  mixture  of  data  types, 
nonhomogenous  variable  relationships,  and  different 
degrees  of  influence  of  the  variables.  Even  the  combined 
results  of  these  procedures  have  not  provided  an  effective 
means  of  analysis,  and  it  is  expected  that  some 
information  has  been  lost. 
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As  an  alternative  to  these  standard  parametric 
procedures,  the  BRL  is  investigating  employing  a  recently 
published  classification  tree  methodology  to  these  data 
sets.  Similar  to  other  published  classification  tree 
methodologies,  Breiman  ct  al.’s  methodology  provides 
predictions  by  constructing  binary  trees.  However,  unlike 
other  analytical  techniques,  Breiman  et  al.’s  classification 
tree  structured  methods  concurrently  handle  nonstandard 
data  structures,  a  mixture  of  data  types, 
nonhomogeneous  variable  relationships,  and  different 
degrees  of  influence  of  the  variables. 

This  paper  will  briefly  describe  the  standard 
parametric  and  nonparamctric  procedures  that  were 
applied  to  the  data  sets,  and  their  associated  deficiencies. 
Following  this  discussion,  Breiman  et  al.’s  classification 
tree  structured  methods  and  the  advantage  of  this  type  of 
analysis  will  be  briefly  described.  Since  work  is  currently 
being  undertaken  to  apply  this  classification  tree 
structure  methodology  to  the  two  available  data  sets,  the 
methodology  will  be  applied  to  a  less  complex  data  set.  A 
subsequent  report,  however,  will  be  published  to  describe 
the  results  of  this  research. 


II.  BACKGROUND 


«.  uata  sets 


In  December  1985,  the  BRL  conducted  a  controlled 
laboratory  experiment,  the  Firepower  Control 
Experiment,  at  the  joint  US  Army  Human  Engineering 
Laboratory  and  BRL  Command  Post  Exercise  Research 
Facility.  AS  part  of  this  statistically  designed  experiment 
iifformation  was  collected  on  Fire  Direction  Officers’ 
(hDOs  )  decisions  on  a  variety  of  targets  being  forwarded 
to  155mm  howitzer  units.  FDOs’  decisions  include 
selecting  the  type,  volume,  and  method  of  firing 
ammunition  on  enemy  targets  by  a  specific  155mm 
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howitzer  firing,  configuration,  ie.,  the  allocation  and 
distribution  of  friendly  fire.  This  data  set  comprises  3,219 
tactical  fire  control  decisions  collected  for  different 
FDOs,  target  types/subtypes,  target  sizes,  types  of  fire 
mission  control  (i  e.,  ■method  of  engagement')  and  initial 
ammunition  basic  loads. 

,  p'-’  of  the  BRL’s  research  in  tactical  computer 

science,  several  unclassified  scenarios  between  friendly 
and  enemy,  forces  in  the  Fulda  Gap  have  been  developed 
under  a  BRL  contract  with  LB&M  Associates,  Inc,, 
Lawton,  OK.  Embedded  within  these  scenarios  are 
decisions  on  allocating  and  distributing  155mm  howitzer 
Ure  on  independent  targets  observed  in  one-hour  periods. 
To  date,  information  associated  with  522  tactical  fire 
control  decisions  has  been  extracted  from  a  portion  of 
these  scenarios. 

Figure  1  summarizes  the  type  of  information 
available  for  the  decisions  in  these  data  sets.  A 
combination  of  categorical  and  numerical  variables 
describes  the  principal  factors  (FDO  through 
ammunition  available)  thought  to  influence  the  FDO’s 
decision  process  as  well  as  the  actual  decision  (allocation 
method  through  type  of  second  munition  fired).  Based  oh 
the  results  of  previous  data  analyses,  it  is  anticipated  that 
these  variables  have  different  degrees  of  influence  and 
exhibit  nonhomogeneity. 

B.  Parametric  and  Nonparamctrlc  Procedures  Applied 

1.  Multiple  Regression  Analysis 

Multiple  regression  analysis  is  an  analytical 
methodology  that  usually  has  one  of  the  following 
primary  goals:  1)  predict  the  value  of  the  dependent 
variable  for  new  values  of  the  independent  variables,  2) 
screen  variables  to  detect  each  variable’s  degree  of 
importance  in  explaining  the  variation  in  response,  3) 
specify  the  functional  form  of  the  model,  or  4)  provide 
estimates  of  each  coefficient’s  magnitude  and  sign.3  By 
applying  multiple  regression  analysis  to  the  data  from  the 
Firepower  Control  Experiment,  it  was  hoped  that  a 
regression  equation  could  be  derived  to  suitably  predict 
the  allocation  method.  Using  a  combination  of  indicator 
factors  for  the  categorical  variables  (e.g,  FDO  and  target 
type/subtype)  and  untransformed  values  for  the 
numerical  variables  (e,g ,  ammunition  load  expressed  as  a 
percentage  of  a  basic  load,  target  size,  and  the  method  of 
engagement),  stepwise  and  "best  subset-  regressions  were 
run  to  predict  the  response  factor  (eg.,  the  allocation 
method). 


rMJ!?PWiSe  re8.ression  was  nm  to  insert  factors  into  the 
regression  equation  based  on  their  partial  correlation 
coefficient  with  the  risponse  factor.4  At  each  step,  the 
cnlenon  of  each  regressor  already  in  the 
Ration  was  compared  to  the  appropriate  tabled  F 
value.  Hie  regressor  was  either  retained  in  the  equation 

notrSKn?nbaSed,-°n  nhe"?er  ,he  si«"S'  °r 
not.  Stepping  continued  until  none  of  the  regressors  could 

and  none  of  the  other  potential  regressors 
could  be  inserted  due  to  the  value  of- their  partial 

Z  ™  T  ??ff,.C'em’  "Best  subset'  regression  wi  then 
run  on  the  stepwise  regressor  variables  to  determine  the 
best  overall  subset  out  of  all  possible  regressions 
according  to  the  maximum  R2  criterion. 

.  **  *  consequence  of  performing  a  least  squares  fit 
of  the  data,  fitted  equations  were  obtained  for  the 
allocation  method.  However,  based  on  the  proportion  of 
variance  accounted  for  by  the  regressors  in  the  regression 
equations,  none  of  the  factors  clearly  influenced  the 
allocation  method.  This  suggests  that  other  factors  not 
taLen  into  account  may  influence  FDOs’  decisions  on  an 
allocation  method. 

2.  MannAVhitncy  Test 

One  of  the  objectives  of  the  experiment  was  to  test 
whether  the  amount  of  available  ammunition  affected  the 
number  of  rounds  the  FDO  elected  to  fire  on  a  target. 
Prior  to  comparing  all  FDOs  within  a  given  ammunition 
basic  load  or  comparing  an  individual  FDO  across  the 
three  ammunition  basic  loads,  it  was  desirable  to  examine 
whether  or  not  it  would  be  necessary  to  distinguish 
between  the  adjust  fire  (AF)  and  firc-for*cffcct  (FFE) 
methods  of  engagement.  Since  the  distribution  of  total 
rounds  fired  against  a  target  is  not  known  for  the  two 
employed  methods  of  engaging  a  target,  the 
nonparametnc  Mann-Whitney  test  was  used  to  test 
whether  the  two  independent  random  samples  could  have 
been  drawn  from  two  populations  having  similar 
distribution  functions.  Based  on  the  results  of  the  Mann- 
Whitney  test,  the  samples  associated  with  the  two 
methods  of  engagement  could  not  be  grouped  together 
for  other  statistical  tests. 

3.  Kruskal-Wallls  Test 


Similar .  to  the  Mann-\Vlntncy  test,  the 
nonparametric  Kruskal-Wallis  one-factor  analysis  of 
variance  by  ranks  procedure  was  used  to  examine, /inr, 
the  mean  number  of  rounds  fired  within  each  of  the  three 
different  ammunition  basic  loads  by  each  FDO,  and 
second,  the  mean  number  of  rounds  fired  by  each  of  the 
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three  FDOs  within  a  given  ammunition  basic  load.  It 
was  concluded  from  the  test  that  there  were  significant 
differences  within  an  ammunition  basic  load  in  the  mean, 
number  of  rounds  fired  by  each  FDO  against  an 
individual  target.  In  addition,  test  results  showed  that 
only  one  of  the  FDOs  tended  to  fire  on  average  more 
rounds  against  a  target  under  at  least  one  of  the 
ammunition  basic  loads  than  under  at  least,  one  of  the 
other  basic  loads.  For  the  random  samples  resulting  in 
rejection  of  the  null  hypothesis,  vi£,  no  difference  in  the 
mean  rounds  fired  against  a  single  target,  additional 
pairwise  Kruskal- Wallis  tests  were  performed. 

4.  Cluster  Analysis 

Cluster  analysis  was  employed  to  categorize  targets 
according  to  their  importance  based  on  their  contribution 
to  an  enemy  force  in  a  particular  tactical  situation,  i.e , 
their  target  value.  There  are  several  ways  to  measure 
the  value  of  the  target.  For  example,  one  way  could  be  to 
use  several  variables  to  measure  the  description,  location, 
and  activity  of  the  target.  A  description  of  the  target 
might  include  its  type/subtype,  size,  and  degree  of 
protection.  The  location  of  the  target  might  consider  the 
actual  grid  location  of  the  target,  the  altitude  of  the 
target,  and  the  distance  between  the  target  and  specific 
friendly  units.  The  activity  of  the  target  might  take  into 
account  its  speed  and  direction  of  movement. 

Cluster  analysis  provided  a  multivariate  statistical 
method  to  examine  the  interrelationships  between  the 
target  description,  the  FDOs,  and  the  initial  ammunition 
load  expressed  as  a  percentage  of  a  basic  load.  Target 
value  was  based  on  the  mean  number  of  rounds  expended 
against  an  individual  target.  Targets  were  categorized 
into  three  target  value  clusters,  i.e ,  TowVfair",  or ’high', 
based  on  the  minimization  of  the  Euclidean  distance 
between  each  target  and  the  mean  of  the  targets  in  the 
cluster. 

C.  Deficiencies  Among  the  Analyses 

Despite  the  fact  that  each  of  these  statistical 
procedures  is  well  known  and  used,  they  have  several 
shortcomings  with  regard  to  the  problems  inherent  to  the 
Firepower  Control  Experiment  data  set.  For  instance, 
these  methods  do  not  concurrently  handle  nonstandard 
data  structures,  mixtures  of  data  types,  nonhomogeneous 
variable  relationships,  and  different  degrees  of  influence 
of  the  variables.  Subsequently,  it  is  expected  some 
information  has  been  lost. 
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Thus,  the  combined  results  of  these  procedures  do 
not  provide  an  effective  means  of  analyzing  the 
experimental  results  concerning  the  allocation  and 
distribution  of  155mm  howitzer  fire  for  enemy  targets. 
For  instance,  cluster  analysis  provides  a  coarse  evaluation 
of  a  target’s  value  based  on  the  initial  ammunition  load, 
its  type/subtype,  and  FDO.  The  "best  subset"  multiple 
regression  equations  provide  only  weak  relationships 
between  the  FDO,  allocation  method,  target  type,  target 
size,  method  of  engagement,  and  initial  ammunition  load. 
Thus,  the  question  remains,  "Is  this  a  result  of  variables 
measured  in  the  experiment  or  a  consequence  that  these 
procedures  could  only  be  focused  on  limited  subsets  of 
the  data  collected?"  Subsequently,  a  search  for  a  different 
meaiis  of  analyzing  this  data  has  been  undertaken. 


HI.  CLASSIFICATION  TREE  METHODOLOGY 
A,  Background 

Trees,  whether  known  as  decision  trees,  binary 
trees,  or  by  some  other  name,  have  been  used  by  data 
analysts  as  an  informative  nonparametric  tool  for 
investigating  various  types  of  data  sets.  Tree  classification 
methods  use  the  data  to  form  prediction  rules  for  a 
response  variable  based  on  the  values  of  independent 
variables.  Specifically,  measurements  are  made  on  some 
object,  and  a  prediction  rule  is  then  used  to  decide  to 
what  class  the  object  belongs,  This  methodology  is  so 
simple  that  it  is  often  passed  over  in  favor  of  other 
methods  which  are  thought  to  be  more  accurate,  such  as 
discriminant  analysis. 

Recent  developments  in  the  area  of  structured 
classification  trees,  which  have  been  published  by 
Brciman  et  a!.,  are  aimed  at  strengthening  and  extending 
the  original  tree  methodology.  Their  advancements  have 
been  incorporated  into  a  statistical  software  package 
known  as  CART™  (Classification  and  Regression 
Tirces).  Given  complex  data  sets  with  many  independent 
variables,  the  developers  of  CART  believe  that  the 
structured  trees  produced  by  CART  can  have  error  rates 
significantly  lower  than  those  produced  by  the  usual 
parametric  techniques.  These  procedures  are  robust,  i.e , 
they  minimize  the  effects  that  data  outliers  might 
produce. 

The  advancements  made  in  the  area  of  structured 
tree  methodology  aie  significant  enough  to  warrant 
investigation  and  application  to  the  problems  of 
allocating  and  distributing  155mm  howitzer  fire. 

B.  Overview  of  the  CART  Methodology 

1.  Definitions 

Many  of  the  statistical  techniques  presently  available 
are  designed  for  small  data  sets  having  a  standard  data 
structure.  By  a  standard  data  structure  we  mean  that 
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there  are  no  missing  values  among  the  measurements 
made  on  an  object,  or  so  few  they  may  be  estimated  prior 
to  analyzing  the  data  In  addition,  the  variables  all  have  to 
be  of  the  same  type,  i.e.,  all  numerical  or  all  categorical. 
The  underlying  assumption  of  the  data  is  that  the  driving 
phenomenon  is  homogeneous,  i.e.,  the  same  relationship 
holds  over  the  entire  set  of  measurements  made  on  the 
object  in  question. 

The  data  available  to  study  the  problem  of  allocating 
and  distributing  friendly  fire  on  enemy  targets  does  not 
meet  the  above  criteria.  In  both  data  sets,  values  for 
several  of  the  measurements  used  to  describe  an  enemy 
target  may  be  missing  or  must  be  assumed  not  available 
for  any  number  of  reasons.  The  variable  list  comprising  a 
target’s  description  (location,  activity,  description,  etc.)  is 
a  mixture  of  numerical  and  categorical  variable  types. 
Finally,  we  cannot  realistically  expect  the  same 
relationships  to  hold  amongst  the  wide  range  of 
measurements  made  on  a  target. 

2.  Constructing  a  Classification  Tree 

To  construct  a  structured  tree,  four  elements  arc 
needed:  1)  a  set  of  binary  questions  of  the  form: 
Is  x€A?}  AC X,  where  x  is  the  measurement  vector 
defining  the  measurements  (r,,x2, ...)  made  on  a  case, 
and  A' is  defined  as  the  measurement  space  containing  all 
possible  measurements,  2)  a  goodness  of  split  criterion 
that  can  numerically  evaluate  any  split  of  any  node  of  the 
tree,  3)  a  rule  which  dictates  when  to  continue  splitting 
the  node  or  to  declare  it  a  terminal  node,  and  4)  a  rule 
for  assigning  every  terminal  node  to  a  class.  The  set  of 
binary  questions  generates  a  set  of  splits  of  every  node. 
Those  cases  answering  "yes"  go  to  a  left  descendant  node, 
while  those  answering  "no"  go  to  a  right  descendant  node. 

3.  Features  and  Advantages 

Breiman  et  al.’s  methodology  for  classification  trees 
appears  to  be  a  powerful  and  flexible  analytical  tool. 
Some  of  its  major  features  and  advantages  over  other 
methods  will  be  very  briefly  outlined. 

One  of  the  more  important  aspects  of  the  CART 
methodology  is  its  ability  to  automatically  handle  missing 
values  while  minimizing  the  loss  of  information.  This  is 
achieved  via  the  concept  of  surrogate  splitting. 

To  understand  surrogate  splitting,  two  splits  are  said 
to  be  associated  at  a  node  if  either  of  two  conditions 
exists.  If  most  of  the  cases  are  sent  to  the  left  or  to  the 
right  by  one  split,  and  the  other  split  also  sends  most  of 
the  cases  in  the  same  direction,  the  two  splits  are  said  to 
be  strongly  associated.  The  splits  are  also  associated 
when  one  split  sends  most  of  the  cases  to  the  left  (right) 
while  the  other  split  sends  most  of  the  cases  to  the  right 
(left).  The  missing  value  algorithm  then  proceeds  as 
follow’s.  The  CART  methodology  is  designed  to  initially 
search  through  all  possible  splits  on  a  given  node  and 


select  the  best  split.  For  example,  suppose  the  best  initial 
split  is:  Is  x(5)  >  34.1?,  All  other  variables  except  x(5) 
will  then  be  searched  until  the  split  on  each  variable 
which  is  most  closely  associated  with  the  split  on  x(5)  is 
found.  This  series  of  splits  might  result  in  a  list  such  as 
the  following: 

x(2)  >  26.2  is  the  most  closely  associated  with  x(5)  >  34.1, 

x(ll)  >  50.6  is  the  second  most  closely 

associated  with x(5)  >  XI, 

and  so  forth.  These  splits  are  the  surrogate  splits  for  the 
initial  split:  Isx(5)  >  34.1?. 

If  a  case  has  a  missing  value  of  x(5)  so  that  the  best 
split  is  not  defined  for  that  case,  CART  then  looks  at  all 
nonmissing  variables  in  that  case  and  finds  the  one  having 
the  highest  measure  of  predictive  association  with  the 
best  split.  In  this  example,  CART  would  first  look  at  the 
most  closely  associated  surrogate  split.  For  example,  if 
the  value  of  x(2)  is  not  missing,  then  the  case  would  go 
left  if  x(2)  >  26.2  and  right  otherwise. 

This  procedure  is  analogous  to  the  one  used  to 
estimate  the  missing  values  in  a  linear  model  (viz., 
regression  on  the  nonmissing  value  most  highly 
correlated  with  the  missing  value).  However,  the  CART 
missing  value  algorithm  is  more  robust.  The  cases  with 
missing  values  in  the  selected  splitting  variable  do  not 
determine  which  direction  the  other  cases  will  take. 
Given  further  splitting,  cases  sent  in  the  wrong  direction 
due  to  the  missing  value  algorithm  may  still  be  classified 
correctly. 

Since  variables  do  not  act  alone  when  predicting  a 
classification,  it  is  natural  to  question  which  variables 
played  the  role  of  predictors.  In  the  construction  of  a  tree 
there  may  be  instances  in  which  some  of  the  variables  are 
never  used  to  split  any  node;  however,  this  does  not 
necessarily  mean  these  variables  lack  any  predictive 
information.  Therefore,  each  variable  is  assigned  a 
measure  of  importance  which  may  be  helpful  to  the 
analyst  in  uncovering  variables  otherwise  glossed  over 
when  looking  at  only  the  splits  from  the  final  selected 
tree.  One  note  should  be  made.  Like  many  variable 
ranking  procedures,  this  one  is  a  bit  subjective  and  the 
exact  numerical  values  should  not  be  interpreted 
precisely. 

Other  features  which  do  not  require  such  an  in* 
depth  discussion  are  the  following:  1)  ability  to  handle 
both  numerical  and  categorical  variables  in  a  natural  and 
simple  fashion,  2)  application  to  any  type  of  data 
structure  through  the  formulation  of  an  appropriate  set 
of  binary  questions,  3)  a  variable  selection  process  closely 
resembling  a  stepwise  procedure  since  a  search  is  made 
at  each  intermediate  node  for  the  most  significant  split, 
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and  4)  in  the  overall  measurement  space  X,  the  trees 
suggest  the  property  of  robustness,  while  within  the 
learning  set  the  method  is  not  appreciably  affected  by 
several  misdassified  points. 

C  Digit  Recognition  Example  Using  the  CART 
Methodology 

The  following  digit  recognition  example  wjs 
constructed  by  the  authors  of  CART  and  illustrates  the 
various  parts,  of  the  classification  portion  of  the 
methodology. 

Most  of  us  are  familiar  with  electronic  calculators 
which  orduiarily  represent  the  digits  1, ....  9,  ar  housing 
seven  horizontal  and  vertical  lights  in  speu  on-off 
combinations.  If  the  lights  are  numbered  as  shown  in 
Figure  2,  then  i  denotes  the  ith  digit,  i  «  1, 2,  9,  and  0, 

and  the  measurement  vector  (xn,..,xn)  is  a  seven- 
dimensional  vector  of  zeros  and  ones  Let  .r„,=l  if the 
light  in  the  mth  position  is  'on"  for  the  ith  digit,  otherwise 
x,m =0.  Table  1  presents  the  possible  values  of  xm. 


Figure  2.  Horizontal  and  Vertical  Lights. 

Set  the  number  of  classes  C  «  {1,  10}  and  let  the 

measurement  space  X  contain  all  possible  7-tuplcs  of 
zeros  and  ones. 

Suppose  the  data  for  this  problem  are  generated 
from  a  faulty  calculator  for  which  it  is  known  that  each  of 
the  seven  lights  has  the  probability  of  0.1  of  not 
functioning  properly.  The  data  consist  of  outcomes  from 

the  random  vector  (X, . Y)  where  Y  is  the  class 

label  and  assumes  the  values  1,  . .,  10  with  equal 

probability  and,  as  noted  previously,  the  X, . X,  are 

zero-one  variables.  Given  Y,  the  X7, ...,  X3  are 
independently  equal  to  the  value  corresponding  to'Y  in 
Table  1  with  probability  0.9  and  are  in  error  with 
probability  0.1. 


•  •  li  K  on  Uui»Me  Ha  «  u  Sj 

•is  ..non  « ihsv  «<!»*.  u*  e*r»<  »<»  I''-1""1  Im  I*  P"!”" 
vu  <*«  tsKnlrf  Sy  us  w*!*  1“  r>)i 

»V> «<iuj a«  >vtum  «i> *• 
Of,taU  iiu  v«  l  10  r.>  IS.  Ml  noCsouBy  tart  hwtwr,  ths  Ciu  ifl  IK 

Su»«U,4<SKUlK0.ipul«lli-  TKrtfcrtlKr,utitr*t.rc4Wcprortta4i« 

Urn  p^«  ^  **•>  “»■  ““ 


Table  I.  Possible  Values  ofz,^. 


Digit 

*1 

*2 

*3 

*4 

*s 

*6 

*7 

y 

1 

0 

0 

1 

0 

0 

1 

0 

1 

2 

1 

0 

1 

1 

1 

0 

1 

2 

3 

X 

0 

1 

1 

0 

1 

1 

3 

4 

0 

1 

1 

1 

0 

1 

0 

4 

S 

1 

1 

0 

1 

0 

1 

1 

5 

6 

1 

1 

0 

1 

1 

1 

1 

6 

7 

A 

0 

1 

0 

0 

1 

0 

7 

S 

1 

1 

1 

1 

1 

1 

1 

8 

9 

1 

1 

1 

1 

0 

1 

1 

9 

0 

1 

1 

1 

0 

1 

1 

1 

10 

The  learning  sample  L  is  comprised  of  two  hundred 
samples  which  arc  generated  using  the  above  distribution. 
Each  sample  in  L  is  of  the  general  form  (*,,  ...x,,/) 
where  j  6  C  is  the  class  label  and  the  measurement  vector 
X[,...,x7  consists  of  zeros  and  ones. 

As  mentioned  in  Section  III.B.2,,  to  apply  the  CART 
structured  classification  construction  on  four  things 
must  be  specified:  1)  the  set  of  questions,  2)  a  rule  for 
selecting  the  best  split,  3)  a  criterion  for  choosing  the 
right-sized  tree,  4)  a  role  for  assigning  every  terminal 
node  to  a  class.  Here  the  question  set  consisted  of  the 

seven  questions:  Isxm  ”  0?,  where  m  a  1 . 7.  The  Gini 

index  of  diversity  rule  was  used  to  select  the  best  split. 
The  concept  of  this  splitting  criterion  depends  on  a  node 
impurity  measure.  Given  a  node  n  with  estimated  class 

probabilities  p(j  \  n),j  “  1 . J,  and  the  probability  that 

given  a  randomly  selected  case  of  unknown  class  falls  into 
node  t  it  is  classified  as  class  j,  define  a  measure  i(n)  of 
the  impurity  of  the  given  node  n  as  a  nonnegative 

function  d  of  the  />{1 1  n) . p(J  |  n).  Subsequently,  the 

Gini  index  of  diversity  takes  the  form: 
i(n)  »  £/'(/ 1  n)p(i  |  n).  This  node  impurity  is  largest 

when  alf  classes  arc  equally  mixed  together  in  the  node 
and  smallest  when  the  node  contains  only  one  class.  A 
search  is  made  for  the  split  that  most  reduces  the  node, 
and  consequently  tree,  impurity.  The  U-fold  crpss- 
validation  method  was  used  to  'prune'  to  the  right-sized 
tree.  Here  the  original  learning  sample  L  was  divided  by 
random  selection  into  V  subsets  v  ®  1. --,  K  of  nearly 
equal  size.  The  vth  learning  sample  is:  V"’  •>  L-Zv  v  = 
1, ....  V,  where  L(,)  contains  approximately  (U-l)/  ,/''t  the 
total  data  cases.  Assume  that  a  classifier  can  be 
constructed  using  any  learning  sample.  Them  for  every  v, 
apply  the  classification  procedure  and  let  <f  '(x)  lie  the 
resulting  classifier.  Since  none  of  the  cases  in  Lv  was  used 
to  construct  ri<,),  a  sample  estimate  of  the  overall  tree 
misdassification  rate  uay  be  calculated,  and  a  classifier 
is  now  constructed  using  the  entire  original  learning 


sac jple  L.  A  suggested  assesses!  nue  is  to  dassihr  a 
terminal  code  «  as  thzl  dass  £ x  which  iV(n)  is  fcsgsS. 
where  jV<n)  is  the  camber  of  class/  cfcservadocs  a  n. 

Tbc  resulting  dassifka^oa  tree  is  shown  in  Figere 
3-*  The  question  Jeafcg  to  a  spSi  is  cxSeated  cSrcc^r 
underneadi  each  intermediate  node.  If  the  qocstSoo  is 
answered  affirmatively,,  the  split  is  to  the  left;  if  zx  is 
answered  negatively,  the  spHl  is  to  the  riglm  Note  that 
there  arc  11  .terminal  >ix3es,  each  corresponding  to  at 
least  one  class  with  das;  3  having  a  second  terminal 
node.  Generally  speaking,  a  one-to-one  correspondence 
occurs  by  accident  since  any  number  of  terminal  codes 

may  correspond  to  a  particular  class,  or  some  dasses  C2y 

have  no  corresponding  terminal  nodes.  I;  2lso  should  be 
noted  that  the  terminal  node  dass  is  determined  by  the 
most  predominant  digit  that  falls  into  the  terminal  code. 


The  overz3  prtfcahcSy  cf  mvtosffjiag  a  near 

seqfe  pra  the  congroced  dbssfxr  (and  the  abosc 
fixed  Jearmcg  sampSe)  was  estimated  as  Q3L  Tat>  csber 
estimates  c£  R% f)  were  also  esc yard:  1)  the  cross* 
vadaico  esduree,  and  2)  the  resrfsskmxn  estimate 
Since  the  teaming  sample  l  oust  be  csed  a  zmd 
proMesastococsgpctbochthedassifieraadsoesdmaTr 
R\l),  these  estimates  are  referred  to  as  imerc2l 
estimates.  The  crcss-vahdgioQ  drrsr.r  mas  estimated  as 
032  -  satisfactorily  dose  to  /?*(/).  The  resnbsdtsdoo 
estimate  was  also  calaabted  to  be  032.  This  particular 
estimate  identifies  the  pccpoctioo  of  cases  from  the 
learning  sampSc  winch  is  misdassified  once  the  set  is  na 
through  the  constructed  classifier.  Using  the  K-foSd 
cross- vaSdaiicn  method  explained  earBer,  such 
estirnmers  come  satisfactorily  dose  to  R*jQ. 


*  TV  nuM  med  *>cft  BtooiSt  acdiu/ai*  etc  liSm  teoflurfC* 
lot 
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Y  =  Yes 
N«No 
0  «  On 
1  =Off 


I — ! 
1— 1 
L,J 


n,, n10  =  intermediate  nodes 
□  n  terminal  node 


terminal  node  classes 


Figure  3.  Digit  Recognition  Classification  Tree. 
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IV.  CONCLUSIONS 


Tbs  ciaisSagao  tree  ssrrccred  ce&odti egy 
by  Erenran  es  zi  erreerfv  sescs  to  be  a 
rebSc  £^7?axh  to  zsih-a-g  the  avsZs&e  fea  sets. 
A^atgS  the  regresswa  tree  poetkn  of  Brer-^o  gj  2!'$ 
ne-hod ■’^cy  h»  not  bees  eerrr^d  in  feaS.  si  £*<o  iray 
be  snc'bsr  reel's  of  tbs  fea.  LT  tbs  esse  of 

the  izz  froa  the  Rrcpc^er  CoctroJ  Espernra,  it 
sbocJd  be  i^rrestirg  to  coc^ere  tbs  rcschs  of  the  rs£ti. 
p5e  r«^e«»3  srebss.  MrT-^jry  test.  Kn^is!- 
WsSfew.  s=d  chtser  a^Vs  to  the  CART  reschs. 
nV«  is  arrcdV  befrg  rsfe^co  to  £?;\  the 
«&*3S&£r"  tree  kruerre  p^hodoVjgy  developed  by 
Br-  CL  al  to  the  two  avafSaKe  fea  sets.  A  subss- 
c*r*»  rex*n  uf!J  deserve  the  resets  of  these  rvestfga- 
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ABSTRACT 

This  study  identifies  some  of  the  ways  in  which  human 
beings  can  make  a  contribution  to  the  effectiveness  of  a 
Strategic  Defense  Initiative  (SDI)  system.  The. study  con¬ 
centrates  pn  key  human  roles  in  the  SDI  command  center 
during  the  peacetime  and  transition  phases  of  system  oper¬ 
ations,  focusing  on  the  critical  task  of  situation  assess¬ 
ment.  The  study  identifies  the  functions  that  support 
situation  assessment  decision  making,  and  analyzes  the 
flow  of  information  among  functions  leading  up  to  a 
decision. 

This  network  of  interdependent  functions  was  captured 
in  a  Stochastic,  Timed,  Attributed  Petri  Net  (STAPN)  model 
of  the  critical  information  flows  supporting  situation 
assessment  in  the  command  center.  The  function  of  the 
model  was  to  allow  sensitivity  analysis  of  command  center 
reaction  times.  The  model  produces  estimates  of  the  lime 
required  to  reach  a  decision  after  an  event  has  occurred  under 
diffe—'t  assumptions  about  the  organization  of  the 
command  center,  the  architecture  of  the  command  and  con¬ 
trol  system,  and  the  delegation  of  authority. 


INTRODUCTION 

The  Strategic  Defense  Initiative  (SDI)  program  is  a 
technologically  complex  and  ambitious  undertaking.  Iden¬ 
tifying  the  appropriate  role  for  human  decision  making  in 
the  resulting  system  architecture  is  a  challenging  task. 
Although  there  has  been  a  consensus  from  the  beginning  of 
the  program  that  human  involvement  in  strategic  defense 
decisions  is  essentia),  there  arc  significant  practical  limits 
on  the  role  that  can  be  played  by  humans.  The  issue  is 
how  to  define  and  support  the  role  of  human  decision 
making,  given  the  characteristics  and  limitations  of  human 
information  processing  capabilities.  If  meaningful  human 
roles  arc  to  be  established  in  an  SDI  system,  early  incor¬ 
poration  of  human  factors  analysis  in  system  design  is 
indispensable. 

The  purpose  of  this  study  was  to  identify  ways  in 
which  humans  can  best  make  a  contribution  to  the  effec¬ 
tiveness  of  an  SDI  system,  based  on  analysis  of  potential 
human  roles  and  activities  in  system  operations.  Our  goal 
was  to  idertify  requirements  and  objectives  for  human  per¬ 
formance,  and  to  trace  the  flow  of  information  supporting 
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human  functions  within  the  system.  This  study  focuses  on 
human  roles  in  the  SDI  Command  Center  during  the  peace¬ 
time  and  transition  phases  of  system  operations.  The 
command  center  is  the  place  where  the  most  critical  human 
activities  will  take  place  in  an  SDI  system.  The  peacetime 
and  transition  phase  was  selected  for  study  because,  even 
though  peacetime  activities  will  form  the  vast  majority  of 
all  SDI  activities,  very  little  analysis  has  been  devoted  to 
this  phase. 

The  key  roles  for  humans  in  the  command  center 
involve  authority,  responsibility,  accountability,  and  coor¬ 
dination.  Human  beings  must  exercise  authority  over  the 
system.  They  must  take  responsibility  for  system  status 
and  readiness,  and  for  the  validity  of  system  inputs.  They 
must  also  be  accountable  to  higher  authority  for  all  actions 
taken.  Finally,  they  must  coordinate  with  each  other  in 
order  to  cany  out  the  system  objectives. 

Our  task  was  to  analyze  peacetime  and  transition  func¬ 
tions  for  selected  SDI  subsystems.  We  have  chosen  to 
focus  our  analysis  on  situation  assessment  functions  m  the 
command  center.  Situation  assessment  involves  the 
weighting  and  fusing  of  many  different  types  of  infor¬ 
mation.  including  operational  information  about  the  func¬ 
tioning  of  the  SDI  system  and  intelligence  information 
about  the  state  of  the  world,  into  an  overall  picture.  Situa¬ 
tion  assessment  draws  on  the  unique  capabilities  of  human 
beings  to  merge  and  interpret  information,  and  provides  a 
fertile  area  for  investigating  effective  human  roles  in  SDI. 

The  analysis  of  control  functions  in  complex  systems, 
and  the  allocation  of  system  functions  to  humans  and 
machines,  have  been  topics  of  considerable  interest  in 
recent  years.  A  methodology  for  functional  allocation  has 
been  proposed  for  nuclear  power  plants  (Pulliam  ct  al„ 
1983)  and  generalized  for  application  to  aerospace  systems 
(Pulliam  and  Price,  1985).  The  first  stage  in  this  method¬ 
ology  is  the  identification  of  those  functions  for  which 
automation  is  mandatory,  and  those  functions  that  must  be 
performed  by  humans.  A  series  of  considerations  and  sug¬ 
gestions  is  then  given  for  allocating  those  functions  that 
fall  into  the  grey  area  between  mandatory  automation  and 
mandatory  human  responsibility. 

Our  analysis  concentrates  on  the  first  step  of  this 
allocation  process  by  identifying  the  key  decisions  that 
must  be  made  by  human  beings.  We  then  consider  the  sup¬ 
port  requirements  for  these  decisions.  What  must  the  deci¬ 
sion  maker  know  in  order  to  make  the  decision,  and  what 
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zic  the  sources  of  this  information?  The  analysis  drew  on 
published  materials  about  SDI  command  and  control  func¬ 
tions  (SDI  BM/C3  Working  Group  for  Standards.  July 
19S7J,  as  well  z s  SDI  architecture  reports  prepared  by  con¬ 
tractors.  (A  list  of  SDI  architecture  reports  reviewed  for  the 
project  is  included  in  the  references  section.)  We  also  ana¬ 
lyzed  existing  system  architectures  for  systems  with  some 
similarity  to  SDI.  especially  NORAD  architectures. 
(NORAD  reports  reviewed  are  listed  in  the  references 
section.) 


SITUATION  ASSESSMENT  FUNCTIONS 

Situation  assessment  is  the  process  of  integrating 
information  from  multiple  sources  to  form  a  coherent  pic¬ 
ture.  The  SDI  command  center  must  assess  both  its  own 
internal  situation  and  the  external  world  situation,  and 
combine  them  into  a  total  situation  assessment  that  sup¬ 
ports  critical  decisions. 

The  data  for  internal  situation  assessment  come  from 
monitoring  the  SDI  system.  This  monitoring  produces 
detailed  data  on  system  functioning  over  time,  and  is  the 
first  step  in  identifying  any  problems  in  sensor  capability 
Based  on  this  health  and  status  data,  the  command  center 
must  assess  current  and  projected  sensor  capabilities,  iden* 
ufy  adjustments  and  fixes  needed,  estimate  the  time  needed 
to  make  these  changes,  and  make  a  set  of  critical  decisions. 

The  data  for  external  situation  assessment  come  from  a 
variety  of  intelligence  sources  as  well  as  from  higher 
authority  (c.g..  DEFCON  level).  External  situation 
assessment  is  the  process  of  fusing  data  from  multiple 
sources  into  an  overall  picture  of  the  current  world  situ¬ 
ation.  As  part  of  this  process,  indicators  and  warnings  arc 
generated  that  reflect  world  tension  levels  and  enemy  activ¬ 
ities.  Another  activity  of  external  situation  assessment  is 
the  estimation  of  possible  time  lines  for  enemy  actions. 
Based  on  intelligence  data,  what  is  the  earliest  time  that  an 
attack  might  occur? 

Assessments  of  the  internal  and  external  situation  must 
be  combined  with  information  about  system  readiness 
requirements  to  make  an  overall  assessment  of  the  situ¬ 
ation.  Any  problems  with  sensor  capability  must  be  eval¬ 
uated  in  the  context  of  world  events.  Even  minor  problems 
with  the  surveillance  system  may  be  of  great  concern  if 
DEFCON  level  is  high,  and  certain  critical  indicators  and 
warnings  arc  present.  TTie  time  needed  to  adjust  or  fix  sen¬ 
sors  must  bo  evaluated  in  comparison  to  the  estimated  time 
of  earliest  enemy  actions.  For  example,  sensor  problems 
that  can  be  adjusted  or  repaired  before  the  earliest  estimated 
time  of  an  enemy  attack  are  not  as  serious  as  problems  that 
cannot  be  fixed  within  the  estimated  time  available.  Based 
on  the  total  internal  and  external  situation,  the  command  # 
center  must  evaluate  the  adjustments  that  can  be  achieved  * 
within  the  estimated  time  available  and  to  determine  the 
resulting  projected  defense  capabilities. 

Five  critical  decisions  that  must  be  made  by  humans  in 
the  command  center  during  peacetime  and  transition  were 
identified,  based  on  the  total  situation  assessment: 


Adjust _ sensor  scnsjtWity  thresholds.  The  sensitivity 
thresholds  of  the  sensors  may  be  changed  so  that  they  react 
to  lower  or  higher  levels  of  infrared  radiation.  Higher 
sensitivity  levels  are  associated  with  a  higher  probability 
of  detecting  targets,  but  at  the  cost  of  a  higher  probability 
of  false  alarms.  Lower  sensitivity  levels  are  associated 
with  a  lower  probability  of  false  alarms,  but  a  lower  prob¬ 
ability  of  detection. 

Initiate_suryeiHance-Sensor_cool  down.  Sensors  designed  to 
detect  and  track  targets  during  their  midcourse  phase  must 
be  able  to  sense  the  infrared  radiation  of  a  target  against  a 
cold  background.  These  sensors  must  be  cooled  down  to 
temperatures  below  the  temperature  of  their  satellite  envi¬ 
ronment  through  stored  cryogcn,  refrigeration,  or  some 
other  cooling  method.  This  cooling  process  takes  time,  so 
that  sensor  cool  down  must  be  initiated  before  senscr  func¬ 
tion  is  needed.  However,  cooling  capacity  is  limited,  so 
cooling  down  the  sensors  shortens  their  useful  lifetime 
This  may  represent  an  important  "false  alarm"  penalty. 

Enable  .weapons  (as  authorized  by  higher  authority)  Fire 
control  systems  must  be  enabled  before  they  are  needed, 
and  this  process  will  not  be  instantaneous  (Note  that  the 
sensors  guiding  the  weapons  must  be  coded  down  in  the 
same  way  as  the  surveillance  sensors.) 

Rccommend  a  change  in  DEFCQN-level.  Although  the  SDI 
Command  Center  will  not  have  the  authority  to  change  the 
DEFCON  level,  it  may  make  recommendations  to  higher 
authority  about  such  changes  and  provide  supporting 
information. 

itognunaid  w.k1k\  Rvto  of  Enfimmcm.fRflfe)  mans 

Rules  of  engagement  specify  actions  to  be  taken  in 
response  to  different  situations.  Based  on  their  situation 
assessment,  the  SDI  command  center  may  decide  to  rec¬ 
ommend  a  change  to  the  ROE  option  currently  in  effect 
ROE  changes  may  alternatively  be  selected  within  the 
command  center,  depending  on  operating  doctrine  yet  to  be 
determined. 

Of  all  the  activities  to  be  earned  out  in  the  command 
center,  these  five  require  drawing  conclusions  about  the 
meaning  of  information  and  making  decisions  based  on 
those  conclusions.  Total  situation  assessment  requires  the 
complex  integration  and  interpretation  of  data  from  mul¬ 
tiple  sources,  much  of  the  data  will  not  be  m  precisely 
defined  quantitative  form.  This  is  an  area  in  which  human 
performance  is  still  consistently  superior  to  machine  per¬ 
formance.  Finally  and  most  importantly,  the  decisions 
based  on  that  assessment  must  be  made  by  human  decision 
makers  because  humans  must  take  final  responsibility  for 
the  system's  actions.  Thus,  there  is  an  essential  human 
role  in  those  command  center  functions. 


H  GW  OF  INFORMATION  AMONG  FI  INCTIONS 

Figure  1  shows  the  flow  of  information  among  the 
functions  that  support  situation  assessment  Some  major 
themes  emerge  from  the  analysis  of  information  flow  in 
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Figure  I.  Overview  of  Information  Flow  in  Situation  Assessment 
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situation  assessment.  The  first  is  the  idea  that  data  are 
converted  into  information  through  successive  analysis  and 
aggregation.  Data  on  systems  operation  arc  processed  at 
successive  levels  of  detail,  starting  with  the  detailed  Taw 
data  about  the  individual  operations  of  every  sensor  in  the 
system,  and  leading  up  to  a  global  overview  of  system 
sutus  based  on  aggregated  data. 

The  functions  involved  in  this  process  progress1  from 
maintaining  the  system,  at  the  lowest  level  of  aggregation, 
to  monitoring  system  operations,  at  a  higher  level  of 
aggregation,  to  assessing  system  status,  at  the  highest 
level  of  aggregation.  The  assumption  is  made  that  data  arc 
analyzed,  aggregated  and  passed  upward  at  each  successive 
level  For  example,  a  person  at  the  lowest  level  might  sec 
extensive  data  on  an  individual  sensor,  while  a  person  at 
the  highest  level  would  see  aggregated  data  for  all  sensors 
in  the  system. 

Evidence  of  enemy  ASAT  action  might  be  detected  at 
any  point  in  this  aggregation  process.  An  enemy  action 
might  be  noticed  at  the  lowest  level  for  an  individual  sen* 
sor,  or  it  might  not  be  detected  until  the  data  were  aggre¬ 
gated  and  a  global  pattern  could  be  seen.  At  the  point  that 
an  ASAT  action  is  noticed,  we  have  assumed  that  it  would 
be  reported  directly  to  the  decision  function  at  the  com* 
mand  center. 

External  situation  assessment  takes  place  under  the 
intelligence  processing  component,  which  produces  real¬ 
time  indicators  and  warnings  that  are  passed  directly  to  the 
decision  component,  and  more  traditional  indicators  and 
warnings  that  arc  passed  to  both  the  situation  assessment 
component  and  the  decision  component. 


Information  about  both  the  internal  and  external  situ¬ 
ation  come  together  in  the  total  situation  assessment 
component.  Questions  about  the  world  situation  are 
referred  back  to  intelligence  processing,  and  questions 
about  the  time  required  to  fix  any  sensor  problems  are 
referred  back  to  surveillance  maintenance.  The  total  situa¬ 
tion  assessment  component  of  the  model  passes  on  any 
sensor  problem  judged  to  be  serious  (when  evaluated  in  the 
context  of  the  world  situation)  to  the  decision  component. 
If  there  is  insufficient  time  to  fix  the  sensors  before  the 
earliest  estimated  enemy  action,  this  also  generates  a  mes¬ 
sage  to  the  decision  component. 

Another  theme  of  information  flow  is  the  presence  of 
an  authorization  loop  for  critical  decisions,  Once  a 
decision  has  been  made,  it  is  passed  to  higher  authority  as 
a  recommendation.  If  authorization  is  received,  then  a 
command  is  issued.  Authority  structure  has  not  been 
defined  officially  for  the  SDI  command  center.  However, 
we  assume  that  at  least  some  of  the  decisions  made  in  the 
command  center  would  require  authorization  by  higher 
authority  before  action  could  be  taken. 


Events  in  the  real  world  are  linked  to  decisions  in  the 
command  center  through  the  flow  of  information.  The 
architecture  of  the  command  and  control  system  and  the 
organization  of  the  command  center  will  determine  the  path 
of  this  information  flow.  Although  the  system  architecture 
and  the  organization  for  the  SDI  command  center  have  not 
yet  been  precisely  defined,  we  acre  able  to  trace  the  flow  of 
information  among  command  system  functions  by  making 
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a  set  of  reasonable  assumptions  about  system  architecture 
and  organization.  This  paper  analyzes  the  effects  of  vary¬ 
ing  some  of  these  assumptions. 

The  purpose  of  the  situation  assessment  model  is  to 
support  sensitivity  analysis  of  the  time  required  to  make 
decisions  under  different  assumptions  about  the  architecture 
and  organization  of  the  command  center.  The  point  of  the 
model  is  not  to  provide  absolute  answers,  but  to  allow 
meaningful  comparisons.  It  provides  a  framework  for  ask¬ 
ing  questions  about  the  effects  of  changes  in  such  command 
center  design  variables  as  centralization  of  functions,  lines 
of  communication,  distribution  of  expertise,  and  structure 
of  authority. 

The  time  required  to  make  a  decision  following  an 
event  was  selected  as  the  central  variable  for  the  sensitivity 
analysis  because  of  the  critical  time  requirements  for  SDI 
decisions.  Minutes  and  seconds,  rather  than  hours,  will  be 
the  meaningful  units  for  analyzing  SDI  command  center 
reaction  times.  Obviously,  the  accuracy  of  decisions  will 
also  be  extremely  important,  and  a  tradeoff  can  be  expected 
between  decision  accuracy  and  reaction  time.  This  issue  is 
not  dealt  with  specifically  in  our  analysis  because  we 
lacked  the  detailed  information  needed  for  a  meaningful 
analysis  of  decision  accuracy,  but  it  is  an  essential  area  for 
further  work  as  the  SDI  command  and  control  system  is 
more  precisely  defined. 

Each  of  the  boxes  in  Figure  1  his  been  expanded  into 
a  Petri  net  formulation.  However,  the  resulting  model  is 
too  detailed  and  complex  for  full  discussion  here.  Exam¬ 
ples  of  how  command  center  activities  may  be  modelled 
using  Petri  nets  axe  discussed  below. 

Figure  2  shows  an  example  of  intelligence  processing. 
As  soon  as  intelligence  data  are  available,  analysis  can 
begin  This  analysis  produces  indicators  and  warnings,  as 
well  as  a  data  base  that  can  be  used  to  make  estimates  of 
the  time  available  before  the  earliest  possible  enemy 
action.  Indicators  and  warnings  arc  transmitted  to  the 
situation  assscssmcnt  and  decision  components.  Estimates 
of  the  time  available  are  transmitted  to  situation 
assessment.  The  time  delays  associated  with  this  part  of 
the  model  include  the  time  needed  to  analyze  the  raw  data, 
the  time  needed  to  estimate  the  time  available,  and  the  time 
needed  for  transmission. 

Figure  3  shows  an  information  processing  activity  that 
is  typical  of  the  surveillance  maintenance  and  monitoring 
functions.  When  data  on  surveillance  system  operations 
are  received,  they  are  processed.  If  any  evidence  of  ASAT 
actions  is  detected,  a  message  is  immediately  sent  to  the 
decision  component.  If  no  ASAT  actions  arc  detected,  the 
data  arc  aggregated  and  passed  on  to  the  next  level  of  anal¬ 
ysis. 

Note  that  a  probability  or  priority  must  be  assigned  to 
the  two  arcs  that  emerge  from  the  "detection  of  ASAT 
action"  place.  What  is  the  probability  of  detecting  an 
ASAT  action?  This  probability  should  depend  on  whether 
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Figure  2.  Example  of  Intelligence  Processing 
Activities 
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Figure  3.  Example  of  Information  Processing  During 
Surveillance  Maintenance  and  Monitoring 


or  not  such  an  action  has  actually  occurred.  The  full  model 
allows  for  the  assignment  of  different  values  to  this 
probability,  depending  on  whether  or  not  there  has  been  an 
•  nemy  action.  If  an  action  has  actually  occurred,  then  the 
probability  of  detecting  the  action  is  the  probability  of  a 
true  alarm.  If  no  action  has  occurred,  then  it  is  the 
probability  of  a  false  alarm.  The  time  delays  associated 
with  this  part  of  the  model  include  the  time  needed  to  pro¬ 
cess  the  data,  the  time  needed  to  aggregate  the  data,  and  the 
transmission  time. 

Figure  4  gives  an  example  of  how  the  assessment  of 
sensor  capability  in  the  context  of  the  world  situation  is 
represented  by  the  Petri  net  model.  Two  kinds  of  informa¬ 
tion  are  needed  for  the  assessment:  aggregated  operational 
data,  and  data  on  world  tension  levels  from  indicators  and 
warnings.  If  either  type  of  information  is  missing,  then 
the  assessment  cannot  take  place.  Sensor  capability  prob¬ 
lems  may  be  assessed  as  either  "serious"  or  "not  serious." 
Serious  problems  are  passed  on  for  more  processing;  non- 
serious  proolcms  are  not.  A  probability  or  priority  gov¬ 
erns  which  of  these  two  paths  is  taken  by  a  token  leaving 
the  "seriousness  of  problem"  place.  Time  delays  for  this 
portion  of  the  model  include  the  time  before  tokens  become 
available  at  both  of  the  initial  places,  the  time  needed  to 
evaluate  the  capability  problems,  and  the  time  needed  to 
transmit  the  serious  problems. 
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Figure  4.  Example  of  Sensor  Capability  Assessment. 


actions  should  be  taken.  The  time  delay  here  includes  the 
time  that  elapses  before  there  are  available  tokens  in  all 
three  of  the  initial  condition  places,  the  time  needed  to 
make  the  decision,  and  the  time  needed  to  transmit  the  four 
different  recommendations  for  action. 

Figure  6  shows  a  representation  of  the  authorization 
and  command  process.  When  a  recommendation  for  action 
is  received,  some  time  elapses  before  it  is  authorized,  and 
the  authorization  is  transmitted  back  to  the  originator  of 
the  recommendation.  A  command  cannot  be  issued  until 
the  authorization  is  received.  The  higher  authority  autho¬ 
rizing  the  command  is  shown  as  being  separate  from  the 
command  center  that  issues  the  command.  This  is  a  plau¬ 
sible  assumption,  but  not  a  necessary  one.  If  no  separate 
authorization  of  commands  is  required,  then  the  delays 
associated  with  "authorize"  and  "transmit"  in  the  model 
would  be  set  at  zero. 


Figure  5  shows  how  a  decision  can  be  represented  by 
the  model.  The  decision  in  the  diagram  maps  three  initial 
conditions-high  world  tension,  serious  sensor  capability 
problems,  and  insufficient  time  to  fix  those  problems -into 
four  different  actions:  recommend  DEFCON  change, 
recommend  cool  down  of  sensors,  recommend  change  in 
sensor  thresholds,  and  recommend  enabling  of  weapons. 


Figure  5.  Example  of  Decision  Process 


Note  that  when  decisions  are  reserved  to  a  higher 
authority,  the  output  of  the  decision  process  at  the  com¬ 
mand  center  is  a  decision  to  forward  one  set  of  rec¬ 
ommendations  versus  alternative  sets.  The  Petri  net,  as  it 
is  pictured,  represents  a  decision  rule  stating  that,  if  all 
three  initial  conditions  occur,  then  all  four  of  the  actions 
should  be  taken.  However,  if  any  one  of  the  initial  con¬ 
ditions  is  missing,  eg.,  there  are  serious  sensor  problems 
m  a  situation  of  high  world  tension  but  they  can  be  fixed 
within  the  time  available,  then  none  of  the  four  subsequent 
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Figure  6.  Example  of  Authorization  and  Command  Process 

Figures  2  through  6  have  illustrated  the  ways  in  which 
command  center  activities  and  information  flows  are  rep- 
resented  in  the  complete  Petri  net  model.  The  full  model 
adds  some  additional  detail  and  links  all  of  the  activities 
together  so  that  delays  can  be  measured  from  the  time  that 
data  are  received  by  the  system  (indicated  by  an  initial 
available  token  in  the  place  representing  that  type  of  data) 
to  the  lime  that  a  command  is  issued  (indicated  by  the 
creation  of  a  token  in  the  place  representing  that 
command). 


SENSmvrrY  ANALYSIS 

The  purpose  of  die  model  is  to  analyze  the  elapsed 
time  between  events  and  decisions  under  different  assump¬ 
tions  about  command  center  architecture  and  organization. 
In  order  to  perform  this  sensitivity  analysis,  we  must 
assign  numerical  time  values  to  each  of  the  transitions  in 
the  model  that  represents  a  process  or  activity  that  will 
consume  time.  Ideally,  these  lime  parameters  should  be 
based  on  empirical  data  about  the  time  actually  taken  to 
complete  those  tasxs.  Because  the  design  of  the  SDI  com¬ 
mand  center  is  still  in  a  preliminary  stage,  however,  such 
data  axe  not  available.  Instead,  we  have  made  a  set  of  arbi¬ 
trary  assumptions  about  possible  times  that  seemed  reason¬ 
able,  and  then  varied  them  to  test  the  sensitivity  cf  the 
overall  response  time  to  the  processing  tunes  for  individual 
components. 

The  purpose  of  the  model  is  to  allow  the  comparison 
of  reaction  times  under  different  command  center  organize 
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.turn  and- system  architectures.  Reaction  time,  in  this  con¬ 
text,  refers  to  the  time  that  elapses  between  the  time  that 
raw  data  arc  received  by  the  system,  and  the  time  that  a 
command  is  issued  based  on  those  data.  For  example,  in 
the  case  of  an  AS  AT  action,  how  much  time  elapses 
between  the  receipt  of  data  from  which  this  attack  could  be 
detected  and  the  issuing  of  a  command  to  cool  down  the 
sensors  based  on  the  detection  of  the  attack?  Of  course, 
some  time  will  elapse  between  the  time  that  an  event 
occurs  and  the  time  that  the  raw  data  reflecting  that  event 
arc  received  by  the  system,  but  this  is  outside  the  scope  of 
our  model. 

The  first  step  in  the  sensitivity  analysis  is  to  estab¬ 
lish  a  set  of  reaction  times  that  are  of  interest.  Wc  want  to 
examine  the  links  between  commands  based  on  critical 
decisions  and  the  events  that  generate  them.  Our  approach 
was  to  develop  a  set  of  "scenarios"  of  possible  events  and 
identify  the  critical  decisions  that  might  be  triggered  by 
those  scenarios. 

The  four  scenarios  created  for  the  analysis  and  the  crit¬ 
ical  decisions  triggered  by  each  arc  shown  in  Table  1.  The 
first  scenario  is  simply  the  detection  of  a  real-time  indi- 
cator  and  warning.  This  is  assumed  to  trigger  four  critical 
decisions:  cooling  down  the  sensors,  changing  sensor 
sensitivity  thresholds,  recommending  a  DEFCON  change, 
and  enabling  the  weapon  system. 


The  second  scenario  involves  sensor  capability  prob¬ 
lems.  indicators  and  warnings  show  a  high  state  of  world 
tension,  the  DEFCON  level  is  high,  and  a  serious  sensor 
capability  problem  has  emerged.  The  decisions  triggered 
by  this  scenario  are  cooling  down  of  the  sensors,  changing 
thresholds,  and  recommending  a  shift  in  ROE  option. 
Scenario '3  adds  a  time  "window"  constraint  to  scenario  2. 
there  is  not  enough  time  to  fix  the  sensor  problem  before 
the  estimated  time  of  the  earliest  enemy  attack.  This  is 
assumed  to  trigger  the  additional  decisions  to  recommend  a 
DEFCON  change,  and  to  enable  the  weapon  system. 

The  fourth  scenario  deals  with  the  detection  of  ASAT 
actions.  Three  possible  detection  points  are  included*  early 
detection,  as  raw  data  for  individual  sensors  are  processed 
during  surveillance  maintenance,  later,  as  more  aggregated 
data  arc  processed  during  surveillance  monitoring,  and  still 
later,  during  situation  assessment,  when  global  operational 
and  environmental  data  are  analyzed  along  with  intelligence 
data.  The  decisions  triggered  by  the  detection  of  an  ASAT 
attack  are  asssumed  to  be  the  same  as  those  triggered  by 
real-time  indicators  and  warnings:  cooling  down  the 
sensors,  changing  the  sensor  thresholds,  recommending  a 
DEFCON  change,  and  enabling  the  weapon  system. 

The  model  may  now  be  used  to  estimate  the  total 
aggregate  time  that  would  elapse  between  initial  data 
receipt  and  the  issuing  of  different  types  of  commands  for 


TABLE  1,  LINKS  BETWEEN  SCENARIOS  AND  CRITICAL  DECISIONS 

_ _  CRITICAL  DECISIONS _ 

I  Rccom-  Rccom- 

Cool  Change  mend  mend 

down  sensor  DEFCON  ROE 

_ _ _ sensors  threshold  _ change _ shift _  w 


|  1 .  A  real-time  I&W  occurs. 

2.  I&W  show  high  world  tension, 
DEFCON  is  high,  and  a  serious 
sensor  capability  problem  exists. 

3.  I&W  show  high  world  tension, 
DEFCON  is  high,  a  serious  sen¬ 
sor  capability  problem  exists,  and 
there  is  not  enough  time  to  fix  it 
before  the  estimated  lime  of 
earliest  enemy  action, 

4.  An  ASAT  action  occurs,  and  is 
detected: 

•  early,  during  maintenance: 

•  later,  during  monitoring: 

•  not  until  assessment,  when 
operational,  environmental, 
and  intelligence  data  are 
combined. 
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the  scenarios  shown  in  Tabic  1.  (Note:  As  . computed  by 
the  model,  the  total  aggregate  time  between  a  given  trig¬ 
gering  event  and  the  issuing  of  appropriate 'commands 
depends  directly  on  the  assumed  time  delay  for  each  indi¬ 
vidual  activity  leading  to  those  commands.  Thus,  the  arbi¬ 
trariness  of  the  individual  time  delay  parameters  is  reflected 
in  all  response  time  predictions.) 

The  Petri  net  model  was  implemented  oh  a  Macintosh 
computer  using  ALPHATECH’s  Micro-Modeler  software. 
This  software  supports  the  construction  -  of  Stochastic, 
Timed,  Attributed  Petri  Net  (STAPN)  models,  the  assign¬ 
ment  of  time  parameters  to  transitions  in  the  model  and. the 
assignment  of  priorities  or  probabilities  to  transitions. 
After  the  model  is  constructed,  it  may  be  executed,  and 


performance  measures  such, as  response  times  and  delays 
may  be  computed. 

The  model  with  its  present  assumptions  provides  a 
tool  for  analyzing  how  some  of  the  factors  in  command 
and  control  system  architecture  and  the  command  center 
organization  might  affect  reaction  times.  Variables  that 
could  be  manipulated  in  organizational  and  system  design 
include  the  centralization  of  functions  (geographically  or 
organizationally),  the  coordination  between  the  command 
center  decision  functions  and  the  intelligence  processing 
and  surveillance  maintenance  functions,  and  the  authority 
structure  for  approving  command  decisions.  The  remainder 
of  this  section  explores  the  effects  of  shifts  in  these  fac¬ 
tors  on  reaction  times. 


TABLE  Z  ELAPSED  TIME  IN  MINUTES  BEFORE  COMMAND  IS  ISSUED  UNDER  TWO  DIFFERENT 
ASSUMPTIONS  ABOUT  TRANSMITTAL  AND  COMMUNICATION  TIMES 


CRITICAL  DECISIONS 


Rccom- 

Rccom* 

Cool 

Change 

mend 

mend 

SCENARIOS 

down 

sensor 

DEFCON 

ROB 

Enable 

sensors 

threshold 

change 

shift 

weapons 

1 .  A  real-time  I&W  occurs 

■9 

7.5 

1 

Wgmam 

HfiH 

■  1 

11.0 

2.  I&W  show  high  world  tension. 

41.5 

39.0 

43.0 

DEFCON  is  high,  a  serious  sen¬ 
sor  capability  problem  exists. 

48.5 

51.0 

50.0 

3 ,  I&W  show  high  world  tension. 

68.5 

69.0 

DEFCON  is  high,  a  serious  sen* 

79.0 

79.5 

sor  capability  problem  exists, 
and  there  is  not  enough  timo  to 

fix  it  before  the  estimated  time 
of  earliest  enemy  action. 

4 .  An  ASAT  action  occurs,  and 

is  detected: 

•  early,  during  maintenance; 

13.0 

13.0 

16.5 

13.0 

16.5 

16.5 

20.0 

16.5 

•  later,  during  monitoring; 

24.25 

24.25 

27,75 

24.25 

29.5 

29.5 

33.0 

29.5 

•  not  until  assessment,  when 

35.5 

35.5 

39.0 

35.5 

operational,  environmental,  and 
intelligence  data  are  combined. 

42.5 

42.5 

46.0 

42.5 

Note: 

Numbers  in  regular  type  arc  based  on  a  transmittal  time  of  0  25  minutes. 
Numbers  in  bold  type  are  based  on  a  transmittal  lime  of  2  minutes. 
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The  Centralization  of  Functions 

Transmittal  and  communications  times  arc  pervasive 
throughout  the  model.  This  includes  the  lime, needed  to 
pass  information  from  the  intelligence  processing  function 
to  the  decision  function,  the  time  needed  to  transmit  aggre¬ 
gated  data  from  , the  surveillance  functions  to* the  situation 
assessment  function,  the  time  needed  to  transmit  questions 
back  to  surveillance  and  intelligence  processing,  the  time 
needed  to  transmit  requests  for  authorization  to  higher 
authority,  and  the  time  needed  for  authorization  to  be 
transmitted  back  to  the  command  function. 

A  number  of  factors  could  increase  or  decrease  trans¬ 
mittal  and  communication  times.  The  design  of  the  com¬ 
munications  system  is  critical,  as  is  the  organizational 
design  of  the  command  center.  'If  functions  arc  performed 
by  the  same  individual,  or  by  individuals  within  the  same 
part  of  the  organization  or  located  in  the  same  area,  then 
communication  time  may  be  much  less  than  if  the  same 
functions  arc  performed  by  a  group  of  dispersed  individuals. 
For  purposes  of  the  sensitivity  analysis,  two  transmittal 
times  were  tested:  0.25  minutes  and  2  minutes.  Table  2 
shows  the  effect  on  reaction  times  if  the  time  for  trans¬ 
mittal  and  communication  is  increased  from  0.25  minutes 
to  2  minutes  throughout  the  model. 

Obviously,  an  increase  in  transmittal  time  will 
increase  reaction  times.  The  more  functions  involved  in  a 
scenario,  the  larger  this  effect  will  be.  The  increase  in 
reaction  time  for  scenario  1,  based  on  real-time  indicators 
and  warnings,  is  3.5  minutes  (calculated  as  the  difference 
between  the  reaction  times  under  the  two  transmittal  time 
assumptions).  The  increase  for  scenario  2,  based  on  sensor 
capability  (assessment,  is  7  minutes.  For  scenario  3, 
which  involves  analysis  of  the  ume  available  before  enemy 
actions,  the  increase  is  10.5  minutes.  For  scenario  4,  the 
increase  in  reaction  time  for  ASAT  actions  detected  early  is 
3.5  minutes.  As  more  processing  is  required,  the  increased 
communication  time  will  have  more  of  an  effect.  If  an 
ASAT  action  is  not  delected  until  situation  assessment,  the 
increase  in  reaction  Ume  due  to  slower  communication  is  7 
minutes. 


Coordination  with  Intelligence  Prowling 

The  reaction  times  shown  in  Table  2  assume  that  the 
processing  of  intelligence  data  and  the  generation  of  indi¬ 
cators  and  warnings  takes  place  in  parallel  with  the  pro¬ 
cessing  of  data  about  surveillance  system  operations  and 
local  satellite  environments.  If  intelligence  data  and  oper¬ 
ational  data  are  received  at  the  same  time,  then  indicators 
and  warnings  will  have  been  prepared  and  passed  to  the 
total  situation  assessment  function  by  the  time  that 
aggregated  operational  data  are  received  by  that  function. 
In  other  words,  the  ume  spent  generating  indicators  and 
warnings  of  world  tension  under  intelligence  processing  is 
not  pait  of  the  critical  path  that  drives  reaction  limes  for 
scenarios  2  and  3  in  Table  2, 


This  assumption  of  parallel  processing  may  not  be 
realistic.  For  example,  a  structure  in  which  intelligence 
processing  is  driven  by  questions  generated  during  situation 
assessment .  might  be  more  similar  to  current  practices. 
Under  this  assumption,  the  generation  of  indicators  and 
warnings  from  intelligence  data  would  not  start  until  sensor 
capability  problems  had  been  identified  and  questions  had 
arisen  about  the  seriousness  of  those  problems  in  the  con¬ 
text  of  world  tension.  If  the  mode!  is  altered  to  reflect  this 
structure,  tficn  the  time  needed  to  generate  indicators  and 
warnings- will  become  part  of  the  critical  path  that 
determines  reaction  times  and  will  substantially  increase 
them'. 

Table  3  shows  reaction  times  (in  bold  type)  for  sce¬ 
narios  2  and  3  (which  depend  on  the  generation  of  indi¬ 
cators  and  warnings)  under  the  revised  assumption  about 
intelligence  processing.  If  the  generation  of  indicators  and 
warnings  is  reactive,  rather  than  proactive,  then  the 
reaction  time  under  both  scenarios  2  and  3  increases  by 
15.5  minutes.  That  is,  waiting  until  sensor  problems  arise 
to  begin  analysing  intelligence  data 'to  evaluate  their  sig¬ 
nificance  leads  to  a  substantial  increase  in  reaction  time. 
Continual,  on-going  analysis  and  evaluation  of  intelligence 
data,  i.e..  proactive  fusion,  supports  much  faster  reactions. 

Coordmilioji.Bciwtcn  Surveillance  aid  Command  Function. 

The  reaction  times  shown  in  Tables  2  and  3  assume 
that  questions  about  the  lime  needed  to  make  sensor 
adjustments  or  fix  sensor  problems  arc  generated  during 
total  situation  asessment,  and  referred  back  to  sensor  main¬ 
tenance  experts  in  the  surveillance  maintenance  function. 
These  experts  then  transmit  answers  to  the  questions  back 
to  situation  assessment.  This  process  is  part  of  the  critical 
path  for  decisions  in  scenario  3. 

The  assumption  that  a  round  of  questions  and  answers 
must  occur  between  the  surveillance  maintenance  function 
and  the  situation  assessment  function  may  be  incorrect  for 
several  reasons.  First,  the  individuals  responsible  for  sit¬ 
uation  assessment  may  have  enough  knowledge  of  the  sen¬ 
sor  system  to  know  how  long  repairs  and  adjustments  will 
take,  without  having  to  consult  sensor  maintenance  staff. 
Also,  the  sensor  maintenance  staff  may  anticipate  the  needs 
of  situation  assessment,  and  may  pass  along  information 
about  the  time  needed  to  make  adjustments  at  the  same  time 
that  they  transmit  information  about  problems  in  sensor 
capability. 

In  either  case,  the  result  will  be  faster  reaction  times 
for  those  actions  triggered  by  the  assessment  that  not 
enough  time  is  available,  as  shown  in  Table  4.  Reaction 
time  is  decreased  by  5.25  minutes  under  the  assumption 
that  estimates  of  the  time  needed  for  sensor  repairs  can  be 
made  by  the  individuals  performing  situation  assessment, 
without  referring  back  to  surveillance  maintenance. 
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TABLE  3.  ELAPSED  TIME  UNTIL  COMMAND  IS  ISSUED  UNDER  TWO  DIFFERENT  ASSUMPTIONS  ABOUT 
COORDINATION  WITH  INTELLIGENCE  PROCESSING 


CRITICAL  DECISIONS 


SCENARIOS 

Cool 

down 

sensors 

Change 

sensor 

threshold 

Recom¬ 

mend 

DEFCON 

change 

Recom¬ 

mend 

ROE 

shift 

Enable 

weapons 

2.  I&W  show  high  world  tension, 
DEFCON  is  high,  a  serious  sen* 
sor  capability  problem  exists. 

41.5 

57.0 

39.0 

54.5 

43.0 

58.5 

3 .  I&W  show  high  world  tension, 
DEFCON  is  high,  a  serious  sen¬ 
sor  capability  problem  exists, 
and  there  is  not  enough  time  to 
fix  it  before  the  estimated  time 
of  earliest  enemy  action. 

68.5 

84.0 

69.0 

84.5 

Note: 

Numbers  in  regular  type  are  based  on  the  assumption  that  intelligence  processing  takes  place 
in  parallel  with  processing  of  operational  data. 

Numbers  in  bold  type  arc  based  on  the  assumption  that  intelligence  processing  docs  not  begin 
until  questions  are  generated  from  the  processing  of  operational  data 


TABLE  4.  ELAPSED  TIME  BEFORE  COMMAND  IS  ISSUED  UNDER  TWO  DIFFERENT  ASSUMPTIONS  ABOUT 
COORDINATION  BETWEEN  SURVEILLANCE  AND  COMMAND  FUNCTIONS 

_ CRITICAL  DECISIONS _  1 


SCENARIOS 

Cool 

down 

sensors 

Change 

sensor 

threshold 

Recom¬ 

mend 

DEFCON 

change 

Recom¬ 

mend 

ROE 

shift 

Enable 

weapons 

3.  I&W  show  high  world  tension, 
DEFCON  is  high,  a  serious  sen¬ 
sor  capability  problem  exists, 
and  there  is  not  enough  time  to 
fix  it  before  the  estimated  time 
of  earliest  enemy  action. 

68.5 

63.25 

69.0 

63.75 

Note: 

Numbers  in  regular  type  are  based  on  the  assumption  that  the  total  situation  assessment  function 
must  refer  questions  about  the  time  needed  to  make  sensor  adjustment  back  to  the  surveillance 
maintenance  function. 

Numbers  in  bold  type  are  based  on  the  assumption  that  the  total  situation  assessment  function 
does  not  refer  to  questions  about  the  time  needed  to  make  sensor  adjustments  back  to  the 
surveillance  maintenance  function 
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Authority  Structure 

The  structure  of  the  model  (Figure  6)  provides  an 
amhorization'loop  for  all  decisions  made  in  the  SDI  com* 
mand  center.  For  each  command,  a  message  must  be 
transmitted  to  higher  authority,  an  authorization  decision 
must  be  made,  and  the  authorization  must  be  transmitted 
back  to  the  command  center  before  the  command  can  be 
issued. 

Obviously  this  process  consumes  time,  and  it  is  in  the 
critical  path  for  all  decisions.  However,  these  assumptions 
arc  dependent  on  the  not-yct*dctermincd  authority  structure 
of  the  SDI  command  center,  and  reasonable  alternatives 
may  be  generated.  For  example,  perhaps  decisions  that 
involve  the  surveillance  system,  such  as  sensor  cool  down 
and  threshold  changes,  need  not  be  approved  by  higher 
authority. 

Table  5  shows  the  decrease  in  reaction  time  from 
removing  the  authorization  loop  for  sensor  decisions. 
Authorization  time  is  on  the  critical  path  for  sensor  deci¬ 
sions.  so  the  removal  of  the  time  needed  for  transmission 
and  authorization  has  a  direct  effect  on  reaction  times. 


Removing  the  need  for  authorization  cuts  1.5  minutes  for 
decisions  based  on  real-time  indicators  and  warnings  and 
AS  AT  alarms,  and  5.5  minutes  for  decisions  based  on  sen¬ 
ior  capabilities. 


CONCLUSIONS 

The  sensitivity  analysis  based  on  the  model  identifies 
a  series  of  issues  that  must  be  addressed  in  evaluating 
designs  for  an  SDI  command  center.  The  model  provides  a 
structure  for  analyzing  the  links  between  functions  and  the 
implications  of  those  links  for  the  overall  reaction  time  of 
the  system.  Any  design  for  an  SDI  command  center  must 
take  into  account  the  relationship  between  information 
flow  and  reaction  speed. 

The  centralization  of  functions  and  the  speed  of  com¬ 
munications  within  the  command  center  will  have  a  per¬ 
vasive  effect  on  the  speed  with  which  decisions  can  be 
made  and  commands  can  be  issued.  Situation  assessment  in 
the  comand  center  will  require  the  fusion  cf  information 
from  multiple  sources,  and  the  speed  of  the  slowest  link 
will  determine  the  speed  of  the  overall  assessment. 


TABLE  5.  CLAPS FD  TIME  BEFORE  SENSOR  COMMANDS  ARE1SSUED.  WITH  AND  WITHOUT  THE  NEED 
FOR  APPROVAL  BV  HIGHER  AUTHORITY 


CRITICAL  DECISIONS 


Cool 

SCENARIOS 

sensors 

Change 

down 

threshold 

sensor 

4.0 

4.0 

2.  I&W  show  high  world  tension, 
DEFCON  is  high,  a  serious  sen¬ 
sor  capability  problem  exists. 

41.5 

36.0 

39.0 

33.5 

4,  An  AS  AT  action  occurs,  and 
is  detected; 

•  early,  during  maintenance; 

13.0 

11.5 

13.0 

11.5 

•  later,  during  monitoring; 

24.25 

22.75 

24.25 

22.75 

•  not  until  assessment,  when 
operational,  environmental,  and 
intelligence  data  are  combined. 

35.5 

34.0 

35.5 

34.0 

Note: 

Numbers  in  regular  type  are  based  on  the  assumption  that  sensor  commands  must  be  approved 
by  higher  authority. 

Numbers  in  bold  type  are  based  on  the  assumption  that  sensor  commands  do  not  require  approval 
bv  higher  authority 
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The  extent  to  which  questions  and  answers  pass  back 
and  forth  between  functions  is  another  major  factor  in  reac¬ 
tion  tune.  ’  Interchanges  take  time,  and  if  situation  assess¬ 
ment  can  be  done  without  the  need  for  refemng-questions 
back  to  intelligence  processing  or  surveillance  main¬ 
tenance,  this  will  speed  reaction  time  considerably.  The 
elimination  of  such,  interchanges  will  require  cither  that  the 
staff  involved  in  situation  assessment  be  extremely  knowl- 
cdgable  about  the  intelligence  situation  and  the  functioning 
of  the  surveillance  system,  or  that  staff  in  those  areas 
anticipate  the  needs  of  the  situation  assessment  staff  and 
pass  on  exactly  the  information  that  is  needed. 

The  integration  and  coordination  of  intelligence  anal¬ 
ysis  with  situation  assessment  is  a  key  factor  in  reaction 
times.  If  intelligence  analysis  is  done  only  on  request, 
after  serious  sensor  capability  problems  have  been  iden¬ 
tified,  this  will  slow  reaction  times  by  a  substantial 
amount.  Continual,  on-going  intelligence  analysis  that 
anticipates  the  needs  of  situation  assessment  in  the  SDI 
command  center  will  lead  to  faster  reaction  times. 

Authority  structure  is  another  important  element.  of 
reaction  time.  Authorization  loops  arc  part  of  the  critical 
path  for  all  of  the  decisions  in  the  model.  A  reduction  in 
the  time  needed  to  transmit  intended  commands  to  higher 
authority  and  to  receive  authorization  to  proceed  will  reduce 
command  center  reaction  times  by  an  equal  amount. 

This  sensitivity  analysis  is  intended  only  as  an  illus¬ 
tration  of  the  kinds  of  questions  that  must  be  evaluated  in 
assessing  command  center  designs.  The  basic  idea  of  the 
STAPN  model  is  to  establish  linkages  among  functions  and 
to  identify  critical  paths  of  information  flow  leading  up  to 
decisions.  As  plans  for  an  SDI  command  and  control  sys¬ 
tem  arc  further  developed,  it  should  become  possible  to 
assign  more  realistie  values  to  lime  delays  in  tho  system 
and  reach  more  exact  conclusions  about  reaction  times 
under  different  designs.  The  STAPN  model  is  also  capable 
of  generating  probability  distributions  of  reaction  times 
and  computing  means  and  variances. 
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ABSTRACT 

This  paper  describes  an  approach  to  the  development  of  an 
attack  assessment  decision  aid  for  command  and  control, 
based  upon  the  formalism  of  the  Bayesian  network.  The 
advantages  of  Bayesian  networks  as  a  representation  scheme 
particularly  appropriate  to  the  modelling  of  inherently  un¬ 
certain  domains  is  discussed,  as  are  two  mechanisms  for  up* 
dating  probabilistic  beliefs  as  new  evidence  is  acquired.  In 
ud<Ution,  a  powerful  approach  io  Inoukigc  acquisition  for 
such  networks  is  described,  and  a  novel  means  of  computing 
and  updating  high-level  hypotheses  of  interest  is  introduced. 
The  paper  ends  with  a  brief  description  of  a  sophisticated 
Bajesian  network  development  environment  in  which  such 
features  have  been  successfully  implemented. 

INTRODUCTION 

For  command  and  control  (CJ),  facilitating  the  battle  com¬ 
mander’s  ability  to  make  high  quality  and  timely  decisions  is 
of  paramount  importance.  In  order  to  assist  him  in  his  deci¬ 
sion  making  processes,  decision  aids  will  play  an  increasingly 
important  role,  due  to  the  increases  forseen  in  complexity, 
data  rates,  and  time  allotted  to  deci$ion*making« 

A  command  and  control  decision  aid  (DA)  is  one  that  as¬ 
sists  a  human  decision-maker  in  making  decisions  related  to 
the  exercise  of  authority  over  system  operations  and  to  the 
exercise  of  direction  over  system  nctivities.  A  knowledge- 
based^  decision  aid  has,  as  its  basic  functionality,  a  process 
that  incorporates  knowledge  of  the  domain,  and  employs 
that  knowledge  in  one  or  more  of  the  techniques  that  has  be¬ 
come  collectively  known  as  artificial  Intelligence.  The  value 
of  knowledge-based  DA’s  is  that  they: 

•  handle  uncertainty,  ambiguity,  and  inaccuracy, 

•  provide  heuristics  and  inference,  as  well  as  algorithms, 

•  capture  the  expertise  and  experience  of  commanders 
working  in  the  domain, 

.  allow  capabilities  for  the  DA  to  grow  gracefully  over 
time  as  new  knowledge  is  acquired,  and 

•  reduce  the  complexity  of  problems  that  th_  human 
must  handle. 


as>=>jc;j>:>menT 

A  class  of  C*  problem  particularly  well  suited  to  decision 
aidmg  is  that  of  situation  assessment.  A  formal  definition 
Of  sr, nation  assessment  is:  Given  a  pre-existmg  representa¬ 
tion  of  what  it  means  to  be  a  “situation”,  a  current  model 
of  f.iendly  assessment  capabilities  (sensory  systems),  along 
with  measurements  from  multiple  sensors  of  several  types! 
"  «#>natory  model  of  the  world  with  the  following 

*  The  most  important  aspects  of  the  situat.on  receive 
the  most  attention. 

*  ""“'‘“"‘J  >nd  confficls  atc  bo‘>>  atomised  and  clearly 

*  The  model  of  the  world  has  strong  predicitive  power. 

A  situation  assessment  problem  of  particular  interest  is  that 
of  attack  assessment,  characterised  by  both  uncertain  rela¬ 
tionships  among  entities  in  the  domain,  and  uncertain 
pnt  evidence’.  A  solution  to  the  attack  assessment  problem 
must  provide  global  assessments  of  the  eurrent  situation’,  as 
well  M  separate  estimates  of  attack  some,  type,  and  oi/ec- 
hre.  Furthermore  a  tool  lot  solving  the  attack  assessment 
problem  should  allow  the  user  to  incorporate  non-sensed5 
information,  to  emmine  attack  assessment  hypotheses,  to 
understand  and  influence  the  decision-making  process,  and 
to  activate  other  decision-making  processes. 

There  are  several  fundamental  issues  that  must  be  ad¬ 
dressed  when  designing  a  solution: 

1  Hoy-  5  represent  uncertain  information,  both  inter- 
naliy  and  to  the  user. 

2  How  to  perform  inference  with  uncertain  information. 

3  How  to  define  and  evaluate  hypotheses  about  the  cur- 
rent  situation, 

4  How  to  acquire  domain  knowled'  e. 

5  Row  to  facilUate  human-computer  interaction. 
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The  solution  described  in  this  paper  addressc s  these  isszes 
as  follows: 


1  U 'sc  Bajesian  networks  as  a  too* ledge  Teprtsezldien 
scheme 

2  Uic  the  Shachter  and  Pearl  algorithm*  to  perform  £s- 
farr.ee 

3  ll^c  the  IBM  algorithm  to  define  aud  evaluate  hypothe¬ 
ses 

■T  Use  “backwards  thinking*  for  kaowIedge,acquiiitsca 

5  Use  a  sophisticated  user  interface  development  system 
(^Shaxk*)  to  faalitate  human-computer  interact  lea 

The  approaches  enumerated  above  are  discussed  in  some  de¬ 
tail  in  the  sections  to  follow, 

BAYESIAN  NETWORKS 

Bayesian  networks  were  selected  as  a  paradigm  for  knowl¬ 
edge  representation  and  inference  fox  both  theoretical  and 
practical  reasons.  The  theoretical  shortcomings  oi  the  uncer¬ 
tainty  mechanisms  used  in  first  generation  expert  systems, 
typified  by  MYCIN’s  rule-based  scheme  in  which  “certainty 
factors"  attached  to  production  rales  of  the  form  A  — t  B 
were  used  to  adjust  the  certainty  of  B  when  the  certainty 
of  A  changed,  have  become  well  understood  |2,  S}:  given 
any  modular,  incremental  updating  procedure,  qvcHtatiteh; 
anomalous  adjustments  are  likely  unless  the  structure  and 
content  of  the  knowledge  base  is  severly  restricted-  Strictly 
Bayesian  methods  were  believed  u>  be  too  diScclt  to  en¬ 
gineer  and  computationally  intractable.  Bayesian  networks 
address  both  ♦hesc  apparent  difficulties  by  graphically  en¬ 
coding  condition  !  independencies.  As  a  result,  the  expert 
need  only  supply  a  small  number  of  conditional  probabili¬ 
ties,  more  comparable  in  number  to  the  certainty  factors  in 
a  rule  based  system  than  the  f nil  joint  distribution,  that  are 
directly  meaningful  The  benefits  of  Bayesian  networks,  for 
both  representation  and  inference,  are  described  more  fully 
in  the  sections  immediately  following. 

BAYESIAN  NETWORK  REPRESENTATION 

One  of  the  most  appealing  properties  of  the  Bayesian  net¬ 
work  as  a  knowledge  representation  methodology  is  the  ease 
with  which  such  networks  allow  domain  experts  and  knowl¬ 
edge  engineers  alike  to  separate  the  qualitative  structure  of 
a  given  domain  from  the  quantitative  detail.  The  qualita¬ 
tive  and  quantitative  aspects  of  knowledge  representation  sn 
Bayesian  networks  are  described  below. 

Qualitative  Representation:  For  many,  the  quantita¬ 
tive,  algebraic  constructs  of  probability  theory  are  unintu¬ 
itive  and  difficult  to  interpret,  despite  the  fact  that  most  of 


ti*  concepts  c£  pre haSeSty  theory  are  both  2nd  b- 

tsrthe,  zs  w3  be  shown  bekxr.  Cocridcr,  for  cxamjJe,  tie 
formal,  algebraic  defimtfox  of  prcAc^SzsEc  independence! 

P(A,B)  =  P(A)P(B)  (1) 

Expressed  1  indicates  tiai  two  random  crests  (A  and  B)  are 
prbbabsSsiicaSy  hadepeademt  if  tier  j«s4  £stribctfos  can 
he  competed  as  tie  product  of  the  imfividnxi  distribution*. 
Although  iHs  expression  is  rather  cmnierprctabSe  to  tie  lay 

reader,  si  is  mcorrcci  to  conclude  that  the  concept  of  prooa- 

biHsiic  independence  is  immteithe.  Oa  tie  contrary,  nearly 
everyone  maintains  infernal  “model*  of  what  if  mn-e 
for  events  to  be  pwaKSsticaBy  independent.  For  example, 
whereas  one  might  be  reluctant  to  ezpre«  the  indmdnal 
probaHHtia  of  two  events  such  as  “winning  the  lottery*  and 
“getting  a  fiat  tire  tomorrow*,  one  would  typically  express 
no  hesitation  is  expressing  the  belief  that  the  two  events  are 
independent  la  addition,  it  is  certainly  tree  that  one’s  be&f 
ia  this  independence  is  sot  a  result  of  comparing  the  prod¬ 
uct  of  the  probabilities  of  the  two  events  and  evaluating  the 
equality  of  the  computed  product  a ad  the  joint  probability  of 
the  two  events!  It  is  dear  that  the  intuitive,  qualitative  con¬ 
cept  of  probabilistic  independence  is,  in  the  triads  of  many, 
quite  distinct  from  the  quantitative,  algebraic  expression  of 
that  con  cep*. 

This  phenomenon  may  be  simply  demonstrated  for  two 
other  probaolisiic  concepts:  probabilistic  dependence  and  con¬ 
ditional  independence.  The  algebraic  representation  of  prob¬ 
abilistic  dependence  is: 


P(A )  B)  = 


P(B) 


(2) 


Now,  expression  2  is  rather  unintuitive  despite  the  (act  the 
the  concept  of  probabilistic  dependence  is  quite  familiar. 
For  example,  although  one  might  be  reluctant  to  express 
the  probabilities  of  two  events  snch  as  “winning  the  Jolt  cry* 
and  “buying  a  lottery  ticket”,  one  would  have  little  hesita¬ 
tion  asserting  that  “winning  the  lottery”  depended  upon  first 
buying  a  ticket.  Finally,  consider  th'  algebraic  definition  of 
conditional  independence: 


P(AnD\C)  =  P(A\C)P(B\C)  (3) 

Although  mystifying  to  many,  expression  3  defines  a  common 
and  intuitive  probabilistic  scenario.  Imagine  a  situation  in 
which  you  are  waiting  at  a  bus  stop,  and  wondering  when  the 
next  bus  will  arrive4  Now,  information  about  the  departure 
time  of  the  last  bus  is  certainly  relevant  to  ike  arrival  time  of 
the  next  bus  and,  in  fact,  it  is  clear  that  the  two  eienis  are 
dependent.  However,  when  information  about  the  location 
of  the  next  bus  is  acquired,  information  about  the  departure 
lime  of  the  last  bus  is  no  longer  valuable.  The  events  “arrival 
time  of  the  next  bus”  and  “departure  time  of  the  last  bus” 
are  conditionally  independent  given  observation  of  the  event 
“location  of  the  next  bus”. 


TrEca  considering  bow  to  besi  represent  unceiiaia  tresis 
Soz  erc^al  gptessttSioa  zs  z  DA  hmridje  l»»c,  tic 
otucnSioa  tiai  jscSe&e  blcp;cUlxa  of  probabilistic 
concepts  arc,  to  many,  completely  distinct  from  fzentzidire 
representations  deman is  a.  represent* ties  icbcae  tiat  fa- 
tSUlo  tic  paSefee  representation  of  these  probaHHsiic 
concepts.  Bayesian  txtted^i^port  this  seed  remark¬ 
ably  weiL 

Bayesian  seixozis  are  directed  aerciic  graphs  of  codes 
zed  Hnks,  in  which  side  nodes  represent  tic  properties  ©f 
an  entity  lathe:  uncertain  stutior,  evidence  nodes  rep¬ 
reseat  acccrcdzted  evidence  bearing  upon  those  entities, 
and  £nks  represeat  probabilistic  dependencies — often  causa], 
sometime*  znerdy  evidential — between  tie  licked  codes-  Tic 
Bayes:  aa  network  representation  acts  as  a  bridge  between  tie 
qualitative  descr ipiioa  ©f  aa  uncertain  situation  zed  its  even¬ 
tual  quantitative  specification.  This  jTuadaraeatal  disticd:oa 
allows  for  tic  rapid  knowledge  engineering  of  domain  exper¬ 
tise. 

Figure  1  illustrates  tie  concept  of  probabilistic  indepen¬ 
dence,  as  represented  by  a  Bayesian  network.  Vote  how  tie 
independence  of  tie  erects  "win  lottery*  and  “Sat  tire”  is 
indicated  by  tie  absence  of  a  link  between*  tie  nodes.  Fig¬ 
ure  2  illustrates  the  concept  of  probabilistic  dependence,  as 
represented  by  a  Bayesian  network.  Note  tow  tic  depen¬ 
dence  of  tic  events  “win  lottery"  and  fcbuy  ticket3  is  indi¬ 
cated  by  tie  presence  of  a  link  between  the  nodes.  Tic  link 
to  “win  lottery”  from  “bay  ticket"  indicates  that  winning 
tie  lottery  is  probabilistically  dependant  upob  first  buying  a 
ticket.  Finally,  Figure  3  illustrates  the  concept  of  conditional 
independence,  as  represented  by  a  Bayesian  network.  Note 
how  the  conditional  independence  of  the  events  “arrival  time 
of  next  bus"  and  “departure  time  of  last  bus*  is  indicated 
by  tie  absence  of  z  link  between  those  nodes.  A  situation 
of  general  probabilistic  dependence  amongst  the  three  nodes 
would  include  a  link  between  “arrival  time  of  next  bus"  and 
“departure  time  of  last  bus",  and  the  qualitative  information 
about  conditional  independence  has  allowed  the  network  to 
he  represented  more  parsimoniously. 


win 

flat 

lottery 

tire 

Figure  1:  Probabilistic  Independence 


nodes  are  represented  as  elSpses  and  evidence  node*  are  rep¬ 
resented  as  rectangles.  Note  also  that  tic  qualitative  stme- 
tcrc  clone  reveals  much  about  tie  nature  ©I  the  process  bring 
modelled. 

Quantitative  Representation:  Once  tie  qualitative 
representation  has  becs-described,  then  tie  tdze  sets  asso¬ 
ciated  with  a  node  and  tie  corresponding  conditional  prob¬ 
ability  matrices  associated  with  rets  of  codes  arc  formal¬ 
ized.  In  an  attack  assessment  DA,  for  example,  a  node  £r- 
tent,  representing  the  extent  of  tie  attack,  with  value  set 
{eztenij  J}  might  have  z  node  Jfotrre,  representing 
the  motive  for  tie  attack,  with  value  set  {mo fire;  :  *  6  /} 
among  its  predecessors.  A  Eak  from  the  motive  node  to  the 
extent  node  represents  tie  fact  that  the  motive  for  the  attack 
is  among  the  causes  of  the  extent  of  the  attack.  In  tins  case, 
this  conditional  probabilities 

,  P  [Extent  =  extent ,  |  Motive  =  motive,-) 

would  be  assessed.  The  means  by  which  such  assessments 
are  made  is  discussed  in  the  section  to  follow. 

Knowledge  Acquisition:  Knowledge-based  systems, 
by  their  very  nature,  demand  a  rich  substratum  of  domain 
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Figure  3:  Conditional  Independence 


Figure  4:  A  Simple  Network  for  Attack  Assessment 
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Figure  2:  Probabilistic  Dependence 

Figure  4  illustrates  a  simple  Bayesian  network  for  an  at¬ 
tack  assessment  problem.  Note  that,  in  this  figure,  stale 


knowledge  in  order  to  be  effective.  In  standard  rule-based 
systems,  the  domain  knowledge  is  generally  represented  as 
a  IF... THEN...”  style  production  rules,  and  the  process  of  ac¬ 
quiring  domain  Knowledge  from  subject  matter  experts  and 
implementing  this  knowledge  in  the  form  of  rules  is  known 
as  knowledge  engineering.  Unfortunately,  the  knowledge  ac¬ 
quisition  process  is  difficult  and  time  consuming,  since  many 
domain  experts  find  it  difficult  to  articulate  their  knowledge 
in  the  form  of  rules.  In  fact,  it  is  widely  acknowledged  (lj 
that  knowledge  acquisition  represents  a  major  knowledge  en¬ 
gineering  bottleneck. 
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UsHle  traditional  rule-based  systems,  the  attack  assess- 
jeent  DA  does  not  use  rules  for  knowledge  representation, 
bet  instead  nses  the  Bayesian  network  formalism.  Tie  nsc 
of  Bayesian  network*  hdps  to  ameliorate  some, of  the  prob¬ 
lem*  associated  •  with  knowledge  acquisition  in  two  ays. 

1  the  domain  expert  is  permitted  to  first  describe  the 
strictly  guettatire  relationships  amongst  the  entities 
involved  in  the  scenario  bang  engineered,  and 

2  when  the  time  comes  for  the  ehatationof  quantitative 
detail,  the  elicitation  process  is  facilitated  by,  use  of 
a  process  known  as  *baehrard  Hunting  for  buncledgc 
acquisition*  [9]. 


disease 


figure  5:  Diseases  Cause  Symptoms 


disease 


Figure  6:  The  Probability  of  Interest 

The  heart  of  the  “thinking  backward”  approach  to  ac¬ 
quiring  the  quantitative  detail  of  a  Bayesian  network  lies  in 
the  idea  of  eliciting  probabilities  from  the  domain  expert  in 
the  causal  direction.  Although,  strictly  speaking,  the  links 
in  a  Bayesian  network  indicate  only  probabilistic  dependence, 
it  is  often  useful,  particularly  for  knowledge  acquisition,  to 
make  use  of  a  causal  interpretation  where  appropriate. 

As  an  example,  consider  the  simple  network  shown  if  Fig¬ 
ure  5.  Probabilistically,  one  can  infer  from  this  figure  that 
the  observation  of  symptoms  (evidence  node)  is  dependent 
upon  the  presence  or  absence  of  disease  (state  node).  In 
addition  however,  one  can  interpret  Figure  5  as  an  indica¬ 
tion  the  disease  causes  the  symptom  —  a  perfectly  reason¬ 
able  interpretation.  If  the  simple  network  shown  in  Figure 
5  made  up  part  of  the  knowledge  base  for  a  simple  medical 
diagnosis  decision  aid,  one  would  require  that  the  decision 
aid  be  able  to  ascertain  how  belief  in  the  proposition  that 
a  patient  has  the  disease  changes  with  observance  of  symp¬ 
toms  of  disease  and,  as  such,  the  probability  of  interest  is 
Probahhty(discasc  |  symptom),  as  shown  in  Figure  6. 

In  terms  of  knowledge  acquisition,  the  domain  expert 
would  likely  have  considerable  difficulty  expressing 
Probability  (disease  \  symptom),  but  would  experience  much 
less  difficulty  expressing  Probabihty{symptom  {  disease). 
Since  diseases  clearly  cause  symptoms,  and  not  the  other  way 


around,  when  one  elicits  Probcbility{syrnptom  \  disease) 
from  the  domain  expert,  the  probabilities  are  being  elicited 
in  ibe  causal  direction.  Furthermore,  since  the  knowledge 
-that  is  obtained  is  the  “ictcisc”  of  the  knowledge  that  is 
eventually  desired*,  the  did tation  process  is  known  as  “back¬ 
ward  thinking*.  The  method  by  which  Probability  {disease  | 
symptom )  is  computed  from  Prcbability{symptom )  disease) 
is  Bayesian  network  inference,  described  below. 

Summary:  Once  node  value  sets  and  conditional  proba¬ 
bilities  have  been  quantified,  the  Bayesian  network  becomes 
a  formal  representation  of  the  joint  probability  distribution 
of  the  situation  bang  modelled.  Any  given  network  is,  how¬ 
ever,  only  a  particular  representation  of  the  joint  probability 
distribution.  For  any  given  distribution,  there  are  a  number 
of  different  Bayesian  network  representations,  each  conform¬ 
ing  to  the  axioms  of  the  probability  calculus.  Although  each 
representation  is  equivalent  in  a  probabilistic  sense,  the  rep¬ 
resentations  differ  in  terms  of  explanatory  power  and  (po¬ 
tential)  computational  efficiency.  The  sdection  of  a  parsi¬ 
monious,  easily  understood  representation  is  thus  a  crudal 
process  that  is,  in  fact,  greatly  facilitated  by  the  ability  to 
separate  qualitative  structure  from  quantitative  detail,  as 
described  above. 

BAYESIAN  NETWORK  INFERENCE 

Since,  dearly,  one’s  belief  in  the  certainty  of  a  given  situa¬ 
tion  changes  with  the  acquisition  of  evidence,  a  mechanism 
roust  be  made  available  by  which  the  impact  of  newly  ac¬ 
quired  evidence  can  be  revealed  by  the  Bayesian  network 
representation  of  the  situation.  Two  such  mechanisms,  each 
of  which  makes  use  of  the  same  Bayesian  network  repre¬ 
sentation  scheme,  have  been  implemented.  Although  both 
algorithms  operate  within  the  same  basic  updating  loop, 

*  acquire  evidence 

u  create  evidence  nodes 

iii  attach  evidence  nodes  to  the  network 

ip  compute  o  posteriori  probabilities  for  all  state  nodes 

v  compute  hypotheses  about  situation 

ci  go  to  i 

each  algorithm  computes  o  posteriori  probabilities  for  the 
state  nodes  in  a  different  manner.  The  two  algorithms,  re¬ 
ferred  to  subsequently  as  Shachter 's  Algorithm  [6]  and  Pearl's 
Algorithm  [7),  are  described  below. 

Shachtcr’s  Algorithm:  Typically,  one  wishes  to  com 
pute  the  degree  of  belief  in  the  values  of  a  single  state  node, 
conditioned  upon  the  acquisition  of  some  set  of  evidence 
nodes.  Probabilistically,  this  represents  the  computation  of 
an  a  posteriori  probability  for  the  state  node,  as  derived  from 
the  original  joint  probability  distribution  rcpicsented  by  the 
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network.  In  effect,  this  requires  that  all  state  nodes  except 
for  the  one  selected  must  be  removed  from  the  network,  a 
procedure  accomplished  via  the  manipulation  of  the  graph 
structure  itself,  by  means  of  the  processes  of  node  removal 
and  Uni  reversal.  Figure  7  shows  a  simple  example  of  the 
kind  of  graph  manipulation  that  the  computation  of  a  pos¬ 
teriori  probabilities  would  require. 

A  state  node  may  be  removed  only  when  it  ha*  no  suc¬ 
cessors  in  the  network,  and  such  a  node  is  called  a  barren 
node.  When  a  node  must  be  removed,  and  it  has  succes¬ 
sors,  then  links  must  be  reversed  so  as  to  create  a  network  in 
which  the  node  becomes  barren.  Link  reversal  corresponds 
probabilistically  to  the  application  of  Bayes’  rule  and  any 
link  may  be  reversed  providing  that  no  cycles  are  created  by 
its  reversal-  In  terms  of  manipulations  to  the  graph  struc¬ 
ture  itself,  link  reversal  amounts  to  ensuring  that  each  node 
associated  with  the  reversal  acquires  additional  links  ema¬ 
nating  from  the  other’s  predecessors.  In  short,  the  removal 
of  a  non-barren  node  is  accomplished  by  simply  transform¬ 
ing  the  node  into  a  barren  node  via  the  sequential  reversal 
of  all  links  between  the  node  and  its  successors.  Figure  8  il¬ 
lustrates  the  process  of  link  reversal,  and  figure  9  illustrates 
how  the  a  posteriori  probabilities  can  be  computed  via  node 
removal  and  link  reversal. 

When  evidence  is  acquired,  the  appropriate  inference  mak 
ing  procedure  takes  place  in  two  steps.  Evidence  is  first 
added  to  the  Bayesian  network  as  evidence  nodes,  by  means 
of  a  rule  based  process  in  which  evidence  is  recognized  and 
attached  to  the  appropriate  nodes  in  the  network  along  with 
the  associated  conditional  probability  matrix.  Once  evidence 
has  been  attached,  link  reversal  constitutes  the  process  by 
which  one  infers  the  a  posteriori  distribution  of  the  state 
nodes  conditioned  upon  the  evidence. 

Pearl’s  Inference  Technique:  Unlike  the  approach  de¬ 
scribed  above,  this  inference  mechanism  docs  not  involve  ma¬ 
nipulation  of  the  graph  structure  itself.  Propagation  of  evi¬ 
dence  occurs  not  by  link  reversal,  but  instead  by  the  trans¬ 
mission  of  beliefs  within  the  framework  of  an  object-oriented, 
message  passing  inferential  metaphor.  In  this  approach,  two 
processes  are  involved  at  a  node:  the  fusion  of  the  beliefs  as¬ 
sociated  with  the  predecessor  nodes  (causal  or  anticipatory 
support)  with  the  beliefs  associated  with  the  successor  nodes 
(diagnostic  or  retrospective  support),  and  the  subsequent 
transmission  of  newly  fused  information  to  both  successors 
and  predecessors.  In  this  inference  scheme,  each  node  acts  at 
an  independent  processor  and  so  fusion  and  propagation  can 
take  place  asynchronously,  thus  offering  considerable  poten¬ 
tial  for  the  development  of  a  distributed,  parallel  implemen¬ 
tation  of  this  inference  mechanism.  One  pays  for  this  luxury, 
however,  with  the  coin  of  representational  restriction,  since 
onl;  trees  and  singly  connected  graphs  arc  condusivc  to  this 
approach  to  inference,  unlike  the  Shachter  mechanism  which 
imposes  no  such  restrictions.  Figure  10  illustrates  the  prop¬ 
agation  scheme*.  Two  leaves  acquire  evidence  attachments 
and,  subsequent  to  fusion,  new  information  is  propagated 
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Figure  7:  Deriving  a  posteriori  Probabilities 


Figure  8‘  The  Link  Reversal  Process 
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upwards  (white  arrows)  and  downwards  (black  arrows)  in 
parallel.  When  no  new  information  remains  to  be  fused,  the 
graph  is  in  equilibrium  and  propagation  halts. 

The  availability  of  two  distinct  inference  procedures,  both 
making  use  of  the  same  underlying  representation  scheme,  of¬ 
fers  a  considerable  advantage:  when  the  particular  topology 
of  the  network  is  appropriate,  Pearl’s  approach  to  inference7 
can  be  used  whereas,  when  the  network  extends  beyond  the 
complexity  of  a  singly  connected  graph,  Shachtcr’s  more  gen¬ 
eral  approach  can  be  utilized. 

THE  I1IM  ALGORITHM 

One  problem  in  applying  the  Bayesian  network  representa¬ 
tion  to  situation  assessment  has  to  do  with  interpretation  of 
the  results  of  inference.  For  simplicity,  assume  that  our  task 
is  to  classify  the  situation  assessed  as  being  cither  normal 
or  abnormal  Since  we  have  only  limited  and  uncertain  in¬ 
dications,  this  classification  must  be  probabilistic;  wc  roust 
assess  the  probability  pn  that  the  situation  is  normal  (or, 
equivalently,  the  probability  pa  s=  1  —  pn  that  the  situation 
is  abnormal).  Typically,  this  assessment  will  depend  on  the 
posterior  values  at  many — often  cecry— stale  node  in  the 
network.  If  the  posterior  distributions  on  the  state  nodes 
generally  tend  to  indicate  that  the  situation  is  normal,  but 
jingle  posterior  value  at  a  single  state  node  is  anomalous, 
we  might  very  well  fail  to  notice  this  one  number  among  the 
dozens  (or  even  hundreds)  that  are  computed— even  though, 
given  the  other  values,  this  single  number  it  a  very  strong 
indication  that  the  situation  is  abnormal.  Evidently,  some 
support  for  a  global  assessment  of  the  posterior  values  is 
required. 


Figure  10:  Fusion  and  Transmission  of  Evidence 


The  way  to  address  this  problem  within  the  framework 
set  forth  in  the  previous  section  is: 

•  create  a  new  state  node  Situation  with  values  normal 
and  abnormal, 

•  add  a  link  from  every  state  node  in  the  network  to 
Situation, 

•  assess  P(normal  J  x)  for  every  combination  x  of  values 
of  X*,  and 

•  compute  a  posterior  value  for  P (normal)  via  Shachter’s 
algorithm.® 
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There  arc,  however,  several  disadvantages  to  this  appriSach. 
Most  important  among  them  is  that  calculate  cgVposterior 
for  normal  will  probably  be  rather  expensive:  compared  to 
computing  posteriors  for  one  of  tho  maximal  nodes  in  the 
network,  every  barren  node  removal  will  require  reversal  of 
an  additional  link  to  SilvAiton,  and  the  array  of  conditionals  " 
associated  with  that" link  is  very  large  compared  to  any  of 
the  others  in  th^network.  Also,  Shachter’s  algorithm  docs 
not  take,ad vantage  of  the  fact  that 

„  -  P(normal\x)  =  0 

for  the  overwhelming  majority  of  values  x. 

Fortunately,  it  turns  out  that  computation  of  pn  is  quite 
simple  given  rather  standard  Bayesian  methods  that  nonethe¬ 
less  take  advantage  of  the  conditional  independencies  in  the 
network.  Consider  the  function  N  from  values  x  to  (0,1) 
defined  by: 

iV(x)  ;=  P(normal )  x) 

The  best  estimate  for  the  value  of  N — that  is,  the  best  esti¬ 
mate  of  pn  gi\  en  the  evidence  B  =  e  and  the  joint  proba¬ 
bility  distribution  represented  by  the  network  is  simply  the 
conditional  expectation  of  N  ghen  the  evidence. 


By  Bayes’  theorem, 


2>(x)P(e|x)P(x) 


P(e)  =  £P(e|x)P(x) 

X 

Note  that'  the  quantities  P(c  |  x)  are  the  the  conditional 
probabilities  used  in  attaching  the  evidence  to  the  net,  that 
the  quantities  F(x)  can  be  computed  at  “network  definition”- 
time,  as 

p(x)=np(*>  !*<•♦»»  ••»*«) 

and  that  an  addend  in  the  numerator  of  the  formula  for 
(N  |  e)  makes  a  contribution  to  the  sum  only  if  iV(x)  £  0 
making  compact  and  efficient  representation  of  the  “defini¬ 
tion”  of  N  straightforward. 

These  formula  easily  generalize  to  multiple  pieces  of  ev¬ 
idence.  Moreover,  the  complexity  of  the  calculation  can  be 
made  linear  m  the  size  of  the  network  and  number  of  pieces 
of  evidence.  Consider  the  case  where  there  are  two  pieces  of 
evidence,  E\  =  ej  and  E-t  =  ej.  Wc  have 

P(<i,e:,x)  =  P(ei|«j,x)P(e2|x)  P(x) 

=  P(<t  |x)  P(e2  |x)  P(x) 

where  the  last  equality  is  due  to  the  fact  that  the  evidence 
is  probabilistically  independent  given  the  value  of  the  nodes 
in  the  net  (i.e.,  evidence  nodes  are  always  final).  Therefore, 


2>(x)P(e,|x)P(ej|x)P(x) 


l.ej)  =  £p(«l  |x)  P(e2  |x)  P(x) 

X 

•Generally,  for  evidence  E3  =  tj  (1  <  j  <  m), 

{.V|e)  = 

£i*(x)- (iM*!*))  'PM 


)=s(n^/ix))- 


Although  further  optimizations  are  certainly  possible10,  per¬ 
formance  of  the  “unoptimized”  version  has  proven  adequate 
for  applications  to  date.  In  practice,  it  has  been  found  that 
the  “brute  force”  method  of  computing  hypotheses  (creat¬ 
ing  a  hypothesis  node  that  depends  upon  other  state  nodes), 
described  at  the  beginning  of  this  section  is  useful  for  rapid 
prototyping,  and  a  transition  to  the  more  efficient  HIM  al¬ 
gorithm  described  above  then  takes  place  when  a  completed 
DA  is  ready  to  be  fielded. 

A  NETWORK  DEVELOPMENT 
ENVIRONMENT 

In  order  to  make  full  use  of  the  Bayesian  network  approach 
described  in  this  paper,  a  network  development  environment 
must  be  made  available  to  the  DA  developer.  The  authors 
have  developed  a  sophisticated  mouse  and  window  based  en¬ 
vironment  that  allows  for  the  rapid  prototyping  of  Bayesian 
networks.  This  environment  runs  on  a  SUN-3U  workstation, 
and  is  written  completely  in  Common  LISP.  This  Bayesian 
network  development  environment  allows  the  DA  developer 
to  build  networks,  define  and  attach  evidence  to  networks, 
compute  o  posteriori  probabilities,  and  define  and  evaluate 
hypotheses.  Graph  drawing  features  of  the  development  en¬ 
vironment  allow  probability  distributions  to  be  conveniently 
examined,  and  also  enable  probability  distributions  to  be  en¬ 
tered  graphically.  Since  networks  may  be  completely  defined 
without  the  need  for  programming,  the  development  environ¬ 
ment  facilitates  close  interaction  between  DA  developer  and 
domain  expert,  thus  minimizing  the  knowledge  engineering 
“bottleneck”. 
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CONCLUSIONS 
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Inherently  uncertain  domains  demand  a  unique  approach  to 
both  knowledge  representation  and  inference  for  situation  as¬ 
sessment.  The  Bayesian  network  representation  has  proven 
to  be  remarkably  successful  for  ameliorating  the  problems 
associated  with  knowledge  acquisition  in  an  uncertain  do¬ 
main  and,  similarly,  the  Bayesian  network  inference  schemes 
ha\e  been  found  to  deal  with  uncertainty  in  an  intuitive  and 
consistent  manner.  Finally,  a  rich  set  of  Bayesian  network 
development  tools  has  been  found  to  be  essential  for  effective 
knowledge  engineering. 

FOOTNOTES 

1  The  term  evidence  is  henceforth  used  to  describe  feature- 
value  pairs  abstracted  from  raw  sensor  data. 

9  Such  global  assessments  are  referred  to  as  Hypotheses  in 
the  remainder  of  tins  paper. 

3  That  is,  evidence  acquired  from  sources  other  than  sen¬ 
sors. 

*  This  example  is  drawn  from  one  given  in  [7j. 

5  Remember,  Probahility(disease  \  symptom)  is  the  prob¬ 
ability  of  interest. 

4  This  figure  is  adapted  from  one  first  appearing  in  |7j. 

7  Computationally  more  efficient  than  Shachter’s  approach. 

*  To  keep  probabilistic  formulas  a  bit  more  compact;  fet 


and 


Then  the  expression 


P(normal  |  x) 
is  standard  shorthand  for 

P(Siluation  =  normal  \ 

X\  =  =  2},a.  •  ,An  =  In) 

*  Pearl’s  algorithm  cannot  be  applied  to  the  modified 
network  since  there  will  be  multiple  paths  from  any  non-final 
node  in  the  original  network  to  the  node  Situation. 

10  For  instance,  if 

P(e|x)  =  J>(c|*,) 


then 


P(e)  =  £P(e|x)J><*) 

X 

=  £^l*.)-(  £  i>w) 

**  SUN-3  is  a  trademark  of  Sun  Microsystems. 
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PERSONALIZED  DECISION  ANALYSIS  (PDA)  MODELS  AS  VEHICLES 
FOR  TACTICAL  MI  KNOWLEDGE 

— -  Dr.  Rex  V.  Brown 


Decision  Science  Consortium,  Inc. 


tllUIARYJCASOQ  .BE  -AmSSSEQ 

The  motivating  problem  this  paper  addresses  is 
how  to  extract  and  use  knowledge  within  the 
military  Intelligence  domain  which  is  relevant  to 
tactical  command  and-’control  (say  at  the  Army 
Division  level),  and  is  available  in  advance  of 
coobat.  .-It  nay  be  resident  in  a  variety  of  par¬ 
tially  overlapping  sources,  including  military 
professionals,  substantive  and  methodological  ex¬ 
perts,  and  documented  studies. 

The  knowledge  is  to  be  put  at  the  disposal  of. 
tactical  commanders  and  their  staffs,  who  are  to 
use  it  on  the  battlefield- -either  in  the  form  of 
an  on-line  computerized  decision  aid,  or  in  the 
fora  of  training  acquired  prior  to  the  battle. 


NATURE  OF  KNOWLEDGE  TO. BE-CAEfl!£EB 

The  type-  of  tactical  Ml  knowledge  we  arc  con¬ 
cerned  with  is  distinctive,  in  that  it  involves 
situations,  threats,  intelligence  and  options 
which  it  is  not  feasible  to  sharply  and  coaprehcn- 
slvely  envisage  in  advance.  (By  contrast,  the 
success  stories  of  AI  expert  systems  have  tended 
to  be  for  relatively  well -structured  problems, 
such  as  medical  diagnosis,  oil  exploration  and  en¬ 
gineering  design.)  Other  distinctive  features 
which  aay  also  influence  the  appropriate  node  of 
elicitation,  or  the  foraat  of  representation,  In¬ 
clude;  instability  (i.e.,  the  substance  of 
nilltary  practice  evolves),  node  of  learning  (from 
books  and  exercises,  rather  than  experience  of  the 
•real  thing*);  and  institutional  (we  are  not  in 
terested  in  any  individual's  knowledge  per  se). 

The  knowledge  nay  be  at  different  levels  of 
generality;  froa  that  of  a  field  nanual,  refer¬ 
ring,  say,  to  any  US-Soviet  conflict  in  Central 
Europe;  to  the  intelligence  preparation  of  a 
specific  European  battlefield,  to  judgnents 
developed  in  the  course  of  a  particular  engage - 
sent. 


IHE..m.AggROAfll 

The  approach  adopted  Is  to  inpose  the  logical 
discipline  of  personalized  decision  analysis  (PDA) 
on  the  fora  of  knowledge  elicited,  so  that  it  is 
encoded  as  a  coherent  system  of  normative  decision 
and/or  inference  models  incorporating  quantitative 
measures  of  probability  and  utility.  The  PDA  pre¬ 
diction  approach  to  KE  is  practically  and  concep¬ 
tually  well  advanced,  and  indeed  mature  software 
is  available  for  each  variant. 

The  two  most  familiar  PDA  modeling  paradigms 
are  choice  evaluation  through  subjective  expert 
utility,  and  Inference  through  Bayesian  updating 
(Barclay,  et  al.,  1977).  The  knowledge  is  repre¬ 
senting  in  one  of  two  ways.  Structure  (for  ex¬ 
ample,  what  enemy  intent  gives  rise  to  what  intel¬ 
ligence  indicators)  is  reflected  in  the  form  and 
labeling  of  the  model.  Content  (such  as  the  ex¬ 
tent  to  which  an  indicator  supports  a  hypothesis 
of  intent)  is  reflected  in  probability  and  other 
numbers. 

flW?RESS  MADE 

With  the  sponsorship  of  the  Army  Research  In¬ 
stitute,  Fort  Huachuca  field  office,  DSC  has  been 
developing  knowledge  elicitation  (KE)  techniques 
within  the  PDA  paradigm  (as  well  as  others  from 
different  traditions),  and  trying  them  out  ex¬ 
perimentally  in  Aray  contexts,  using  Army  sub¬ 
jects,  The  focus  has  been  on  two  common  knowledge 
elicitation  tasks,  discussed  below. 


PREDICTlNG-ENEMY-ACtLQN 

The  knowledge  a  G-2  uses  in  assessing  enemy 
course  of  action  or  intent  is  of  two  kinds,  causal 
and  diagnostic,  both  of  which  can  be  represented 
as  probabilistic  linkages.  Personalist  belief 
nets  (typically  represented  as  influence  diagrams) 
capture  causal  judgments,  of  the  "it  all  depends" 
type  (e.g.  location  of  enemy  attack  depends  on  his 
mission).  Within  this  framework,  predictions  of 
enemy  intent  (e.g.  mission)  will  often  be  anchored 
to  a  second-guessing  of  tho  enemy’s  decision 
process,  for  example  in  the  form  of  a  ouitlat- 
tribute  utility  model.  Updating  probabilistic  as¬ 
sessments  in  the  light  of  diagnostic  intelligence 
developments  can  be  caf^ured  in  Bayesian  updating 
analysis. 


Figures  1,  2,  and  3  illustrate  each  of  the 
above  techniques  with  a  worked  example,  purporting 
to  address  the  saae.KE  task,  viz:  during  IPB 
(Intelligence  Preparation  of  the  Battlefield),  for 
a  given  division  and  in  a  delineated  sector  of  the 
Fulda  Gap  region  In  western  Germany  after  the 
first  few  days  of  a  Soviet  offensive,  how  probable 
Is  it  that  the  eneay  will  attack  in  the  North? 
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The  conditioned  assessment  aodol  shown  in 
Figure  1  has  a  simple  but  powerful  logic  for  ex¬ 
ploiting  the  case  where  the  expert's  (or  ocher 
source's)  knowledge  bears  most  naturally  on  one  or 
more  causes  of  tho  event  of  interest,  when  the 
relevant  conditional  and  unconditional  assessments 
are  assigned  (using  well-established  probability 
elicitation  techniques),  the  required  probabil- 
ities  aro  straightforwardly  calculated.  Multiple 
models  can  be  constructed  for  tho  same  required 
assessment,  using  different  conditioning  vari¬ 
ables,  singly  or  (as  in  Figure  lb)  in  combination. 
Influence  diagrams  can  be  used  to  help  organize 
the  linkages,  when  they  bccoao  at  all  complex. 

The  Judgment  and  data  embodied  in  such  PDA 
models  can  be  logically  decomposed  Into  separable 
sets  of  inputs,  supplied  by  tho  same  or  different 
sources.  In  particular,  model  structure  and 
default  content  numbers  can  be  developed  ahead  of 
battle,  using  the  necessary  amounts  of  time  and 
elicitation  expertise  which  are  not  available  in 
the  heat  of  battle.  For  example,  in  the  condi¬ 
tioned  assessment  example,  a  monu  of  typically  ap¬ 
propriate  model  structures  would  be  developed 
ahead  of  time  (e.g.,  mission  and/or  force  ratios 
as  determinants  of  location  of  attack);  as  well  as 
any  Judgment  or  data  on  the  corresponding  condi¬ 
tional  probabilities  (e.g.,  on  how  likely  the 
enemy  is  to  attack  where  he  has  a  force- ratio  ad¬ 
vantage  of  less  than  3:1), 

Much  of  the  practical  value  of  storing 
knowledge  in  this  form  will  depend  on  being  able 
to  complete  the  model  during  combat,  when  the  as¬ 
sessment  is  needed.  This  requires  a  user-friendly 
input-output  interface  and  adequately  trained 
staff.  This  is  a  powerful  reason  to  keep  the 
structure  simple. 
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Figure  2a  shows  the  simplest  fora  of  a 
Bayesian  updating  model,  based  on  the  well-known 
prior-posterior  paradigm,  where  the  required  as¬ 
sessment  is  periodically  updated  as  new  data  .is 
received  The  BAUDI  program  developed  for  ARI  is, 
designed  to  be  used  in  real -tine  to  handle  reports 
of  any  degree  of  complexity,  provided  only  that 
there  is  sooeone  to  assess  its  diagnosticity,  in 
appropriate  conditional  probability  teras.  In 
this  fora,  all  the  KE  is  done  during  battle,  and 
there  is  little  scope  for  storing  knowledge  of  en¬ 
during  interest. 

However,  a  two-stage  node!  of  the  type  shown 
in  Figure  2b  permits  partitioning  out  knowledge  to 
be  stored  ahead  of  tine.  Specifically,  a  required 
assessaent  of  a  given  kind  (e.g.,  eneay  attack  In 
a  given  location)  can  be  related  (as  In  the 
relevant  field  aanuals)  to  a  broadly  defined  in¬ 
dicator  event  (e.g.,  aassing  of  forces)  which  is 
of  general  applicability.  Diagnostic  generaliza¬ 
tions  can  be  stored  as  conditional  probabilities 
(default  likelihood  functions),  which  can  be  over¬ 
ridden  when  necessary. 

On  the  battlefield,  Inconlng  Intelligence  only 
needs  to  be  characterized  in  teras  of  how  auch 
evidentiary  support  It  provides  for  the  indicator 
event  (typically  a  scale,  rather  than  yes-no  as  in 
this  staple  exaaple).  Conditional  probabilities 
(likelihoods)  of  evidentiary  support  given  in¬ 
dicator  activity  could  also  be  given  default 
values  in  advance.  The  prior  probability  (e.g., 
of  enemy  attack  in  this  location)  would  be  sup¬ 
plied,  on  the  spot,  either  by  direct  Judgment,  or 
as  output  from  another  exercise,  such  as  condi¬ 
tioned  assessaent. 


The  third  PDA  approach,  illustrated  in  Figure 
3,  Is  to  capture  knowledge  which  relates  to 
projecting  how  the  eneny  will  make  the  choice  In 
quostion.  The  possible  ways  of  doing  this  are  as 
varied  as  thero  are  PDA  choice  models,  but  again 
thero  are  default  aodels  which  can  be  developed  to 
draw  onL  Multiattributo  Utility  Analysis  (MUA) 
models  are  promising,  with  standard  attributes, 
such  as  thoso  shown  here. 


A  slaple  and  commonly  used  additive  model  will 
usually  work  well.  Using  an  expert's  "best  guess" 
at  how  the  eneay  will  weight  each  attribute,  and  a 
score  for  each  of  the  options  in  question,  an 
overall  score  for  each  auch  option  can  be  calcu¬ 
lated.  (Default  iaportance  weights  would  be 
stored  in  advance.)  These  comparative  scores  need 
to  be  converted  into  probabilities  that  the  eneay 
will  actually  adopt  each  option  (since  we  cannot 
be  sure  he  will  act  as  we  project).  This  could  bo 
done  by  direct  Judgaent  on  the  battlefield,  or  via 
a  pre- stored  function,  such  as  that  shown  In 
Figure  3b.  A  plausible  property  for  such  a  func¬ 
tion  is  chat  if  the  calculated  scores  are  equal, 
so  are  the  probabilities  (but  this  does  not  logi¬ 
cally  have  to  be  the  case). 


In  general,  a  given  assessaent  problem  can  be 
formulated  in  different  ways  corresponding  to  dif¬ 
ferent  "experts"  or, alternative  ways  of  looking  at 
an  assessaent  by  the  saae  expert.  These  can  be 
poolco  or  reconciled,  and  progressively  added  to 
or  refined,  as  aore  knowledge  becoaes  available 
(Brown  and  LIndley,  1986) . 

Figure  4  shows  the  elements  of  an  Integrated 
K£  strategy  using  the  three  forms  of  PDA,  and  in¬ 
dicating  some  of  the  aain  aspects  of  supplying 
structure  and  content  In  each  case. 


siMuiAiiMLiHB je :m  oz-Mrnz 

Step-through  siaulation  Is  a  computer-aided 
PDA- Inspired  technique  for  generating  probabil¬ 
istically  realistic  sequences  through  conplcx 
ill-defined  futures,  typified  by  military  coabat. 
It  does  so  by  having  red,  blue,  white  and  coabat 
resolution  experts  conduct  Interactive  thought  ex¬ 
periments,  where  they  specify  possible  develop¬ 
ments  in  sequence.  Probability  distributions  are 
assessed,  as  needed,  and  sampled,  Monte  Carlo 
style. 

Unlike  conventional  Monte  Carlo  simulation, 
step-through  simulation  avoids  having  to  specify 
in  advance,  even  implicitly,  all  contingencies  and 
their  conditional  probabilities.  Unlike  conven¬ 
tional  war-gaming,  it  limits  cognitive  myopia  and 
preconceptions,  and  exercises  the  full  range  of 
possibilities  in  a  controlled  fashion. 

The  resulting  sequences  are  treated  as  a  prob¬ 
ability  sample  of  all  possible  futures,  reflecting 
the  knowledge  of  the  participating  experts.  The 
sequences  can  be  used  to;  evaluate  the  probable 
consequences  of  alternative  friendly  courses  of 
action;  generate  representative  scenarios  for 
various  conventional  purposes;  provide  pre-battle 
training  to  participants  in  the  siaulation;  and 
contribute  to  a  store  of  surrogate  "case  studies" 
from  which  generalized  knowledge  can  be  syn¬ 
thesized. 
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„  »  CONC1DSTOM 

The  thrust  of  PDA, models  generally  Is  to 
enhance  expert- knowledge,  rather-' than  eni late  It 
(which  Is  basically  what  typical  AI  expert  systeas 


PDA  models  assure  that  conclusions,  whether  of 
decision  or  choice,  are  logically  coherent  and  can 
be  reviewed  and  refined,  piece  by  piece,  froa  a 
multitude  of  sources  (hunan  and  other).  They  can 
aoreover,  be  aade  to  conform,  at  least  in  essence! 
to  any  sound  line  of  reasoning  or  prescription 
(and  any  logical  inconsistency  can  be  detected  and 
corrected).  For  this  reason  it -is. a  proaising 
candidate  for  computerizing  military '"field 
manuals  or  doctrine,  with  the  prospect  of  making 
then  richer  and  nore  finely  articulated,  in  the 
fora,  say.  of  expert  systeas  for  field  work  sta- 
tions. 


Such  expert  systeas  will  usually  require 
progressive  fine-tuning,  in  terns  of  probability 
value  and  inportance  nuabers,  right  up  to  the 
point  of  use  on  the  battlefield.  Until  a  substan¬ 
tial  amount  of  user-engineering  has  been  done, 
this  will  represent  a  non-trivial  burden  of  tine 
and  skill  on  line  and  staff  in  the  field. 

However,  this  is  bound  to  the  case  for  any  com¬ 
puterized  -expert  syste«\  which  purports  to  re¬ 
place  or  enhance  nilitary  judgaent  of  any  but  the 
most  routlnized  kind.  7 


A  problem  with  PDA  models  for  expert  systems 
is  that  the  knowledge  of  any  given  huaan  may  not 
tit  readily  into  any  particular  structure.  Cogni¬ 
tive  structures  differ  from  one  individual  to 
another.  (However,  this  will  be  a  problem  with  any 
fortcal  representation  of  knowledge  which  seeks  to 
accommodate  multiple  sources).  Moreover,  impor¬ 
tant  knowledge  may  be  -lost  in  the  translation*  as 
qualitative  perceptions  of  uncertainty,  value  etc. 
are  forced  into  the  numerical  fora  of  probabil¬ 
ities,  utilities  etc.  This  is  a  good  argument  for 
making  sure  that  the  user  of  a  system  can  override 
it  with  his  direct  Judgaent  and  generally  use  it 
as  a  -collaborator-  rather  than  a  replacement. 

Key  technical  issues  which  still  need  to  be 
addressed  include; 


verbal  elicitation  protocols  for  structure 
and  content; 

computer-aided  interaction  between  model  and 
knowledge  user  (who  may  also  be  a  source  of 
last-minute  knowledge  on  the  battlefield) ; 


selecting  modeling  approaches  to  mstch 
situations. 


Although  the  PDA  approach  to  prediction  is 
*  the  step- through  approach  to  KE 

is  .till  at  the  conceptual  stage  of  development 
and  its  implementation.  Evaluation  of  its  poten¬ 
tial.  remains. to  be  established.  Interactive 


software,  though  primitive,  has  bean  developed  foV 
this  purpose -(Ulvlla  and  Brown,  1978).  step- 
through  stauUtlon  partakes  o£  the  same  basic 

ouriL°f  PDA\  and  can  bc  used  for  many  of  the  same 
purposes--such  as  prediction  and  evaluating 

llkIlvStofheCC,l0n'  Ht,ucv'r-  !cs  Implementation  Is 
likely  to-be  always  too  cumbersome  and  demanding 
to  be  either  adapted  or  used  on  the  battlefield 

glrrufn  r°a‘Sln8  ls  prob“M>'  f°r  trainings 
fce.  arlos  ^""5'  and  f°r  the  Oovelopmen/of 
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SURPRISE  ATTACK:  LABORATORY  EXPERIMENTS  AND  COGNITIVE 
THEORY  ON  COMMAND  CENTER  EFFECTIVENESS  * 
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ABSTRACT 

This  paper  reports  on  a  set  of  results 
obtained  from  two  experiments  carried  out  at  the 
Naval  Postgraduate  School  In  1987-1988  to  Inves¬ 
tigate  some  conditions  for  the  effective  opera¬ 
tion  of  headquarters  organizations  in  wartime 
situations.  In  particular,  it  analyzes  the 
reactions  of  commanders,  with  and  without  contin¬ 
gency  plans,  to  the  receipt  of  discrepant  Infor¬ 
mation  occasioned  by  a  surprise  attack  .  Vhereas 
cotraanders  of  the  contingency- planning  treatment 
groups  conformed  to  "rational*  expectations  by 
moderating  their  confidence  in  the  initially 
reported  enemy  intent  upon  learning  of  the  sur¬ 
prise  attack,  by  reporting  higher  subjective 
workloads  at  the  onset  on  the  attack,  by  becoming 
more  informed  of  enemy  actions. as  a  result  of 
their  Information  search,  and  by  performing 
better  against  the  enemy  on  the  battlefield,  the 
single  thread  cotisanders  did  precisely  the 
opposite. 


I.  INTRODUCTION 

"This  dispatch  is  to  be  considered  a  war 
warning.  Negotiations  with  Japan  looking  toward 
stabilization  of  conditions  in  the  Pacific  have 
ceased  and  an  aggressive  move  by  Japan  Is 
expected  within  the  next  few  days...  "Execute 
appropriate  defensive  deployment  preparatory  to 
carrying  out  the  tasks  assigned  in  WPL.46  (the 
Naval  War  plan)...*  War  Warning  from  Admiral 
Harold  Stark,  Chief  of  Naval  Operations  to 
Admiral  H.  E.  Klrnmel,  Commander  in  Chief  of  the 
Pacific  Fleet,  Pearl  Harbor,  Hawaii,  November  27, 


"In  sumary,  the  members  of  the  Navy  group  in 
Hawaii  in  1941  bolstered  their  assumption  that 
Pearl  Harbor  was  Immune  from  attack  by  accepting 
well-worn  ideological  assumptions  as  the  basis 
for  flimsy  rationalizations,  which  they  thought 


W  thanks are  due  to  Or.  Mark  Scher  and  Hr 
Robert  Cnoisser  of  OCA,  Dr.  Robert  Tenny,  Or. 
Elliot  Entin,  Or.  Jean  HacMillen,  Ms.  Ann 
Needalman  and  Hs.  Oiane  Mikael  Ian  of  Alpha  Tech 
and  Mr,  Paul  Lentz  of  ESI  for  their  advice  and 
support  on  this  particular  branching  of  OCA's 
HEAT  Project.  Thanks  are  also  due  to  Prof. 
Lester  Ingber  and  Joe  Stewart  and  their  students 
at  NPS. 


were  based  on -hard  facts..."  In  Irving  W.  Janis 
Groupthink:  Psychological  Studies  of  Policy 
bVci^syonJ  and  F.YasjCM?s ■  i 

At  0800  on  December  7,  1941,  the  Japanese 
attacked  Pearl  Harbor  and  destroyed  the  Pacific 
Fleet.  This  despite  the  fact  that  earlier  in  the 
year  cryptographers  in  Washington  had  broken  the 
Japaneses! litary  codes  and  provided  ample 
warning  of  Japanese  Intent.  Admiral  Kiirrcel  and 
his  Naval  advisors*were  so  confident  of  the 
security  of  the  Fleet  a  few  days  before  the 
attack  that  they  blithely  presumed  the  Army 
Command  in  Pearl  was  conducting  full-time  radar 
surveillance  for  them.  They  even  ignored  the 
significance  of  the  burning  of  papers  and  codes 
in  the  Japanese  consulate  in  Hawaii  observed  two 
days  before  the  attack.  How  are  we  to  account 
for  such  phenomena;  and  how,  then,  can  we  prevent 
them? 

peclsicn  Theory  Approach 

Perhaps  decision  theory  can  be  an  aid  to  our 
understanding.  A  military  headquarters  can  be 
viewed  as  a  multi-decision  makers  team  super¬ 
vising  a  highly  complex  and  uncertain  environ¬ 
ment.  Decision  theory,  as  elaborated  in  the 
control  theory  approach  is  concerned  almost 
entirely  with  the  control  of  a  set  of  variables 
in  order  to  maximize  a  cost  function  subject  to 
constraints.  As  noted  by  Wohl  (1981),  however, 
the  preponderance  of  work  in  decision  theory  is 
primarily  prescriptive  and  has  concentrated  on 
techniques  for  rational  option  selection,  while 
little  work  has  concentrated  on  those  portions  of 
the  process  which  are  of  greatest  interest  to 
military  conroanders,  viz  the  creation,  evalua¬ 
tion,  and  refinement  oTIiypotheses  (i.e.,  what 
the  situation  is)  and  options  (i.e.,  what  can  be 
done  about  it.) 

Wohl  (1981)  has  developed  a  Stimulus- 
Hypothesis-Option-Response  (SHOR)  paradigm  which 
broadens  the  perspective  on  the  headquarters 
decision  makers  in  a  laudable  attempt  to  account 
for  real  headquarters  decision  making  behavior. 
Wohl  focuses  on  uncertainty  reduction  as  a 
principle.  In  a  parallel  development,  the 
Headquarters  Effectiveness  Assessment  Tool  (HEAT) 
project,  which  sponsored  these  2  experiments,  has 
also  broadened  the  decision  theory  perspec-  tive 
in  similarly  viewing  the  headquarters  decision 
making  process  as  a  cycle  of  information 
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processing-  The  HEAT  cycle  begins  with  moni¬ 
toring  the  environment;  then  understanding  the 
environment,  generating  options,  predicting  their 
consequences,  deciding -among  them,  directing 
activities,  and  back  to  monitoring;  These  2 
closely  related  paradigms  both  emphasize  the  role 
of  the  hypothesis  testing  stage  of  the  decision 
making  cycle  and  cite  contingency  planning. as  a 
key  determinant  of  effectiveness.  Let  us  deepen 
this  perspective  by  considering  some  relevant 
cognitive  mechanisms. 

Dissonance  Reduction  .Approach 

One  of  the  most  important  hypotheses  that  the 
wartime  commander  must  develop  during  the  course 
of  battle  is  his  estimate  of  enemy  intentions. 
Beliefs  about  enemy  intent,  as  all  human  beliefs, 
are  based  upon  empirical  evidence,  logic,  and  the 
dynamics  of  human  cognitive  processes.  As  the 
commander  encounters  evidence  that  is  consistent 
or  Inconsistent  with  his  working  belief  about 
the  enemy,  he  is  governed  by  certain  rules  of 
cognitive  processing.  One  set  of  such  rules  is 
provided  by  the  theory  of  cognitive^dtssonance, 
and  as  such,  it  provides  us  with  provisional 
explanations  of  the  behavior  of  commanders  in 
wartime  headquarters  organizations.  How,  for 
example,  does  a  commander  behave  when  enter¬ 
taining  a  belief  that  the  enemy  Is  mounting  a 
frontal  assault  and  he  is  then  confronted  with 
Increasing  evidence  that  the  enemy  has  mounted  a 
massive  air  drop  to  his  rear?  He  experiences 
cognitive  dissonance  and  pressures  for  its 
reduction. 

Generally,  cognitive  dissonance  Is  defined  to 
exist  between  a  pair  of  beliefs  when  one  Implies 
the  obverse  of  the  other  (Festlnger,  1957).  If, 
for  example,  a  person  believes  (1)  “I  have  posi¬ 
tioned  my  forces  to  repel  a  massive  frontal 
attack  by  Red*  and  is  then  confronted  with 
evidence  that  (2)  “Red  is  launching  a  massive 
attack  to  our  rear*,  he  suffers  uncomfortable 
cognitive  dissonance.  He  can  reduce  this  dis¬ 
sonance  by  changing  his  belief  In  either.  If  (2) 
is  undeniable,  he  can^only  change  his  prior 
belief  In  (1),  the  intent  of  Red  to  mass  a 
frontal  attack.  He  will  behave  this  way  if  he  is 
not  highly  committed,  by  past  actions,  to  belief 
In  Reds  launching  a  massive  frontal  attack. 
However,  if  he  is  highly  committed  to  belief  in 
the  frontal  attack,  he  can  only  reduce  his 
dissonance  by  bolstering  this  cognition  with 
additional  consonant  evidence,  since  the 
magnitude  of  dissonance  is  a  function  of  the 
ratio  of  dissonant  cognitions  to  the  total  number 
of  relevant  (dissonant  and  consonant)  cogni¬ 
tions.  In  essence,  the  perse  who  is  bolstering 
amasses  a  great  body  of  other  beliefs  that  are 
consonant  with  the  conflicting  one  (HcGuire  in 
will,  in  effect,  attempt  to  “drown  out"  the 
dissonant  cognition  of  the  rear  assult;  he 
becomes  open  to  confirmatory  evidence  for  his 
prior  belief,  indeed  searches  for  it,  and  closed 
to  contradiction. 

Thus  the  reactfons  of  highly  coemitted  and 
relatively  uncowaitted  cocraanders  to  a  surprise 


attack  are  very  different.  While  the  highly 
conmitted  intensify  their  original  belief, 
increase  their  confidence  and  become  more  active 
in  bolstering  their  belief  in  the  frontal  attack 
by  argumentation  and  by  searching  for  additional 
evidence  consonant  with  the  validity  of  the 
frontal  attack,  the  poorly  committed  diminish 
their  credence.  They  feel  no  need  to  persuade 
others  of  the  belief  or  to  obey  its- behavioral 
constraints.  They  become  unbelievers  and  adopt  a 
different,  and  perhaps  more  rational,  course  of 
action. 

II.  EXPERIMENTAL  method  AND  RESULTS 

Two  experiments  were  conducted  at  the  Naval 
Postgraduate  School  at  Monterey  using  2  different 
wargame  simulators  with  military  officers  as 
subjects  to  tes*  the  major  hypothesis  that 
contingency  planning  leads  to  greater  battlefield 
effectiveness  and  to  investigate  the  cognitive 
mechanisms  that  mediate  the  relationship.  In 
both  experiments  military  officers  were  organized 
into  a  headquarters  organization  under  a  com¬ 
mander  and  fought  through  a  realistic  3  hour 
battle  scenario  developed  for  National  Defense 
University.  The  scenario  depicts  a  conflict  in 
Iran  with  Slue  forces  in  defense  of  the  Oarzln- 
8am  Pass  through  the  mountains  and  roughly 
equivalent  numbers  of  Red  forces  driving  from 
Afghanistan  to  secure  the  pass.  After  the  first 
half  hour  of  battle,  the  Blue  forces  are  hit  with 
a  surprise  attack  off  the  main  axis  of  Red 
advance  and  contrary  to  prior  Intelligence 
reports  on  Red  intentions. 

In  both  experiments,  the  major  independent 
variable  was  contingency  planning.  Contingency 
planning  was  operationally  defined  as  use  of  an 
oplan  that  has  multiple  estimates  of  enemy 
Intent,  multiple  responses  and  a  better  starting 
position  to  meet  a  variety  of  threats.  Single 
thread  planning  was  operationally  defined  as 
using  an  oplan  that  has  1  primary  estimate  of 
enemy  intent,  and  1  primary  course  of  action 
tailored  specifically  to  meet  that  threat. 

In  both  experiments,  the  major  dependent 
variable  was  an  Measure  of  Effect  (MOE)  computed 
from  Red  attrition  (or  a  combination  of  Red 
attrition  and  Red  position).  This  MOE  was 
computed  at  end  game  and  also  for  the  first  2 
half  hourly  time  periods  following  the  surprise. 

In  addition,  several  measures  of  the  operation  of 
headquarters  information  processing  were  also 
collected.  Figure  1  depicts  the  results  of  the 
tests  of  the  major  hypothesis  in  both 
experiments:  Contingency  planning  leads  to 
enhanced  battlefield  effectiveness  both  at  end 
game  and  in  response  to  the  surprise  attack. 
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FIGURE  1 
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The  first  experiment  was  conducted  on  the 
Joint  Theater  Level  Simulator  (OTIS)  at  the 
wargaming  laboratory  at  the  Naval  Postgraduate 
School,  August  24  -  September  4,  1987  (OCA, 

1987).  The  subjects  consisted  of  2  random 
assignment*  of  14  students  to  1  of  2  teams  each 
organized  into  5  command  cells  viz.  division,  2 
brigades,  aviation  and  discora.  *Tach  team 
participated  in  4  counter  balanced  trails  of  3 
hours  each  resulting  in  a  total  of  4  continoency 
planning  trials  and  4  single  thread  trials. ' 

th.  i*  1"  figure  1,  the  teams  engaged  in 
the  multiple  option  trials  performed  signifi¬ 
cantly  better  on  the  battlefield.  When  one 
examines  the  reactions  and  the  2  comaanders  to 
the  surprise  attack,  a  curious  phenomenon 
appears:  the  single  thread  commanders  actually 
increased  their  certainty  about  enemy  intent 
following  onset  of  the  surprise  attack.  As  shown 
in  Figure  2,  whereas  the  multiple  option  com¬ 
manders  showed  no  appreciable  change  in  their 
estimates  of  enemy  intent  before  and  after  the 
surprise  attack,  the  single  thread  commanders 
displayed  a  significant  5  percent  increase  in 
their  certainty  of  enemy  intent,  i.e.,  they 
bolstered  their  initial  false  belief.  (t-2.00 
P  .10  for  2df,  1  tailed).  5 

FIGURE  2 
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tn  15  surge  of  false  certainty,  on 
the_J,ri9'e  thread  commanders  was 
debilitating:  The  correlation  across  the  treat¬ 
ment  groups  between  the  amount  of  bolsterinq  by 
the  cormander  and  the  overall  battlefield  per¬ 
formance, of  his  headquarters  tea*  was  -.70 
accounting  for  roughly  half  of  the  variability  n 
h«o'J<b?itle^e,d  Performance.  In  terms  of 
battlefield  performance  in  the  rear  area,  where 
the  surprise  attach  occurred,  the  correlation 
with  bolstering  was  even  greater  (r  -  -.95) 
accounting  for  roughly  90  percent  of  the 
variability  In  the  rear  exchange  ratio. 

rri,^)yl<expe-rtent  “•  fielded  some  sur¬ 
prising  findings  regarding  the  subjective  wo-k- 
load  reported  by,  the  Blue  team  members  in  res- 
f?  su,r.pr.1fe  *«*<*•  Through  the  use  of 
the  Subjective  Workload  Evaluation  Assessment 
Tool  (SWEAT),  Bine  team  members  rated  the  levels 
menJal  effort,  and  time  pressure  which 
they  had  experienced  during  the  previous  half- 
hour.  As  Shown  In  Figure  3,  whereas  the  multiple 
option  teams  realistically  reported  a  significant 
increase  in  subjective  workload  of  Z'it  durtnq  the 
time  period  following  the  surprise  attack  the 
s  ng  e  thread  teams,  who  were  less  prepaid  for 
the  attack,  reported  only  a  marginal  increase  of 
6X  in  their  subjective  workload  following  the 

tailed)2  '  (t‘K53’  p*‘13  for  2df-'  I 
FIGURE  3 
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With  these  findings  in  mind,  we  sought  to  put 
our  experimental  hypotheses  to  another  test. 

EXPERIMENT  II 

,wu„Ihe.se?on<1  e*Wl«ent  was  conducted  on  the 
S  Pf™,at0!:  at  the  A™y  Training  and  Doctrine 
Command  Wargaming  Laboratory  at  the  Naval  Post- 
School  from  January  19  -  February  3. 

1988  (OCA,  1988).  The  subjects  consisted  of  3 
£»<«!!!*  *eaDJ  3  students  each  organized  at  the 
*?ve\an?  'ed  by  a  seasoned  colander 
from  the  Army's  101st  Airborne  Division.  Ten 
:™js  ;eJe  successfully  completed  resulting  in  a 
total  of  6  contingency  planning  trials  and  4 
single  thread  trails  of  3  hours  each.  As  shown 
in  Figure  1,  the  teams  engaged  in  multiple  option 
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trails,  again,  perfcreed  significantly  better  ca 
the  battlefield,  Again  when  coe  examines  the 
reactions  of  the  2  gstaaders  to  the'  ssrprise 
attack,  in  this  new.  ocre  grassier  context,  the 
saae  curious  phensseaon  reappears:  whereas  tee 
caltiple  option  cecnan decs  show  no  appreciaole 
change  in  their  estisate  of  eceny  intent  fol- 
1 owing  the  surprise  attack,  the  single  thread 
cocnanders  again  significantly  increase  their 
confidence  in  their  incorrect  estisate  of  eneny 
Intent,  As  shown  in  figure  4,  the  single  thread 
coounders  increased  their  certainty  of  belief  in 
a  frontal  attack  by  Red  by  several  percentage 
points.  (t«.52,  p»,30  for  Sdf,  1  tailed). 


FIGURE  4 

BOLSTERING  OF  BUIE  CONFDSKE 
h  rrmirr  or  oenr  actsT  rouonc 

sxrttsc  ATTACK  XT  tO 


In  a  further  investigation  of  this  bolstering 
tendency,  we  exaained  the  change  in  reported 
subjective  workload  by  the  cocnanders  following 
the  surprise  attack.  Through  use  of  the  5VEAT, 
the  coonanders  rated  the  levels  of  stress,  cental 
effort,  and  tine  pressure  which  they  had  exper¬ 
imented  during  the  previous  half  hour.  As  shown 
in  Figure  5,  the  cultiple  option  cocnanders 
realistically  Increased  their  reported  subjective 
workload  after  the  surprise  attack  by  10*;  the 
single  thread  coonanders  actually  decreased 
theirs  by  25*  in  the  face  of  the  unanticipated 
attack,  (t-1.87,  p  .05  for  8df,  1  tailed). 
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the  cocnaoders  with  and  without  contingency  plans 
diverged  significantly  in  res^se  tc  to  sur- 
Prtse  attack.  As  shoi  in  FiSrTs,  tertnolh, 
=aSInf0tiihe  b?“,erreSo,ir  observations  rrre 
"“ber  of  requests  for  intonation 
the  Blue  cocnanders  cade  of  the.r  staffTor  the 
Itself.  For  the  cocnanders  cursuiva 
wltiple  oprion  plans,  to  ®rHnto»«to  Sew 
sought,  to  better  they  perforeea  in  haicing  the 
Red  advance  during  the  hour  following  to  spr 

*  -*s>-  The  opposite  is  tr,.e  for 
to  cwcander  pursuing  the  single  thread  plan: 
the  core  intonation  they  sought,  the  core  poorly 
they  fared  on  the  battlefield  (r  .  -.65).  to  * 

to«a  f  indl'13L.stron3llf  soosests  that  the  single 
cocnanders  directed  their  post-surprise 
inforaation  search  to  the  pursuit  of  false 
hypotheses  regarding  to  battlefield  situation. 

FIGURE  5 


BIASED  INFORMATION  SEARCH: 

Regression  of  Effective  Red  Advance  on 


NUMBER  OF  RECUESTS  FOR  INFORMATION 

BY  BLUE  COMMANDER  FROM  SIMULATOR 

OR  STAFF  DURING  HOUR  FOLLOWING  SURPRISE  ATTACK 
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in  Pistsssica  ttaaisTcss 

Ccr  2  experiments  twe  ccasictemtly 
iexcstreted  t&e  ss?erfcc*ty  o  ralttple  optica 
pliaaiag  ever  siagle  thread  plamaicg  csder  tbe 
ccoiitfcas  tested  which  i evolved  e  surprise 
attack.  The  cdds  cf  cbtaisi***  joiot  resalts  like 
this  by  cbamce  ere  less  .  v  *•  ICO-  Segardi  g 
tie  ccsaitire  cecheafsas  *d  .  this  relation¬ 
ship,  osr  ex;er treats  here  «i<  /  osscestrjteJ 

aad  replicated  the  teademcy  c  ogle. thread 
cocceaders  to  intensify  the'.r  ,-lse  belief  ia 
eseny  intent  ia  the  face  cf  the  surprise  attack. 
The  cdis  of  obtaining  results  like  these  by 
chance  are  less  than  3  in  100-  Akim  to  this 
intensification  of  false  belief,  oar-experiseats 
hare  also  desccstrated  the  tendency  of  single 
thread  commanders  to  deny  any  increase  in 
subjective  workload  as  a  result  cf  the  intelli¬ 
gence  reports  on  the  surprise  attack.  The  odds 
of  obtaining  results^like  this  by  chaace  are  less 
than  1  ia  190-  Finally,  the  results  of  ccr  acre 
detailed  investigation  into  headquarters  infor¬ 
mation  processing  in  the  second  experiment  demon¬ 
strated  an  unmistakable  tendency  on  the  part  of 
the  single  thread  cocnanders  to  engage  in  faulty 
information  processing,  readily  interpretable  as 
being  biased  by  their  pre-existing  bat  false 
single  thread  orientation  to  the  battle.  The 
odds  cf  obtaining  the  litter  result  by  chance  are 
less  that  1  in  10. 

Why  do  the  multiple  option  plan  cossanders 
behave  so  “rationally*  and  why  do  the  single 
thread  commanders  behave  so  curiously  in  the 
wartime  headquarters  setting?  We  suggest  that 
the  single  thread  commanders  were  not  so  ouch 
acting  so  as  to  maximize  Red  attrition  subject  to 
the  constraints  of  their  headquarters  resources; 
rather  they  were  acting  to  reduce  the  cognitive 
dissonance  they  experienced  between  their  cocnit- 
oent  to  the  single  thread  plan,  with  its  associ¬ 
ated  initial  force  deployment,  and  the  Intelli¬ 
gence  reports  they  received  regarding  the  off- 
axis  surprise  attack  by  Red.  In  doing  this,  they 
acted  like  classic  highly  committed  Individuals 
such  as  Admiral  Kinoel  and  his  group  at  Pearl 
Harbor,  seeking  to  "dro^n  out“  the  dissonance 
created  by  the  intelligence  on  the  surprise 
attack  by  bolstering  their  prior  belief,  in  this 
case,  that  "Red  is  engaged  in  a  oassive  frontal 
assault"  and  by  denying  (indeed  asserting  the 
contrary  In  Exp.  II)  that  there  was  any  addi¬ 
tional  increase  in  workload  or  anxiety  rightfully 
devolving  from  these  intelligence  reports.  As 
one  high  ranking  military  observer  rationalized 
"These  reports  of  an  oblique  surprise  attack  just 
proves  that  the  enemy’s  intent  is  really  a 
frontal  assault.* 

Bolstering  and  Bays Ian  Information  fusion.  These 
experiments* "and  other  InWstiga tlons1  demonstrate 
the  lack  of  universality  of  Ba>s1an  updating  in 
human  information  processing.  In  both  experi¬ 
ments  the  single  thread  cocnanders  increased 
the*r  estimates  of  the  likelihood  of  a  massive 
frontal  assajlt  by  Red  upon  receipt  of  informa¬ 
tion  to  the  contrary.  This  phenomenon  Of  moving 
one’s  estimates  of  the  likelihood  of  an  event 


*way  from  the  position  advocated  by  the  i scorning 
message  rather  ten  towards  it  has  Icog  tfta 
called  the  “bcoseramg  effect*  ia  behavioral 
science  literature.  Kfesler  (1371)  recounts  half 
a  dozen  experiments  of  ^is  ows  a*ri  alludes  to 
many  by  other  investigators  deacostrating  this 
p&soscecco-  Hioiker  (1533)  and  others  bare  noted 
its  prevalence  ia  political  campaigns  and  persua¬ 
sion  attempts  ia  a  wide  variety  cf  ccotexts. 

The  boomerang  effect  is  generally  charac¬ 
terized  by  an  inf creational  attack  resulting  la 
the  intensification  of  the  subjects  prior  cogni¬ 
tive.  orientation.  According  to  Kiesler,  the 
likelihood  at  such  an  effect  depends  cpoo  the 
subjects  degree  of  prior  commitment  to  bis  posi¬ 
tions,  where  commitment  means  thecpledging  or 
binding  of  the  individual  to  behavioral  acts  and 
its  sain  effect  is  to  sake  an  act  core  difficult 
to  undo,  deny,  distort,  or  reinterpret.  Such 
acts  are  core  committing  to  the  extent  that  they 
are  voluntary,  public,  and  important.  Viewed  in 
these  terms,  the  commanders  in  the  single  thread 
condition  were  clearly  sore  committed  to  receipt 
of  a  passive  frontal  assault  by  Red  than  were  the 
multiple  option  commanders.  Hence  they  boomerang 
while  the  contingent  planners  realistically  take 
account  of  the  surprise  reports. 

The  Perception  of  Uorkload.  The  expression  of 
diminished  stress in  tife  reactions  of  the  single 
thread  commanders  end  their  teams  to  the  surprise 
attack  demonstrates  the  importance  cf  subjec¬ 
tivity  in  the  perception  of  organizational  work¬ 
load.  Clearly  an  objective  assessment  would 
state  that  having  to  de^.l  simultaneously  with 
both  a  frontal  assault  and  an  off-axis  assault 
with  the  same  resources  entails  mure  time  pres¬ 
sure,  mental  concentration  and  stress  than 
dealing  with  the  forcer  alone.  Yet  the  single 
thread  teaas  asserted  the  opposite.  As  we  have 
suggested,  this  subjectivity  is  part  of  a  larger 
bolstering  and  rationalization  effort  on  the  part 
of  the  committed  single  thread  teaas  to  deal  with 
the  reports  of  the  surprise  attack. 

Biased  Information .  Search.  The  biased  infor¬ 
mation  seeking  on  the  part  of  the  single  thread 
cocnanders  in  reaction  to  the  surprise  attack 
demonstrates  the  untenabillty  of  the  generali¬ 
zation  that  the  more  information  gathered  the 
better.  Clearly  in  this  situation  the  key  is 
which  hypotheses  regarding  the  battle  are  being 
tested  and  how  —  not  just  how  ouch. 

The  "rational  actor*  model  of  policy  decision 
making  in  crises  has  been  criticized  as  provid¬ 
ing  insufficient  explanations  of  real  behavior 
(Allison,  1971;  George,  1974,  1984,  1986;  Holstl, 
1975;  Lebow,  1985).  The  key  usually  lies  not  in 
calcula-  ting  the  most  cost/effectue  option,  but 
in  how  information  is  gathered  and  processed  to 
provide  for  option  selection.  In  a  survey  of 
presidential  decision  making  during  19  interna¬ 
tional  crises  since  World  War  II,  from  the  U.  S. 
decision  to  cross  the  38th  parallel  in  Korea  in 
I960  through  the  U.  S.  decision  to  attack 
Casbodlan  sancturaries  in  1970,  Herek  et.al. 
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(1537)  fee aS  strong  sv&cri  fer  the  contribution 
of  biased  information  seeking  to  U-  S-  policy 
disasters-  la  reco=e»ding  7  criteria  fer  vigi- 
leoce  to  avoid  defective  decision  caking,  t be 
aathors  emerge  Kith  a  listing  that  is  remarkably 
stellar  to  stages  io  the  K£A7  and  SHCft  ^decision 
process  paradigms.  Sftile  specifically  recoc- 
sesdiag  the  use  of  *=caitcring  and  contingency 
plans*,  the  essence  of  the  maladies  underlying 
the  7  criteria  and  the  associated  failed  policy 
decisions  is  a  bias  characterized  by  a  failure* to 
consider  cr  accept  information  which  deals  with 
the  negative  characteristics  of  the  single  pre¬ 
ferred  option-  Psychologically  unsatisfying  as 
they  say  seen,  contingent  hedging  and  continuous 
prchfng  are  keys  to  effective  headquarters  deci¬ 
sion  caking. 
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ABSTRACT  _  _ 

The  objective  is  to  design  disuibated,  Command  and  Control 
organizations  for  the  outer  air  basic.  The  synthesis  problem  is 
formulated  as  follows:  Given  the  decision-making  and 
infomration  processing  necessary  for  the  outer  air  battle,  design 
the  C2  organization  that  is  accurate,  timely,  exhibits  a  task 
throughput  rate  that  is  higher  than  the  task  arrival  rate,  and 
whose  decisionmakers  are  not  overloaded-  A  simple  model  of 
the  processes  pertinent  to  ihe  outer  air  bailie  has  been  de  veloped. 
The  model,  although  an  abstraction  of' the  actual  naval  air 
operations,  reruns  the  fundamcnul  decision-making  features. 

A  new  quantitative  methodology  for  the  synthesis  of  C2 
organizations  is  presented.  The  methodology  consists  of  fotff 
phases:  (1)  Algorithmic  generation  of  data  flow  structures  xn  the 
form  of  Petri  Nets  that  haw  specified  degrees  of  redundancy  and 
complexity;  (2)  Transformation  of  the  data  flow  structures  into 
decision-making  organizations  by  allocating  the  functions  to 
individual  decisionmakers  and  then  into  C2  organizations  by 
incorporating  the  supporting  systems;  (3)  Evaluation  of  the 
resulting  designs  using  three  measures  of  performance  - 
accuracy,  response  time,  and  throughput  rate  and  a  measure  of 
effectiveness;  and  (4)  Modification  of  the  candidate  designs  to 
increase  their  measure  of  effectiveness. 


I.  INTRODUCTION 

Organizations  arc  fermed  when  the  task  to  be  performed  exceeds 
the  capabilities  of  a  single  decisionmaker.  Even  when  a  single 
person  can  complete  the  task,  he  may  not  be  able  to  produce  a 
satisfactory  response  within  the  time  limits  imposed  by  the  task, 
and  keep  up  with  the  arrival  rate  of  the  tasks.  Tne  organization 
designer  is  faced  with  the  problem  of  designing  an  organization 
that  will  meet  these  design  specifications  and,  in  addition,  assign 
subtasks  or  functions  to  members  of  the  organization  so  that  no 
one  is  overloaded.  The  design  has  to  be  robust  to  accommodate 
the  decision-making  styles  of  different  actual  decisionmakers 
that  may  instantiate  the  organization  at  different  times. 

Consider,  for  example,  the  design  of  an  air-traffic  control  center 
for  a  busy  airport  area.  The  task  cannot  be  performed  by  a 
single  controller,  several  controller  stations  may  be  required  The 
designer  has  to  take  into  account  the  uncertainty  that  is  inherent 
in  the  task,  the  need  for  accurate  and  timely  responses  by  the 
controllers,  and  il*  need  to  keep  up  with  the  rate  of  the  incoming 
tasks.  But  he  also  has  to  consider  that  difterent  controllers  will 
be  on  duty  at  '.ny  instant  of  time.  While  they  arc  all  well  trained 
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for  their  tasks,  their  actual  information  processing  rate  and 
derision-making  styles  will  differ. 

The  quantitative  and  qualitative  analysis  and  evaluation  of  such 
task-oriented  organizations  has  been  the  subject  of  recent 
research:  Drenick  (1986);  Levis  (19S4).  In  the  biter  work,  a 
model  of  the  interacting  decisionmaker  with  bounded  rationality 
was  introduced  by  Boettcher  and  Levis  (1982).  in  which  the 
individual  members’  cognitive  workload  was  computed  using 
N-dimensional  Information  theory  and  the  Partition  Law  of 
Information  (Conan!.  1976).  The  organizational  architecture. 
i.c.,  the  allowable  interactions  among  decisionmakers  and  the 
protocols  that  govern  them,  is  described  using  Petri  Nets 
(Peterson,  1981.  Reisig,  1982). 

The  synthesis  of  Command  and  Control  organizations  is  a 
complex  process  that  must  address  a  multitude  of  issues, 
specifically,  how  to  partition  the  task  into  functions  (or 
subtasks),  how  many  decisionmakers  to  select,  how  to  allocate 
the  functions  to  decisionmakers,  how  lo  select  the  schema  of 
information  exchange  among  the  decisionmakers  (protocols), 
what  kind  of  communications  hardware  is  required  for  the  timely 
transmission  of  information  and  data,  what  the  structure  of  the 
required  databases  and  the  specifications  for  the  respective 
hardware  should  be.  and  how  to  design  decision  3ids  and 
allocate  them  to  the  organization  members.  Finally,  ihete  is  the 
issue  of  evaluation:  how  to  compote  the  performance  and  the 
effectiveness  of  the  designs  and  how  to  select  the  best  design  for 
the  task.  Consequently,  it  is  nccessmy  to  develop  a  methodology 
so  that  the  design  of  &  organizations  becomes  a  structured 
process. 

In  this  paper,  a  methodology  for  the  synthesis  of  (? 
organizations  is  presented.  The  approach  taken  in  this  work 
decouples  the  decomposition  of  the  decision-making  process  and 
the  exchange  of  data  among  the  functions  from  the  allocation  of 
functions  to  decisionmakers,  and  the  selection  of  the  supponiog 
systems.  Thus,  the  methodology  tackles  the  synthesis  problem 
at  two  levels:  the  data  flow  structure  level  and  the  organization 
architecture  level. 

An  algorithm  frr  the  generation  of  data  .flow  structures  has  been 
developttd;  the  data  flow  structures  are  parameterized  by  the 
degree  of  complexity  of  the  infotmalion  processing  and  the 
degree  of  redundancy  of  the  information  within  the  structure 
The  d3t3  flow  structures  are  transformed  into  organization 
architectures  by  allocating  the  functions  to  decisionmakers  and 
by  augmenting  the  structures  to  incorporate  the  supporting 
systems. 

A  procedure  for  the  analysis  and  evaluation  of  organizational 
designs  is  described  The  following  measures  of  performance 
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(MOPs)  arc  competed:  Accuracy.dcaotedbyiieCofliadcx  J; 
Response  Time  (Ttssc  Delay),  denoted  by  T,;  aad  Throughput 
Rare,  denoted  by  R.  A  global  measure.  called  the  measure  of 
effectiveness  (MOE).  is  dcficed.  and  tbe  designs  arc  evaluated 
and  compared  oo  the  basis  of  tbcr  MOE  value. 

Tbe  processing  tiroes  associated  with  the  individual  zefonsaooa 
processing  2nd  decision-making  fuacricos  arc  characterized  by 
probability  density  functions  (pdfs).  A  method  for,  the 
computation  of  the  pdf  of  tbe  csganizarioa'srespoose  time,  and 
oftbc  pdf  of  the  throughput  rate  is  presented.  These  lead  to  the 
definition  of  a  measure  of  timeliness  and  a  measure  of 
processing  czpsaty. 


2.  ORGANIZATION  MODEL 

2.1  Mathematical  Representation  - 

Decision-making  organizations  can  be  represented  by  Petri  Nets. 
In  Petri  Nets,  there  are  two  types  of  nodes;pbccs,  denoted  by 
circles  representing  s;gruls  or  additions;  and  transitions, 
denoted  by  bars,  representing  processes  or  cvems.  Places  can 
only  be  connected  tr  transitions,  and  transitions  can  only  be 
connected  to  places.  The  exception  of  a  Petri  Net  is  controlled 
by  tokens,  which  arc  markers,  denoted  by  dots  in  the  places.  A 
Petri  Net  is  said  to  execute  when  a  transition  fires-  A  transition 
can  fire  only  when  it  is  enabled,  i Jt.%  when  all  its  input  places 
contain  21  least  one  token  each.  When  2 'transition  fires,  it 
removes  (consumes)  one  token  from  each  of  its  input  places  and 
creates  (deposits)  one  token  in  each  of  its  output  places. 

A  transition  may  have  more  than  one  output  places.  However, 
to  model  decision-making,  it  is  convenient  to  introduce  a  special 
transition*,  a  decision  switch  (Figure  1),  in  which  the  output 
places  represent  alternatives  (Tabak  and  Levis,  1985).  When  a 
decision  switch  fires,  a  token  is  deposit  grJy  one  of  its 
output  places.  A  decision  rule  associated  with  this  special 
transition  determines  the  place  in  which  the  token  is  deposited. 
The  rule  can  be  deterministic  or  stochastic,  it  can  be  independent 
of  the  attributes  of  the  tokens  fn  the  input  places  or  it  may 
depend  on  them. 

ALTERNATE  ALGORITHMS 


figure  1.  Decision  Switch 

For  example, ,  a  decisionmaker  may  access  a  decision  aid,  the 
decision  in  this  case  is  whether  to  access  or  not  the  decision  aid. 
Similarly  a  decisionmaker  may  have  two  algorithms  or 
procedures  available  to  process  the  information.  In  the  case  of 
situation  assessment,  one  algorithm  may  be  complex  and  the 
other  simple.  In  the  case  of  developing  courses  of  action,  one 
algorithm  may  be  more  detailed  and  exhaustive,  while  the  other 
more  crude  and  simplistic.  The  decision  in  this  case  is  which  of 


*  The  use  i .  a  special  transition  can  be  avoided,  if  Predicate 
Transition  Nets  are  used  in  place  of  ordinary  Petri  Nets. 
However,  such  a  generalization  is  not  necessary  for  this  work. 


the  two  algorithms  to  use.  This  decision  varies  among 
decisionmakers  (difference  in  style)  and  may  be  quantified  by 
the  relative  frequency  of  algorithm  selection.  The 
derisiocmaker's  ntxkload,  the  accuracy,*  rite  response  rime,  and 
the  throughput  rate  of  the  organization  are  affected  by  these 
decisions. 

The  decisionmakers  2m  assumed  to  be  limited  in  the  number  of 
function  (or  subsist;)  they  may  perform  at  the  same  rime.  This 
limitation  is  represented  by  introducing  a  place  for  each 
decisionmaker.  called  the  resucre  availability  place,  whxh  is  an 
output  place  of  the  last  rransitico  and  an  input  pbee  of  the  first 
transition  assigned  to  the  decisionmaker.  The  number  of 
functions  a  decisionmaker  may  perform  2t  the  same  time  are 
represented  by  the  number  of  tokens  initially  deposited  in  the 
resource  availability  place,  Le^  by  rts  initial  marking. 

22  Decision-making  Model  2nd  Decision  Strategies 

The  decisionmakers  are  assumed  to  be  well  trained  and  to  be 
able  to  use  more  than  one  procedure  to  perform  some  functions 
(Boettcher  and  Levis.  T  982.  Levis  and  Boettcher,  1983).  The 
selection  of  one  procedure  from  a  set  of  procedures  is  modeled 
in  the  Petri  Net  by  a  switch.  When  the  decisionmaker  selects 
always  the  same  algorithm  (when  the  selection  rule  is 
independent  of  the  input)  or  the  same  algorithm  for  each  input 
element  twhen  the  selection  rule  is  dependent  on  the  input 
value),  he  is  implementing  a  pure  decision  strategy , 

Mixed  strategies  are  obtained  when  the  decisionmaker  uses  a 
mix  of  pure  strategies  (Owen. 1968);  the  mixed  strategies  are 
characterized  by  the  relative  frequency  of  use  of  the  pure 
strategies.  When  all  decisionmakers  of  tbe  organization  select 
(implement)  their  mixed  strategies,  a  behavioral  decision 
strategy  is  obtained. 

If  the  probabilities  that  correspond  to  the  relative  frequency  of 
algorithm  use  are  discretized,  then  a  finite  number  of  mixed 
strategies  is  defined  for  each  decisionmaker,  and  consequently,  a 
finite  number  of  behavioral  strategies  for  the  organization  is 
obtained. 


3.  ANALYSIS  OF  DECISION-MAKING  ORGANIZATIONS 

3.1  Workload  and  Bounded  Rationality 

Workload  rep.escnis  the  amount  of  mental  effort  expended  by 
the  decisionmakers  in  order  to  perform  their  assigned  usks.  The 
analytical. framework  for  the  computation  of  a  surrogate  for 
workload  is  N-dimensional  information  theory  (Reisbeck,  1963, 
Shannon  and  Weaver,  1963).  This  surrogate,  denoted  by  G,  is 
the  total  activity  term  in  the  Partition  Law  of  Information 
(Con am,  1976).  The  total  activity  has  units  of  bits/symbol. 

The  value  of  G  depends  o£  several  factors,  first,  it  depends  on 
the  uncertainty  of  the  organization’s  task,  as  modeled  by  the 
probability  distribution  p(x)  associated  with  the  input  set  jxj.  It 
depends  also  on  the  structure  of  the  organization  -  the 
interactions  among  decisionmakers  -  and  on  the  algorithms  used 
to  represent  the  various  piocessing  functions,  such  as  situation 
assessment,  courses  of  action  development,  and  response 
selection  Finally,  it  depends  on  the  internal  decision  strategies 
of  each  individual  decisionmaker.  Indeed,  in  the  analysis  of 
organizational  performance  that  follows,  for  a  given 
organizational  design,  the  independent  variables  are  the 
decisions  of  each  decisionmaker  and  the  dependent  variables  are 
the  workload  and  .he  measures  of  performance. 
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„  Mt)=f(t)*g(0.  .  (7) 

For  as  iafceraaiiort  flow  path  (if  assumed  that  its  transitions  do 
coc  receive  data  from  orbrr  paths).  the  touil  delay  is  the  sum  of 
tlx  delay*  of  the  individual  transiaons  and  consequently  the  pdf 
of  the  toal  dehy  is  obeainedby  r epeaad  convobrioas. 

Foe  two  functjc<r*which  arc  concurrently  active,  Lc,  on  parallel 
paths  (Figure  3).  the  total, delay  is  the  maximum  of  the 
corresponding  deb>K  The  pdf  h(t)of  the  toral  delay,  if  the  two 
delays  are  independent  random  variables,  is  obtained  as  follows; 

h(t)  =  f(t)  G(t)  +  F(t)  g(t)  (8) 

where  f(t)  and  g(t)  arc  the  pdfs  of  each  delay  and  F(t)  and  G(t) 
are  the  cocirsponding  cumulative  distribution  functions. 


Figure  3.  Concurrently  Acme  Functions 

For  two  concurrently  active  information  flow  paths,  whose 
transition  delays  are  independent  random  variables,  two  cases 
must  be  considered: 

1 )  the  paths  do  not  have  transitions  in  common 

2)  the  paths  ha\  r.  transitions  in  common 

In  the  first  case,  the  pdf  of  the  total  delay  of  each  path  is 
compiled,  and  then  the  pdf  of  the  maximum  of  the  path  delays  is 
obtained.  In  the  second  case,  if  the  time  delay  of  the  common 
transition  is  t  with  pdf  fx(t),  while  the  total  time  delays  of  the 
unique  transitions  on  each  path  are  tj  and  Xj,  with 
corresponding  pdfs  g-j(t)  and  g^O).  first  compute  the  pdf 
StjnaxO)  of  the  maximum  delay  max(  tt,  x$  of  the 

unique  transitions 

filmaxO)  *  SllCO  GftO)  +  Gt  i(0  8x2(0  (9) 

and  next  compute  the  pdf  of  the  total  delay  of  the  two  paths  by 
convolving  Ml)  and  gxnux  (0-  Using  these  procedures,  the  pdf 
of  each  complete  path  is  computed. 

Consider  two  alternate  procedures  (i.e.  substitutes  for  one 
another)  or  two  complete  paths  active  with  relative  frequency  of 
use  pi  and  P2=  1-pj*  and  corresponding  delay  pdfs  f(t)  and 
8(0*  Then  the  pdf  h(t)  of  the  total  delay  is  given  by: 

h(t)  *  Pi  f(t)  P2g(t)  (10) 


3.4  Compulation  of  the  pdf  of  Throughput  Rate 

Thu  throughput  rate  of  the  organization  is  equal  to  the  minimum 
of  the  processing  rates  of  the  sets  of  functions  performed  by 
individual  decisionmakers,  and  the  processing  rates  of  sets  of 
functions  performed  by  several  decisionmakers  in  an  interleaved 
pattern.  These  sets  of  functions  correspond  to  the  transitions  of 
the  directed  elementary  circuits  of  the  net.  The  processing  rate  of 
a  directed  elementary  circuit  is  the  inverse  of  the  total  processing 
time  of  the  circuit.  The  total  processing  time,  t,  of  a  directed 
elementary  circuit  is  equal  to  the  sum  of  the  processing  times  of 


its  transitions,  divided  by  the  token  correct,  C,  of  the  circuit 
(Ramchaadaai,  1974).  The  token  content  is  equal  to  the  sum  of 
the  tokens  initially  placed  in  the  resource  availability  places  of 
tbccrrcca. 

(11) 

In  .the  case  of  stochastic  processing  times,  the  pdf  g(r)  of  the 
processing  rarc  r  of  a  directed  elementary  circuit  is  given  by 

E(0  =  (l/£)f(l/r)  (12) 

where  f(t)  is  the  pdf  of  the  processing  time  of  the  circuit.  For 
two  dittoed  elementary  droits  with  do  transitions  in  common, 
if  the  processing  rates  rj  and  rj  are  independent  random 
variables  with  pdfs  f(r)  and  g(r),  the  pdf  of  the  minimum 
processing  rate  h(r)  is 

b(r)  =  f(r)  (l*G(r)]  +  H-F(r)]  g(r)  (13) 

u  here  F(r)  and  G(r)  are  the  cumulative  distribution  functions. 

If  the  elcrpentaxy  circuits  have  transitions  in  common,  then  their 
processing  rates  are  correlated.  Let  two  such  circuits  have  one 
transition  in  common  with  processing  time  x.  having  pdf  g(t), 
and  one  uniaue  transition  in  each  circuit  with  corresponding 
processing  times  Xj  and  Xj .  with  pdfs  qti(t)  and  q^O)  (Figure 
4).  Assume  also  that  the  two  circuits  have  the  same  token 
content  G  Then  the  pdf  of  the  maximum  processing  times  of 
the  two  circuits 

T^sfx  +  max^.x^/C  (14) 

is  computed  as  follows;  first  compute  the  pdf  qz.(t)  of 
x*  =  max(Xi,X2)  by: 

qt.  (0 = qiid)  QnO) + QtiO)  <le<0  05) 

Then  convolve  qx*(t)  and  g(t) 

s(i)=qt.(0*g(0  (16) 

and  scale  the  pdf  sit)  to  obtain  the  pdf  finux(0  of  the  maximum 
processing  time  of  the  two  circuits 

fta„(t)»Cs(Ci)  (17) 


Figure  4.  Two  circuits  with  one  common  transition 


Finally,  the  pdf  h(r)  of  the  minimum  of  the  processing  rates  of 
the  two  circuits  is 

h(r)  =  (1/r2)  f^O/r)  (18) 

The  computation  in  the  case  of  different  token  content  is 
similarly  developed. 
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The  quilitati/e  notion  that  the  rationality  of  the  human 
derislooaakgr  is  bounded,  (March.  1978),  has  been  modeled  as 

F<F0  0) 

where  F  is  the  information  processing  rate,  of  individual 
decisionmakers  (In  bits/sec),  and  F0  is  the  maximum  information 
processing  rate  that  characterizes  individual  decisionmakers. 
Since  the  processing  time,  t,  is  computed  by 

t  =  G/F  (2) 

the  minimum  processing  time  t^.  corresponds  to  the  maximum 
processing  rate 

t0  =  G/Fo  (3) 

In  evaluating  decision-making  organizations,  it  is  of  interest  to 
compute  the  minimum  response  time,  and  the  maximum 
throughput  rate,  that  correspond  to  the  maximum  information 
processing  rate  Fq. 

The  maximum  processing  rate  F0  varies  among  decisionmakers. 
If  the  pdf  h(F0)  of  F0  is  known,  then  the  pdf  q(i^)  of  the 
minimum  processing  time  of  each  transition  can  be  obtained: 

q(g  =  (G/t02)h(GA0)  (4) 


3.2  Measures  of  Performance 

The  measures  of  performance  considered  in  this  paper  are: 
accuracy,  response  time,  and  throughput  rate. 

Accuracy  quantifies  the  degree  to  which  the  actual  organization 
response.  YJt  matches  the  desired  or  ideal  response  Ya..  A  cost 
C(Y..Y^>  is  assigned  to  the  discrepancy  of  Y.  and  Yjj.  (Levis, 
1984).  This  cost  is  computed  for  each  input  task,  x,  and  each 
decision  strategy.  The  accuracy  measure  J  is  the  expected  value 
of  the  cost  and  is  computed  using  the  probability  distribution  of 
the  input  tasks  (Figure  2). 


NCT 


Figure  2.  Computation  of  Accuracy 


The  response  time  or  time  delay  of  an  organization  is  the  time 
elapsed  between  sensing  the  input  and  producing  an  output.  The 
expected  response  time  (expected  time  delay)  is  a  measure  of 
performance  that  can  be  used  to  assess  the  timeliness  of  an 
organization’s  response. 

Timeliness  expresses  the  ability  of  organizations  to  produce  a 
response  to  a  given  input  within  an  allotted  time.  The  allotted 
time  is  a  time  interval  (Tm;n,  Tjpax).  Tm;n  is  a  time  threshold 
such  that  if  the  organization  acts  in  response  to  the  input  before 
the  threshold,  a  cost  is  incurred  through  the  expense  of  assets  or 
supplies  too  early,  resulting  in  the  decrease  of  the  probability  of 


success  of  the  response.  T^  is  a  time  threshold  such  that  if  the 
organization  acts  in  response  to  the  input  after  the  threshold, 
there  will  not  be  enough  time  left  for  the  implementation  of  the 
response.  If  the  expected  rcsponse  riinc  is  within  the  interval 
(TLp.  Tcax)  the  response  is  timely.  However,  this  measure  of 
performance  does  not  take  into  account  the  variance  of  the 
response  time.  A  better  measure  of  timeliness,  T,  is  the 
probability  that  the  response  time,  Tp  lies  inside  the  interval 
(Tnh’Tcax),i.c. 

T=P(Taa<Tr<TWtt)  (5) 

The  Throughput  rate  of  the  organization  is  the  maximum  task 
processing  rate  that  C3D  be  sustained,  without  queueing  of  the 
Inputs,  or  queueing  of  information  at  any  stage  of  processing. 
For  the  case  of  stochastic  process! eg  times,  the  pdf  of  the 
throughput  rate,  R,  can  be  computed  and  a  measure  of 
processing  capacity,  S,  can  be  defined  as: 

S  =  P(R>Ro)  (6) 

where  R„  is  the  task  arrival  rate.  Alternatively,  wc  may  be 
interested  in  computing  the  response  lime  and  die  throughput 
rate  that  correspond  to  the  minimum  value  of  the  rationality 
threshold,  i.e.,  (F0)n;3. 

To  each  behavioral  strategy,  corresponds  a  set  of  values  of  the 
measures  of  perfoxmance  (MOPs),  which  defines  a  vector  in  the 
MOP  space.  Thus,  the  mathematical  models  of  accuracy, 
response  time,  and  throughput  rate,  map  the  decision  strategies 
into  the  performance  space.  As  the  behavioral  strategies  change, 
this  vector  sweeps  a  locus  in  the  MOP  space,  the  organization 
locus.  The  requirements  cn  the  MOPs  also  define  a  locus  in  the 
MOP  space;  the  requirements  locus.  Organizational  architectures 
can  be  evaluated  by  comparing  the  organization  locus  to  the 
requirements  locus.  Different  organizational  architectures  can  be 
compared  on  the  basis  of  their  corresponding  loci. 

3.3  Computation  of  the  pdf  of  Response  Time 

In  the  Petri  Net  representation  of  an  organization,  the  input 
(source)  and  the  output  (sink)  nodes  are  represented  by 
transitions.  Information  flow  paths  arc  the  paths  emanating  from 
the  source  transition  and  arriving  at  the  output  transition.  The 
presence  of  decision  switches  in  the  net,  with  the  position  of 
each  switch  determined  by  the  internal  decision  strategics, 
results  in  some  transitions  being  active  during  the  processing  of 
Z~\y  task,  and  in  some  being  inactive.  Therefore  for  each 
behavioral  strategy,  corresponding  to  pure  decision  strategies  of 
the  decisionmakers,  some  information  flow  paths  arc  active 
(transmitting  information)  while  others  arc  inactive.  A  set  of 
concurrently  active  paths  is  called  a  complete  path. 

The  simple  paths  and  the  complete  paths  may  be  identified  either 
by  an  algorithm  developed  by  Jin  (Jin  ct  al,  1986)  for  acyclical 
structures,  or  by  an  algorithm  that  computes  the  elementary 
directed  circuits  of  the  net,  developed  by  Martinez  and  Silva 
(1980),  and  improved  by  Alaiwan  and  Toudic  (1985). 

If  a  pdf  is  assigned  to  the  processing  time  of  each  processing 
algorithm,  to  the  transmission  delay  for  each  communication 
process,  and  to  the  access  time  for  each  decision  support  system 
(all  of  which  are  represented  by  transitions  on  the  net),  then  the 
pdf  of  the  response  time  of  the  organization  is  computed  as 
follows: 

For  two  cascaded  functions  with  corresponding  delay  pdfs  f(t) 
and  g(t),  the  total  delay  is  the  sum  of  the  two  delays.  Therefore 
the  pdf  h(t)  of  the  total  delay  is  given  by  the  convolution  of  f(t) 


3.5  Measure  of  Effectiveness 

Measures  of  Effectiveness  quantify  the  degree  to  which  an 
organization  meets  its  requirements.  A  Measure  of 
Effectiveness,  Q,  can  be  defined  by  the  ratio  of  the  number  of 
behavioral  strategies  that  satisfy  the  requirements  to  the  total 
number  of  behavioral  strategies. 

Q-  number  of  behavioral  strategies  satisfying  themnrjcments 
total  number  of  behavioral  strategies 

(19) 

Recall  that  individual  decisionmakers  differ  in  style,  i.e.,  they 
tend  to  use  different  mixed  strategics.  In  this  respect  the  measure 
of  effectiveness  is  a  measure  of  robustness  of  the  organization 
with  respect  to  the  different  styles  of  individual  decisionmakers. 

4.  SYNTHESIS  OF  DECISION-MAKING  ORGANIZATIONS 

Given  a  complex  information  processing  and  decisionmaking 
task,  there  exists  a  multitude  of  ways  to  partition  the  processing 
of  a  task  into  subtasks  (functions),  to  define  the  schema  of 
information  exchange  among  the  functions,  to  allocate  functions 
to  decisionmakers,  and  to  specify  the  supporting  systems 
(software  and  hardware). 

4.1  Synthesis  Problem  Formulation 

The  synthesis  problem  is  formulated  as  follows.  Given  a 
mission  and  3  set  of  tasks  to  be  performed,  design  a 
decision-making  organization  that  is  accurate,  timely,  has  a  task 
throughput  rate  higher  than  the  task  arrival  rate,  and  whose 
decisionmakers  are  not  overloaded  (Andreadakis,  1988).  The 
quantitative  formulation  is: 

Accuracy  greater  than  or  equal  to  a  given  threshold,  or 
equivalently,  expected  cost  )  less  than  or  equal  to  some 
threshold  JqJ 

J£J0  (20) 

Timeliness  measure  greater  than  or  equal  to  some  threshold 

T^T0  (21) 

Processing  capacity  measure  greater  than  or  equal  to  some 
threshold  S0: 

S  2>S0  (22) 

under  the  constraint  that  decisionmakers  are  not  overloaded,  i.e., 
that  each  decisionmaker’s  information  processing  rate  is  less 
than  or  equal  to  his  rationally  threshold  (F0), : 

F.sdvi  (23) 

An  alternative  formulation  is  obtained  when  the  second  and  third 
requirements  are  expressed  as* 

Response  lime  Tf  less  than  or  equal  to  some  threshold  (Tf)0: 

Tf£(Tr)o  (24) 

Throughput  rate  R  greater  than  the  task  arrival  rate  RqI 


In  this  work  the  concepts  of  data  flow  structure  (DFS), 
decision-making  organization  (DMO)  and  Command  and 
Control  organization  (C?0)  are  contrasted,  and  are  employed  in 
the  development  of  a  structured  methodology  for  the  synthesis 
of  Command  and  Control  organizations. 

The  DFS  is  a  representation  of  the  connectivity  of  the  functions 
performed  by  the  organization  and  illustrates  the  flow  of 
information  from  function  to  function.  The  DMO  i$  a  DFS 
whose  functions  have  been  allocated  to  decisionmakers. 
Finally,  a  C?0  is  a  DMO  which  is  supported  by  hardware  and 
software  (the  C3  system)  in  the  execution  of  its  tasks. 

In  the  two  level  design  procedure,  the  data  flow  structure  design 
focuses  on  information  processing  schemata,  while  the 
organization  architecture  design  focuses  on  function  allocation  to 
decisionmakers  and  on  the  development  of  the  supporting 
systems. 

The  synthesis  methodology  has  four  phases  (Figure  5).  In 
phase  1,  the  procedure  for  generating  data  flow  structures 
produces  a  set  of  candidate  designs  In  phase  2,  each  data  flow 
structure  is  augmented  and  transformed  to  one  or  more 
decision-making  organizations,  in  which  the  functions  have  been 
allocated  to  decisionmakers,  and  then  to  the  corresponding 

Cbmmand  and  Control  organizations  by  incorporating  the 
supporting  hardware  and  software.  In  phase  3,  the  measures  of 
performance  and  the  measure  of  effectiveness  are  computed 
The  designs  obtained  in  this  manner,  arc  revised  in  phase  4,  to 
increase  their  measure  of  effectiveness  by  changing  function 
allocation,  introducing  or  modifying  decision  aids  and 


PHASE  1 
DFS  SYNTHESIS 


PHASE  2 
DMO  SYNTHESIS 
C*0  SYNTHESIS 


R  >  R< 


(25) 


Figure  5.  Flowchart  of  Synthesis  Methodology 


databases,  and  improving  the  communication  links-  Finally,  a 
C2  organization  is  selected  on  the  basis  of  the  highest  MOE 
value. 

4.2  Data  Flow' Structure  Design 

The  information  processing  is  decomposed  into  five  stages 
(functions):  Initial  Processing  (IP),  Data  Fusion  IDF],  Middle 
Processing  IMP],  Results  Fusion  [RF],  and  Final  Processing 
[FP].  As  data  are  received,  they  are  processed  in  the  IP  stage  to 
assess  the  situation.  Information  (local  or  partial  situation 
assessments)  of  several  IP  stages  are  combined  (fused)  in  the 
DF  stage,  which  produces  global  situation  assessment. 


The  global  situation  assessment  is  fed  to  the  I  ?  stage  which 
develops  results  (options  or  courses  of  action)  The  results  are 
combined  (fused)  in  the  RF  stage  to  eliminate  conflicting  or 
infeasible  options  -  courses  of  action.  Finally,  a  response  is 
selected  from  the  available  options  in  the  FP  stage. 

Each  processing  stage  is  represented  in  the  Petri  Net  of  the  data 
flow  structure  by  a  transition  An  information  flow  path  with  all 
five  stages  defines  a  flow  type  I  (Figure  6a).  Note  that  some  IP 
transitions  may  provide  results  for  fusion  at  an  RF  stage  (DF 
and  MP  stages  null)  (Figure  6c),  while  some  MP  transitions  may 
generate  output  of  the  organization  (RF  and  FP  stages  null) 
(Figure  6b).  An  information  flow  path  of  the  latter  type  defines 
flow  type  2,  while  one  of  the  former  type  defines  a  flow  type  3 


O— Hh- to— c|-cO— 4-cO— et-oO 


tP  DF  •  MP 


IP  RF  FP 


Figure  7.  Data  Flow  Structure  with  all  three  Flow  Types. 


Depending  on  the  degree  of  centralization  of  decision-making  for 
global  situation  assessment  and  the  magnitude  of  the 
geographical  area  for  which  global  situation  assessment  is 
desired,  the  data  fusion  stage  may  be  more  or  less  complex. 
Similarly,  depending  on  the  degree  of  centralization  for  global 
response  selection,  and  the  magnitude  of  the  geographical  area 
where  the  response  needs  to  be  coordinated,  the  results  fusion 
stage  may  be  more  or  less  complex. 

The  degree  of  complexity  of  a  DF  transition  is  defined  as  the 
number  of  transitions  that  feed  data  to  the  DF  transition.  The 
degree  of  complexity  of  the  DF  stage  is  defined  as  the  maximum 
of  the  degrees  of  complexity  of  the  DF  transitions.  The  term 
complexity  is  justified  by  the  observation  that  the  more  data  that 
are  fed  to  a  fusion  node,  the  more  complex  the  processing  that 
takes  place. 


IP  DF  MP  RF  FP 

Flow  Type  I 


IP  DF  MP 


Flow  Type  2 


Figure  6.  Basic  Flow  Types 


The  data  flow  structures  are  classified  according  to  the  flow 
types  of  their  information  flow  paths.  If  all  the  paths  arc  of  flow 
type  1,  then  the  DFS  belongs  to  class  1.  If  some  paths  arc  of 
flow  type  1  and  some  of  fle  ,v  type  2,  the  DFS  class  is  12.  The 
feasible  classes  are:  1, 2, 3, 12, 13,  and  123.  Class  23  is  infea* 
siblc  because  the  flow  type  2  information  paths  have  data  for 
fusion  and  DF  transitions,  while  the  flow  type  3  information 
paths  have  results  for  fusion  and  RF  transitions;  and  hence  flow 
type  2  and  flow  type  3  paths  cannot  exchange  information.  A 
DFS  with  all  three  flow  types  (class  123)  is  shown  in  Figure  7. 

The  grammar  rules  for  the  connectivity  of  the  processing 
transitions  arc: 

-  exactly  one  MP  node  can  rewive  data  from  a  DF  node 

-  exactly  one  FP  node  can  receive  data  from  an  RF  node 

-  one  IP  transition  for  each  input  to  the  organization 

-  one  FP  transition  for  each  output  of  the  organization 

The  generation  of  data  flow  structures  takes  into  account  the 
complexity  and  redundancy  of  information  processing  that  is 
required  by  the  task,  and  the  organization's  objectives. 


The  need  for  redundancy  of  information  within  the  structure 
arises  from  survivability  '.onsidcrations  and  topological  factors. 
The  degree  of  redi.  dancy  of  an  IP  transition  is  defined  as  the 
number  of  fusion  stages  that  receive  the  output  data  of  the  IP 
transition.  The  degree  of  redundancy  of  the  DF  stage  is  defined 
as  the  maximum  of  the  degrees  of  redundancy  of  the  IP 
transitions.  The  term  redundancy  is  justified  by  the  fact  that  the 
same  information  is  communicated  to  more  than  one  fusion 
nodes,  and  is  therefore  redundant  in  the  data  flow  structure. 

The  degree  of  complexity  of  a  RF  transition,  the  degree  of 
redundancy  of  a  MP  transition,  and  the  degrees  of  complexity 
and  redundancy  of  the  RF  stage  are  similarly  defined.  A  data 
flow  structure  with  degree  of  complexity  ci  =  2  and  degree  of 
redundancy  rj  =  2  of  the  DF  stage,  and  degree  of  complexity 
C2  =  3  and  degree  of  redundancy  T2  =  3  of  the  RF  stage  is  shown 
in  Figure  8. 


Figure  8.  Data  Flow  Structure  ci  =  2,  rj  =  2,  C2  =  3,  r2  -  3 
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4.3-Data  Flow  Structure  Generation  Algorithm 

The  algorithm  for<the  generation  of  data  flow  structures 

produces  the  incidence  matrix  of  the  corresponding  Petri  Net, 

and  has  seven  steps. 

The  design  parameters  are: 

-  the  number  n!  of  IP  transitions  that  provide  data  to  the  DF 
stage  (ni  less  than  or  equal  to  the  number  of  IP  transitions) 

-  the  number  k2  of  MP  transitions  that  provide  results  to  the 
RF  stage  (k2  less  than  or  equal  to  number  of  MP  transitions) 

-  the  degrees  of  complexity  Cj  and  c2  of  the  DF  and  RF  stage 
(less  than  or  equal  to  the  number  of  transitions  that  provide 
information  for  fusion  at  the  corresponding  stage)  and 

-  the  degrees  of  redundancy  r  j  and  r2  of  the  DF  and  RF  stage 
(less  than  or  equal  to  the  number  of  processing  assets) 


Tabic  1.  Transition  sets 


set 

transition  type 

I* 

t2 

3 

T4 

T5 

initial  processing 
data  fusion 
middle  processing 
results  fusion 
final  processing 

Table  2.  Place  sets 


set 

place  :ype 

p. 

inpat  places  to  IP  transitions 

p2 

output  places  of  IP  transitions  which  are 
input  places  to  DF  transitions 

output  places  of  DF  transitions  which  are 
input  places  to  MP  transitions 

output  places  of  IP  transitions  which  are 
input  places  to  RF  transitions  and  output 
places  of  MP  transitions  which  arc  input 
places  to  RF  transitions 

P 5 

output  places  of  RF  transitions  which  are 
input  places  to  FP  transitions 

P6 

output  places  of  MP  transitions  which  are 

P2 

outputs  of  the  DFS 
output  places  of  FP  transitions 

The  incidence  matrix  has  block  form:  five  sets  of  transitions 
(Table  1)  and  seven  sets  of  places  (Tabic  2)  arc  defined.  Thus, 
the  incidence  matrix  is  composed  of  35  blocks  (Figure  9).  Each 
block  is  denoted  by  P.T:,  corresponding  to  place  set  P,  and 
transition  set  T:,  The  flow-chan  of  the  algorithm  is  depicted  in 
Figure  10. 

In  order  to  generate  data  flow  structures  in  a  consistent, 
methodical  way,  the  design  parameters  are  varied  between  the 
minimum  and  maximum  value  they  may  obtain. 

Step  1:  Select  the  class  of  the  data  flow  structure. 

Step  2:  Select  the  number  n*  of  initial  processing  (IP) 
transitions  that  provide  data  for  fusion  (DF  stage).  Let  n2  be  the 
number  of  initial  processing  (IP)  transitions  that  provide  results 
for  fusion  (RF  stage).  The  total  number  n  of  IP  transitions  is: 

n  =  nj  +  n2  (26) 
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Figure  9.  Block  Form  of  Incidence  Matrix 


Figure  10.  Flowchart  of  Data  Row  Structure 
Generation  Algorithm 


Step  3:  Select  the  degree jOf  complexity  cj  and  the  degree  of 
redundancy  rj  of  the  DF  stage.  The  number  p  of  output  places 
of  IP  transitions  that  belong  to  the  set  P2  is: 

p=h,r,  (27) 

and  the  number  k  of  data  fusion  transitions  is: 


Step  7:  The  elements  B,.  of  block  P4T1  obtain  their  values 
according  to  '  „ 


B,;  = 


I  forj=n1+l,'nt+2 . n  and  . 

i  =  l(j-ni)-l]r2  +  s,  s  =  1, 2, ....  r2 

O'  otherwise 


(35) 


ksnj(r,/C|)  (28) 

For  the  pair  (rj,C|)  to  be  feasible,  i.e.,  fof  alt  transitions  of  the 
stage  to  have  the  same  degree  of  cwnplexity^and  degree  of 
redundancy,  the  number  k  must  be  integer.  Another  constraint 
on  k  is  that  it  be  no  larger,  than  the  number  of  available 
processing  assets.  Since  each  DF  transition  is  connected  to  one 
middle  processing  (MP)  transition,  the  number  of  MP 
transitions  is  also  k. 

Step  4:  Since  one  IP  transition  is  connected  to  each  place  that 
represents  an  input  to  the  organization,  and  exactly  one  MP 
transition  is  connected  to  each  output  place  of  a  DF  transition, 
the  diagonal  elements  of  blocks  PjTj,  P3T3  are  equal  to  -l, 
while  the  non  diagonal  elements  are  equal  to  0. 

Each  DF  transition  has  exactly  one  output  place;  thus,  the 
diagonal  elements  of  block  p3T2  are  equal  to  1,  while  the  non 
diagonal  elements  are  equal  to  0. 

The  elements  B,j  of  block  P2T1  obtain  their  values  according  to 


The  elements  B,j  of  block  P4T3  obtain  their  values  according  to 

{1  forj  =  kj+1,  kj+2, . k  and 

i«[n2+(j.Jc,)-l)r2  +  s,  5=1,2 . r2 

(36) 

0  otherwise  '  .. 


The  elements  By  of  block  P4T4  obtain  their  values  according  to 
-1  if  place  1  is  connected  to  transitic  ij 

(37) 

0  otherwise 

Each  RF  transition  has  exactly  one  output  pla  e,  thus,  the 
diagonal  elements  of  blocks  P5T4,  are  equal  to  1,  while  the  non 
diagonal  elements  are  equal  to  0. 

Each  FP  transition  has  exactly  one  input  place;  consequently,  the 
diagonal  elements  of  block  P5T5  are  equal  to  -1,  while  the  non 
diagonal  elements  arc  equal  to  0. 


I  forj  d,  2,  ....nj  and 
i  =  (H)ri  +  $,  s*  1,  2 . rj 


(29) 


0  otherwise 

The  elements  B;j  of  block  P2T2  obtain  their  values  according  to 
i  is  connected  to  transition  j 


•1  if  place  i  is 

Bjj  ** 

0  -otherwise 


(30) 


Exactly  one  place  representing  an  output  of  the  DFS  is  connected 
to  an  MP  transition  which  produces  a  DFS  output;  likewise, 
exactly  one  output  place  is  connected  to  each  FP  transition. 
Hence,  the  elements  By  of  blocks  P6T3  and  P7T5,  with  1  *  j,  are 
equal  to  1,  and  the  other  elements  arc  equal  to  0. 

The  elements  of  all  the  other  blocks  involving  place  sets  P4,  P5, 
P5  and  P7  arc  equal  to  0. 

4.4  Data  Flow  Structure  Selection 


The  elements  of  all  the  o’hcr  blocks  involving  place  sets  Pj,  P2, 
P3  are  equal  to  0. 

Step  5:  Select  the  number  k2  of  MP  transitions  that  provide 
results  for  fusion  (at  the  RF  stage).  Let  k^  be  the  number  of 
middle  processing  transitions  that  produce  outputs.  The  total 
number  of  MP  transitions  is: 

k  »  k|  +  k2  (31) 

Step  6:  Select  the  degree  of  complexity  C2  and  the  degree  of 
redundancy  r2  of  the  RF  stage.  The  number  q  of  output  places 
of  IP  transitions  and  MP  transitions  that  belong  to  the  set  P4  is: 

qn(n2+k2)r2  (32) 

and  the  number  of  results  fusion  transition  s,  m,  is. 

m  =  (n2  +  k2)(r2/c2)  (33) 

For  the  pair  (r2,C2>  to  be  feasible,  t  e.,  for  all  transitions  of  the 
stage  to  have  the  same  degree  of  complexity  and  degree  of 
redundancy,  m  must  be  integer.  The  second  constraint  on  mis 

m£a  (34) 

where  a  is  the  number  of  available  processing  assets.  Since  each 
RF  transition  is  connected  to  one  FP  transition,  the  number  of 
FP  transitions  is  also  m. 


Several  data  flow  structures  are  generated  by  the  algorithm.  In 
order  to  select  the  feasible  structures,  i.c„  those  that  are 
appropriate  for  the  task,  the  designer  must  consider  the 
suitability  of  the  structure  to  the  information  processing  required 
by  the  task.  Consequently,  the  algorithms  that  implement  the 
processing  functions  must  be  developed,  and  then  be  associated 
with  the  transitions  of  each  candidate  structure.  During  this 
stage,  some  links  may  be  removed  from  the  structure.  If  it  is  not 
possible  to  associate  the  algorithms  with  the  transitions  of  a 
structure,  then  the  structure  is  discarded. 


4.5  Organization  Architecture  Design 

From  each  data  flow  structure,  one  or  more  decision-making 
organizations  (DMOs)  may  be  developed  through  function 
allocation  to  decisionmakers.  Functions  allocated  to  a  decision¬ 
maker  must  observe  three  requirements: 

1)  must  be  connected  through  an  input-output  relationship,  i  e , 
the  outpu  of  the  one  must  be  the  input  to  the  other,  so  that 
the  decisionmaker  processes  information  relevant  to  the 
same  subtask; 

2)  must  belong  to  different  slices  (Fernandez  and  Thiagarajan, 
1984)  of  the  Petri  Net,  so  that  they  observe  concurrency,  and 

3)  must  conform  to  the  specialization  of  the  decisionmaker. 


359 


When  a  set  of  functions  is  allocated  to  a  decisionmaker,  a 
resource  availability  place  is  introduced.  The  addition  of  these 
places  and  of  their  links,  creates  the  directed  elementary  circuits 
of  the  net,  which  are  used  in  the  throughput  rate  computations 


The  transitions  of  the  DFS  are  in  general  macro-transitions;  they 
may  have  internal  structure  as  in  the  case  Of  functions  performed 
by  alternate  algorithms.  At  this  point  the  macro-transitions  are 
substituted  by  the  subnets  that  they  represent. 


.Next,  each  DMO  is  transformed  into  a  C?0  bymeorporaungthe 
supporting  decision  systems  and  the  communication  links.  The 
data  flow  structure  is  augmented  by  adding  the  transitions  that 
represent  the  communication  processes  and  the  decision  support 
systems  access,  and  of  the  places  that  represent  the  correspond¬ 
ing  protocols.  In  general;  the  decisionmakers  may  or  may  not 
use  the  decision  support  systems;  therefore  switches  must  be 
introduced  to  depict  the  choices  available.  The  switches  and  the 
corresponding  strategies  enable  the  modeling  of  the  decision- 
making  styles  of  individual  decisionmakers. 


4.6  Design  modification  rules 

If  the  computed  Measure  of  Effectiveness  is  not  satisfactory, 
then  the  organisation  is  modified  in  order  to  increase  the  MOE 
value.  The  procedure  for  the  modification  depends  on  the 
location  of  the  organization  locus  with  respect  to  the 
requirements  locus  The  existing  cases  are  shown  in  Table  3. 


Table  3.  Design  Modification  Cases 


9 

HI 

a 

a 

B 

true 

■ 

accuracy 

introduce 
decision  aid 

false 

1 

response 

lime 

better  com¬ 
munications 
improve 
database  access 
improve 
decision  aids 

false 

false 

1 

accuracy 

and 

response 

time 

introduce 
decision  aid 
better  com¬ 
munications 
improve 
database  access 

1 

true 

true 

false 

throughput 

rate 

modify 
function 
allocation 
more  processing 
channels 

5.  APPLICATION  AND  RESULTS 

The  application  of  the  synthesis  methodology  will  be  illustrated 
through  the  design  of  Command  and  Control  organizations  tor 
the  outer  air  battle.  Three  C*  assets  are  considered:  two 
airborne  warning  radar  aircraft  (E2C)  and  the  Combat 
Information  Center  (ClC)  on  the  earner. 


A  simple  model  has  been  developed  for  the  information 
processing  and  decision-making  pertinent  to  the  outer  air  battle 
It  should  be  noted  that  the  model  is  an  abstraction  of  the  actual 
processes  and  does  not  necessarily  reflect  real  naval  air 
operations;  it  can  however  be  modified  to  represent  reality. 

The  model  presumes  that  the  earner  has  four  squadrons  of' 
interceptor  aircraft-  Two  E2Cs  are  airborne  patroling  their 
assigned  sectors  One  squadron  of  interceptors  is  assigned  to 
<each  E2C,  and  the  other  two  squadrons  are  free  assets  that  will 
be  allocated  to  the  appropriate  sector(s)  depending  on  the 
strength  of  the  incoming  raid. 

The  objective  of  the  organization  is  to  develop  and  implement 
appropriate  plans  to  engage  the  incoming  threats  before  they 
reach  the  weapons  release  line  Each  of  the  two  E2Cs  collects 
information  from  the  area  that  it  surveils,  performs  situation 
assessment,  develops  courses  of  action,  and  selects  one 
response  from  the  developed -courses  of  action.  Global 
considerations  necessitate  the  exchange  of  information  between 
the  two  E2C$  and  possibly  the  Cl C,  in  order  to  resolve 
conflicting  courses  of  action,  to  allocate  assets,  and  coordinate 
the  response  execution.  In  this  example,  the  vectoring  of 
interceptors  to  the  threats  has  not  been  modeled 

The  model  used  for  this  example,  incorporates  the  following 
functions: 

-  local  (sector)  situation  assessment:  classification  of  enemy 
aircraft  based  on  their  signature  and  air  speed,  estimation 
of  number  of  threats  and  distance  from  the  E2C. 

-  global  situation  assessment:  estimation  of  raid  strength  in 

both  sectors.  . 

•  local  (sector)  comes  of  action  development:  generation  ot 
plans  -options-  depending  on  the  number  and  type  of 
aircraft  in  the  sector. 

-  global  response  selection  (global  resources  allocation):  the 
free  assets  are  assigned  to  the  sectors,  or  they  remain  in  the 
inner  bailie  region 

•  local  (sector)  response  selection:  one  option  is  chosen  from 
the  developed  cources  of  action,  given  the  available  assets. 

The  complete  set  of  data  flow  structures  generated  by  the 
algorithm  is  given  in  Table  4.  Four  representative  sttuctures  are 
depicted  in  Figures  1 1  through  14.  Two  of  these  sttuctures, 
DFS  7  shown  in  Figure  11,  and  DFS  11  depicted  in  Figure  12, 
will  be  used  to  apply  phases  two  and  three  of  the  synthesis 
methodology. 

Table  4.  Generated  Data  Flow  Structures 
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1 
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2 
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2 

2 
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2 
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2 

3 

3 

1 

DFS  10 

1 

2 
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3 

2 
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1 

2 

3 

3 

3 

DFS  12 

12 

2 

3 

2 

1 

DFS13 

12 

2 

3 

2 

2 

DFS14 
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IP  DF  MP  RF  FP 


IP  DF  MP  RF  FP 


IP  DF  MP  RF  FP 


Two  algorithms  -procedures-  were  created  for  the  development 
of  local  courses  of  action:  one  exhaustive  and  one  crude  - Note 
that  the  differences  in  decision-making  style,  in  this  example,  are 
manifested  in  the  courses  of  action  development  function.  The 
detailed  data  flow  structures,  corresponding  to  Figures  1 1  and 
12,  after  the  elimination  of  some  links  that  are  not  required,  are 
shown  in  Figures  15  and  16. 


Loetl  COA 


D*v«topmtnl 


Figure  15.  Detailed  Data  Flow  Structure? 


Local  COA 
D*v»!opm*nt 


Figure  16  Detailed  Data  Flov.  Structure  1 1 


In  the  data  flow  structure  depicted  in  Figure  15,  the  information 
processing  is  performed  by  the  personnel  of  the  two  E2Cs, 
while  in  the  data  flow  structure  shown  in  Figure  16,  the  CIC 
personnel  participates  in  the  decision-making  process  by 
performing  the  global  functions. 

From  each  data  flow  structure,  two  Command  and  Control 
organizations  were  developed  through  different  allocation  of  the 
functions  performed  by  the  H2C  personnel’  in  the  first 
organization,  one  decisionmaker  performs  all  the  functions, 
while  in  the  second  the  functions  are  allocated  to  two  decision¬ 
makers  m  senes.  The  corresponding  Command  and  Control 
organizations  are  depicted  in  Figures  17, 18, 19,  and  20 


Figure  14.  Data  Flow  Structure  12;  rj=3,  cj=2,  r>»3,  C2=*3 


rrn  1  ,  . . . . i  ~ — j — 


The  measures  of  performance,  namely  the  accuracy  J.  the 
response  time  T, , and  the  throughput  rate  R  that  correspond  to 
the  minimum  value  of  the  rationality  threshold  »oW  wrre 
computed  The  value  used  for  (Foiijiui  »  5  bits/sec  (Miller, 
1956).  Eleven  mixed  decision  strategies  wereimplemented  tor 
each  MP  transition  (selecung  one  of  the  two  COA  development 
algorithms). 


Pi  “0.1k 


k  =  0, 1,2 . 10 


(38). 


Consequently,  the  number  of  behavioral  strategies  is  12!  To 
each  behavioral  strategy  corresponds  a  set  of  MOP  values.  The 
ranges  of  the  MOPs  are  shown  in  Figures  21, 22,  and  23 


Fitrure  17,  Organization  1;  derived  from  DFS7, 
®  one  decisionmaker  per  E2C 


Figure  18.  Organization  2;  derived  from  DFS7, 
two  decislomnakeers  per  E2C 
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Figure  21.  Range  of  Accuracy 


Figure  19.  Organization  3;  derived  from  DFS11, 
one  decisionmaker  per  E2C 


Figure  20.  Organization  4;  derived  from  DFS 1 1, 
two  decisionmakers  per  E2C 
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IjO  CJTRODUCTKXlPIJnPOSE. 

The  recent  interest  in  distributed 
sinadaScn  as  typified  by  the  JDLNET,  supported 
by  the  Joint  Director  of  Laboratories  (JDL) 
Technical  Panel  on  Command  Control  and 
Communications  (TPCCC).  indicated  that  new 
capabilities  for  evaluation  are  feasible  but 
actual  application  oi  these  capabilities  are  not 
well  understood  and  difficult  to  plan.  The  uses 
of  distributed  simulation  include  technology 
projection,  formulation  of  architectural 
concepts,  and  decision  aid  evaluation.  One  area 
which  is  now  recognized  as  practical  is  -the 
evaluation  of  joint  service  interoperability  and 
JDLNET  is  a  vehicle  that  can  be  used  for  this 
evaluation.  This  paper  will  describe  this 
approach  which  has  been  demonstrated  at  the 
Naval  Ocean  Systems  Center.  The  experiments 
conducted  show  feasibility  of  the  approach. 

JDLNET  will  provide  a  simulation  capability 
by  interconnecting  RAOC,  CECOM,  NOSC,  and 
NPGS  using  the  v/arfare  environment  simulator 
known  as  RESA.  RESA  will  be  described  as  well 
as  the  JDLNET  in  the  context  of  interoperability 
analysis.  The  methodology  used  to  analyze 
interoperability  will  also  be  presented 

2.0  INTEROPERABILITY  ELEMENTS. 

The  definition  of  interoperability  as  given 
by  JCS  Pub  1  is  "the  ability  of  systems  jnits, 
or  forces  to  provide  services  to  and  accept 
services  from  other  systems,  units,  or  forces 
and  to  use  the  services  exchanged  to  operate 
effectively  together".  The  definition  implies 
that  the  evaluation  involves  actual  systems, 


communications,  warfare  environment,  and 
other  elements.  These  elements  of 
interoperability  are  listed  below  and  will  be 
discussed. 

a.  ENVIRONMENT.  This  element  includes 
threat  assets,  mission  ROE.  area  of  operations 
and  those  factors  generally  out  of  the  control 
of  the  commanders  but  important  in  that  they 
contain  the  v/arfare  environment  that  limits 
the  scope  of  interoperability  evaluation. 

b.  REQUIREMENTS.  There  are  restrictions 
placed  on  the  commands/nodes  that  are  in  place 
mainly  as  a  result  of  time  and  these  elements 
include  shore  and  battle  force  connectivities, 
surveillance  data  collection  methods,  and  other 
command  and  control  capabilities.  These 
requirements  are  complex  reflecting  the  broad 
nature  of  warfare. 

c.  SYSTEMS.  The  commandfnodes  in  the 
centers  consist  of  systems  which  perform 
various  functions  including  correlation,  track 
management,  force  control,  and  message 
handing.  These  systems  are  a  principal  part  of 
interoperability,  but  not  all  the  functions  of 
the  system  may  be  involved.  Some  of  the 
systems  are  the  Naval  Tactical  Data  System 
(NTDS),  the  USA's  TSQ-73,  and  the  Air  Force 
MCE.  • 

d.  MEDIA  (COMMUNICATIONS).  Nearly  all  of 
the  forms  of  communication  such  as  data  links, 
TTY  circuits,  and  voice  circuits  would  have  an 
impact  on  the  ability  of  a  command  or  node  to 
provide  services. 
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e.  LANGUAGE.  Tbs  staff'd  message 
(annats  such  as  Tadif-A,  Tadil-B.  TadiJ-J, 
JIHTACCS-MTF  are  critcal  Sa  the  effeeSveness 
c!  the  functional  operations.  These  formatted 
messages  must  be  understood  at  a!l  tl_i 
commands  or  nodes  to  operate  effectively. 

f.  OPERATIONAL  PROCEDURES.  The 
interface  operational  procedures  (10P)  involve 
the  management  of  data,  air  space  control, 
search  and  rescue  procedures,  weapons 
engagement  and  status,  and  other  function 
procedures  which  can  only  be  completed  with 
the  human  in  intercperdbdity  arid  they  describe 
the  role  of  the  human  in  the  operational 
process. 

The  above  discussion  introduces  the  notion 
ot  interoperability  and  many  interoperability 
issues  are  well  known.  Issues  include  timely 
correlation  of  data,  consistent  tactical  picture, 
effectiveness  of  planning,  operational  situation 
reporting,  and  others.  Once  the  issue  is 
identified,  the  elements  of  interoperability  are 
selected  and  an  operational  configuration  can 
be  selected.  Some  typical  configurations  will 
be  described  in  a  later  section. 

3.0  BACKGROUND 

3.1  RESEARCH.  EVALUATION  AND  SYSTEMS 
ANALYSIS  (RESA). 

The  warfare  environment  simulator  called 
RESA  is  a  VAX-based  force-level  simulator 
which  supports  command,  control  analysis  and 
is  the  simulator  used  in  JDLNET.  The  RESA 
capability  was  designed  for  fully  interactive 
gaming  between  forces  and  allows 
man-m-the-loop  operations.  There  is  also  a 
capability  to  script  and  conduct  exercises 
without  the  human  participation.  This 
scripting  permits  the  system  to  be  run  many 
times  which  allows  a  Monte  Carlo  analysis  and 
opens  the  way  to  reduced  manning  operation. 


Lastly  the  simulator  «r3  also  generate  actual 
message  traffic  in  standard  operational 
formal  as  part  of  the  real- time  scenario.  The 
latter  capability  is  utilized  in  the  joint 
inteieperabiKy  evaluation  concept  presented 
here:  Other  basic  features  cf  the  system  which 
are  of  interest  are  summarized  in  {he 
following: 

"  Real-time  interactive  system  with  one 
minute  step  size-track  motion,  sensors, 
weapons  updated. each  minute. 

*  Platforms  (ships,  subs,  aircraft)  era 
individually  controlled  or  can  be  collectively 
controlled  (e.g.,  battle  group). 

*  Models  are  table-driven  which  allows 
hypothetical  objects  to  be  simulated  (future 
scenarios  are  possible). 

*  Forces  are  assigned  to  views  which  are 
_  controlled  by  the  simulator. 

*  Each  emulated  command  center  receives 
sensor  data  and  messages  which  are  computer 
generated. 

*  Control/umpire  view  has  complete  force 
information. 

The  models  used  in  RESA  are  summarized 
in  Table  1.  Most  are  self-explanatory  but  a 
discussion  of  a  few  will  give  an  insight  into 
the  models.  One  model  that  demonstrates  the 
built  in  logic  is  the  flight  operations  model 
Aircraft  are  launched  and  will  automatically 
rendezvous  and.  once  all  aircraft  have  arrived 
they  will  proceed  wilh  their  mission.  In 
addition,  platforms  will  automatically  engage  a 
threat  once  the  command  for  engagement  has 
been  given.  The  simulator  will  represent 
engagements  without  a  human  in  the  loop 

Other  sensor  models  are  designed  to 
provide  lorce  level  data.  The  radar  model  uses 
the  radar  eauation  which  is  then  converted  to  a 
probability  of  detection.  The  sonar  models  use 
the  sonar  equations.  The  navigation  model  uses 
error  mean  and  variances  of  the  navigation 
system  to  introduce  positional  inaccuracies. 
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TABLE  NO.  1  RESA  MODELS 

PLATFORM  MORON  -  AIRCRAFT,  SHIPS,  SU3S 
SUB  BASES 

SATELLITE  J.IOTKDN  MODEL 

FLIGHT  MODEL-  CARRIER  LAUNCH  MODEL 
REFUELING  MODEL 

LOGISTICS  -  FUEL,  WEAPONS 

SENSORS -RADAR 
ESM 

-  JAMMING 

SONAR,  ACTIVE 
SONAR,  PASSIVE 

MON-ORGANIC  SENSORS 
HFDF 

SONABUOYS 

AUTOMATIC  TRACK  CORRELATION 
COMMUNICATION  NET  MODEL 
CHARACTER-ORIENTED  MESSAGE  GENERATION 
BIT-ORIENTED  MESSAGE  GENERATION 
ENGAGEMENT  MODELS 
DAMAGE  MODEL. 


Other  model  data  can  be  obtained  front  the 
references. 

Another  feature  of  tha  simulator  is  its 
ability  to  operate  in  a  geographically 
distributed  environment.  The  VAX-based 
system  will  allow  several  VAXs  to  be  netted 
together  to  participate  in  the  same  exercise. 
The  host  machine  fmaster)  will  process  all 
commands,  platform  motion,  sensors,  and 
weapons.  Then  the  communication  software 
distributes  the  dynamic  data  base  to  all  VAXs 
on  the  net  where  command  centers  can  be 
supported.  This  capability  to  distribute  the 
data  base  is  necessary  and  fundamental  to  the 
operation  of  JDLNET, 

32  JDLNET. 

The  purpose  of  JDLNET  is  to  provide  a 
distributed  simulation  capability  to  support 
command  and  control  research  and  development 
roals.  The  concept  evolved  when  it  v/as 
recognized  that  RESA  could  operate  distributed 
and  no  costly  software  development  v/as 
neeeded  to  complete  the  simulation  network.  A 
network  of  sufficient  bandwidth  v/as  required 
to  interconnect  the  principal  laboratories 
(Figure  1).  Though  there  v/ere  several  options 
for  the  JDLNET.  the  DDN-DISNET  was  selected 
to  demonstrate  the  concept.  DISNET  is  a 
GENSER  secret  network  similar  to  ARPANET. 
The  network  along  with  RESA  will  allow  a 
shared  real-time  exercise  to  be  conducted 
among  the  JDL  laboratories.  The  commands  are 
sent  to  the  master  host  and  then  ths  host 
distributes  the  dynamic  data  that  changed.  The 
data  is  distributed  to  the  remote  hosts.  Each 
site  will  have  as  many  work  stations  as  are 
necessary  to  support  the  exercise  objectives. 
The  simplest  use  of  JDLNET  is  the  conduct  of 
joint  exercises.  A  more  complex  use  of  the 
network  is  interoperability  evaluation. 


FIGURE  HO.  I  JO  LI  .XT 
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4.0  JOINT  INTEROPERABILITY  EVALUATION. 

The  air  defense  operational  concept  is 
represented  in  Figure  2.  This  concept  is  a 
typical  joint  operational  configuration.  There 
is  a  Joint  Operations  Commander  (JOC)  and  an 
Area  Air  Defense  Coordiantor  (AADC)  who  have 
joint  mission  responsibilities.  Hach  service 
has  a  command  responsibfily.  For  the  Navy  that 
is  a  battle  group  commander.  Navy  assets 
include  the  guided  missile  ships  and  aircraft 
(E-2C,  F-14).  Air  Force  command  responsibility 
rests  with  the  Regional  Air  Defense 
Coordinator  and  their  assets  include  AV/ACs  and 
F-15s.  The  Army  command  in  air  defense  is  the 
PatrioUlHAVVK  Brigade.  The  Patriot  and  I  HAWK 
fi'ing  units  are  his  to  control.  This  operational 
concept  is  represented  with  JDLNET  in  Figure  3. 
Each  service  laboratory  is  developed  to 
represent  the  command  centers  and  the  inter 
connections  include  the  data  communications 
and  simulation  data.  Voice  communications 
would  require  separate  circuits  in  the  current 
configuration  of  JDLNET  but  later  when  more 
bandwidth  is  available,  it  would  be  included  in 
the  net.  Each  command  center  and/or  systems 
in  the  command  center  would  be  stimulated  by 
JDLNETs  simulator  (RESA).  The  simulator's 
ability  to  remotely  generate  both  bit  oriented 
messages  (BOM)  and  character  oriented 
messages  actually  is  the  stimulus  at  each  node. 

The  evaluation  methodology  is  presented  in 
the  following  steps: 

a.  Define  the  objective  (based  on  issues) 

b.  Analyze  operational  conepWunctions 

c.  Select  evaluation  configuration/implement 
configuration 

d.  Develop  scenario/files 

e.  Develop  data  collection  plan/implement 

f.  Conduct  exercise 

g.  Perform  analysis 

The  approach  is  expandable  to  address  any 
interoperability  issues. 


rc&Mztto.i  *31  ctrvat  opixatckal  ccwctrr 


5.0  SUMMARY. 


The  JDLNET  and  the  RESA  simulator  is  an 
effective  capability  to  conduct  interoperability 
issue  evaluations.  The  current  system  is 
adequate  for  some  applications,  but  plans  to 
upgrade  to  either  v/ide  band  satellite  or  long 
haul  fiber  optics  will  significantly  expand  its 
capabilities.  In  addition  the  current  simulator, 
RESA,  can  also  grow  into  a  significant  system 
through  the  use  of  parallel  processors  and 
architecture  re-design  while  maintaining  the 
existing  software.  As  the  number  of 
interoperability  experiments  grow,  the 
capabilities  of  JDLNET  will  be  recognized  and 
the  concept  will  be  more  widely  accepted. 


RADC 


CECOM 


NOSC 


FIGURE  NO.  S  JOINT  INTEROPERA BIUTV  CONnGURATION 
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,.  .  pr°Je!jt  Juniper  addresses  the  technology  of 
distributed  expert,  decision  aids  in  the  context  of 
cooperative  and  supportive  joint  Navy/Air  force  air 
oission  planning.  The  Navy  and  Air  Force 
have  developed  expert  systems,  the  Air  Strike 
Planning  Advisor  (ASPA)  and.the  pledge-based 
P*p!' ’""*"9. Systea  (ICRS),  respectively,  which  sup- 
port  the  planning  of  strikes  against  land  targets. 
They  have  been  networked  to  demonstrate  the  feasi- 
distributed  planning  for  joint  Havy/Air 
Force ,air=strike  missions. 


the  mirfiJh?  Has  ,n'tiated,in  FY-85  under 
the  JDl  Cd  technology  program.  The  overriding 
OointSeryice  need  in  C3  is  rapid,  reliable  and 
effective  exchange  of  timely  information  for 
planning,  decisions  and  command  action.  Project 
Juniper  addresses  the  technology  of  distribut'd 
expert  decision  aids  in  the  context  of  cooperative 
and  supportive  joint  Navy/Air  Force  air  strike 
mission  planning.  Air  strike  mission  planning  is 
currently  a  time  consuming  and  man  intensive  pro¬ 
cess.  To  respond  to  rapidly  changing  battle 
environments,  the  time  to  accomplish  all  levels  of 
mission  planning  must  be  significanttyredrad! 

t hmfnSifat|n9l,ya-]-eth?1  thrcat  environment  requires 
that  Planning  effectiveness  must  also  be  improved. 

The  Navy  and  Air  Force  have  developed  expert 
Air  ^.Planning, Advisor  (ASPA)  and 
the  Knowledge-based  Replanning  System  (KRS) 
respectively,  which  support  the  planning  of  strikes 
against  land  targets.  Each  of  tnese  developments 
utilize  different  hardware  and  software.  They 
ofVHi<^?wnf!!0‘'fed  f°  Jfonstrate  the  feasibility 
d'“r*kut«d  Planning  for  joint  Navy/Air  Force 
airs  trike  missions.  That  is,  the  system  users 

Joint^isslon’  Shar,n9  data  and  "suits,  to  plan  a 


BACKGROUND 

The  Wavy  and  the  Air  Force  have  separately 
*?«?*■?»  exp?rl  systca  projects  designed  for 
the  air  strike  mission.  These  coopu ter- based 

are.dff1s,on  aid*  which  provide  the  assis- 
tance  one  might  expect  from  an  expert  air  strike 
Planner  That  is,  as  the  air  strife  mission  is 
being  planned,  the  system  will  interpret  the  data 
that  is  entered  and  cake  inferences  on  that  data 
based  on  roles  within  the  system.  For  example,  if 
the  plan  requires  that  a  certain  aircraft  with  a 
specific  weapons  load  fly  from  point  A  to  point  B 
at  a  specified  altitude  and  speed,  the  expert 
system  can-  be  used  to  develop  a  route  plan,  an 
it.nerar/ and,  predict  fuel  usage.  If  the  system 
also  knows  where  enemy  SAM  sites  are  located,  it 
can  recommend  countermeasures'. 

Because  the  Navy  andAir  Force  cay  be  called 
e!cJ. othcr  >P  a"  air  strike  mission, 
the  abilities  of  the  expert  systems  developed  by 
the  services  bust  be  mutually  supportive.  That  is, 
the  two  systems  should  be  able  to  work  together, 

iat?  and  rcs?ltSl  t0  P,arl  thc  joint  mission. 
Project  Juniper  provides  a  method  for  testinq  the 
two  systems  ability  to  work  together  to  support  a 
joint  Navy/Air  Force  air  strike  mission. 


This  joint  technology  demonstration  draws  upon 
current  on-going  efforts  in  expert  systems  technol¬ 
ogy  in  the  Navy  and  Air  Force.  Project  Juniper 
involves  the  integration  of  five  separate 
tecnnologies: 

Air  Strike  Pining  Advisor 
(ASPA)  and  Knowledge-based -Replanning  System  (KRS). 

User  Interface;  Map  Object  Oriented  System 
Environment  (MOOSE)  and  natural  language  and  mixed 
initiative  interfaces* 

Networking:  Local  area  and  long  haul  net¬ 
working  of  distributed  planninq  system. 

Simulation;  The  Research^. Evaluation  and 
Systems  Analysis  (SESA)  warfare  simulator  provides 
3  validated  event  driver  for  testing  the  expert 
systems  technology. 

Decision-making:  Protocols  have  been  devel¬ 
oped  which  support,  via  network  cojmwnications,  a 
real-time  distributed  planning  system  for  joint 
Navy/Air  Force  air  strike  irissions. 
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A  fuzzy  logic  decision  tool  has  been  integrated 
into  Juniper  to  support  plan  evaluation  and 
’election. 

JOINT  SERVICE  COMttXD  STRUCTURE 

The  Joint  Service  Command  Structure  for-coo- 
bined  Navy  and  Air  Force  operations  provides  tha 
operational  contect  for  Project  Juniper.  The  exis¬ 
tence  of  the  Joint  Force  Commander  ensures  that  the 
individual  servicesrinvolved  in  joint  operations 
have  a' common  goal  and  understand  their  responsi¬ 
bility  in  achieving  it.  However,  the  planning  and 
execution  of  that  responsibility  norcally  requires 
close  coordination  between  the  component  commands. 


These  plans  cust  be  responsive  to  a  dynamic  environ¬ 
ment  in  terns  of  weather,  resource  availability  and 
threat  conditions. 
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The  Navy  and  Air  Force  have  developed  expert 
systems,  the  Air  Strike  Planning  Advisor  (ASPA)  and 
the  Knowledge-based  Replanning  System  (KRSh  respec¬ 
tively,  which  support  the  planning  of  strikes 
against  land  targets.  These  developments  utilize 
different  hardware  and  software,  but  they  have  been 
networked  to  demonstrate  the  feasibility  of  dis¬ 
tributed  planning  for  joint  Navy /Air  Force  air 
strike  missions.  That  is,  the  system  u>ers  work 
together,  sharing  data  and  results,  to  plan  a  joint 
mission. 


Fig.  1  Joint  Operations  Cocnand  Structure 


JolnlForc*  Commoner 


In  the  case  of  air  strike  operations,  the  Navy 
and  the  Air  Force  coernand  structures  parallel  each 
other  in  a  manner  as  shown  in  Figure  1.  In  par¬ 
ticular,  the  planning  of  Air  Force  strike  opera¬ 
tions  is  distributed  between  the  Tactical  Air 
Control  Center  which  develops  high  level  plans  for 
the  theater  of  operation,  and  the  Wing  Operations 
Center  which  does  detailed  planning  of  particular 
missions.  In  a  similar  respect.  Navy  planning  is 
distributed  between  the  Composite  Warfare  Corrmander, 
which  develops  operations  plans  for  an  entire 
battlegroup  operation,  and  the  Wing  and  Squadron 
Commanders  and  their  staffs  which  plan  specific 
strike  missions. 

Figure  2  shows  the  general  relationship 
between  mission  planning  and  the  command  hierarchy. 
At  the  highest  levels,  the  joint  force  ard  theater 
cocraands,  emphasis  is  on  advanced  planning,  char¬ 
acterized  by  course  granularity  and  stored  plan 
options.  High  level  planning  primary  deals  with 
warfare  objectives,  resource  requirements  and  long 
tern  strategy. 

At  the  intermediate  planning  level,  the  tac¬ 
tical  commanders  generate  daily  schedules,  allocate 
resources,  compare  options  and  replan  in  near  real 
time.  Al  the  lowest  level,  the  strike  leader  must 
develop  fine  grain  executable  plans  in  real  time. 
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Figure  3  Joint  Operations  Cormand  Structure 

Figure  3  shows  how  the  Juniper  system  sup¬ 
ports  distributed  planning  in  a  joint  operations 
corrmand  structure.  The  top  level  Juniper  system 
supports  the  generation  of  theater  tasking.  The 
second  level  consists  of  an  Air  Force  and  Navy 
version  of  KRS  which  support  cooperative  planning. 
At  the  lowest  level  the  ASPA  system  supports  the 
generation  of  plans  for  a  specific  mission. 
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Figure  4  Cooperative  Planning  Cycle 

Figure  4  shows  a  typical  cooperative  planning 
cycle  using  the  Juniper  systea.  The  first  step, 
target  selection,  is  accomplished  with  the  aid  of 
the  Kap  Object  Oriented  System  Environment  (MOOSE). 
MOOSE  is  a  flexible,  color  graphic  oriented,  map 
and  information  display  systea  that  uses  World  Data 
Bank  I  and  II.  Object  oriented  techniques  allow 
the  user  considerable  flexibility  in  building  a 
customized  collection  of  entities  with  associated 
characteristics  and  relationships.  MOOSE  is  used 
in  Juniper  to  graphically  identify,  review  and 
select  targeting  information,  position  carriers  and 
modify  strike  aircraft  routes  and  refueling 
stations. 

The  next  step  in  the  Juniper  planning  cycle  is 
to  generate  and  send  joint  tasking  directives  or 
target  lists  to  the  respective  Navy  and  Air  Force 
KRS  planning  systems.  KRS  deals  primarily  with  the 
allocation  and  scheduling  of  resources  for  manned 
aircraft  strike  missions  and  the  associated  support 
missions  such  as  air  escort,  SAM  suppression,  ECM 
and  refueling.  It  also  plans  cruise  missile  mis¬ 
sions.  KRS  can  be  used  interactively  by  the  user 
for  data  base  query,  plan  verification  or  plan 
generation  at  the  theater  level.  The  Navy  and  Air 
Force  version  of  KRS  work  together  to  plan  joint 
missions  in  three  different  theaters  of  operation, 
Europe,  Southeast  Asia  and  the  Mediteranean.  When 
standard  plan  knowledge  cannot  be  used  at  the 
theater  level ,  the  Navy  KRS  can  task  ASPA  to  auto¬ 
matically  develop  sub-plans  tailored  to  new  targets, 
a  changing  threat  environment  or  changing  weather 
conditions. 

ASPA  functionality  currently  includes  weap- 
oneering  and  defense  suppression  planning.  The 
weaponeering  module  integrates  existing  stand-alone 
decision  aids,  large  data  files,  and  expert  knowl¬ 
edge  to  support  the  selection  of  aircraft,  weapons 
loads,  load  configuration  and  delivery  tactics 
needed  to  achieve  desired  strike  mission  effective¬ 
ness.  The  defense  suppression  module  is  designed 
to  support  a  strike  leader  in  the  selection  of 
resources  and  tactics  to  suppress  the  local  area 
defensive  threat  in  support  of  a  land  air  strike. 
The  defensive  threat  includes  early  warning  radars, 


surface-to-air  missiles,  anti-aircraft  artillery 
and  air  intercept.  The  resources  and  tactics  to  be 
considered  include  the  electronic  countermeasures, 
decoys,  anti-radiation  missiles  and  deception  em¬ 
ployed  by  Naval  aircraft. 

When  strike  plans  have  been  developed  by  the 
individual  services,  they  are  sent  back  to  the  top 
Juniper  level  where  plans  are  selected  and  inte¬ 
grated  by  a  process  of  machine  assisted  review  ard 
comparison  using  a  fuzzy  logic  decision  tool.  The 
user  nay  select  his  own  plan  evaluation  criteria 
and  their  relative  importance.  The  joint  plan  is 
determined  as  the  best  combination  of  Navy/Air 
Force  assets  needed  to  accomplish  the  primary  and 
support  missions,  considering  primary  mission  para¬ 
meters  such  as  (1)  availability  of  assets  like 
aircraft,  weapons  and  fuel,  (2)  number  of  assets 
required  including  refueling  and  other  support 
assets,  (3)-nission  duration  and  time  over  target, 
and  (4)  likelihood  of  mission  success. 

AN  EXAMPLE 

Although  the  Juniper  system  can  be  used  to 
plan  attacks  on  any  portion  of  the  globe,  several 
detailed  scenarios  are  available  for  test  and 
evaluation.  The  most  recently  developed  scenario 
is  a  recreation  of  the  April  15,  1986  Libyan  air 
strike.  This  military  action  is  particularly  per¬ 
tinent  to  Project  Juniper  because  the  Joint  Chiefs 
of  Staff  (JCS)  participated  in  the  planning  and  it 
was  executed  using  both  Air  Force  and  Navy  resources. 
The  Libyan  raid  required  air  power  projection,  re¬ 
fueling,  electronic  counter-measures  (ECM),  SAM  sup¬ 
pression  and  air  escort  missions.  Juniper  provides 
the  capability  to  quickly  plan  and  re-plan  compli¬ 
cated  air  strikes  of  this  nature.  The  remainder  of 
this  section  will  detail  a  typical  Juniper  planning 
cycle,  utilizing  key  Libyan  targets  as  an  example. 

The  Libyan  attack  scenario,  as  re-created  on 
the  Juniper  system,  demonstrates  Juniper's  flexible 
capability  to  plan  and  re-plan  single  service  or 
joint  service  air  strikes  and  the  accompanying 
supporting  missions.  These  tools  would  have  been 
helpful  to  the  JCS  staff  in  rapidly  exploring  and 
testing  contingency  plans.  The  specific  details 
of  the  mission  and  target  area  defenses  have  been 
altered  or  omitted  to  keep  the  example  unclassified. 


5  Target  Selection  -  Benghazi  Barracks 
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By  clicking  on  the  installation  labeled  “Benghazi" 
Barracks",  the  information  window  in  Figure  5  is 
shown.  This  window  contains  the  major  properties 
of  the  targets  knowledge  base  for  this  installation. 
The  user  cay  change  any  of  these  properties  by 
clicking  on  the  property  name  and  entering  a  new 
value.  To  select  this  installation  as  a  target, 
the  operator  changes  the  SELECTED  property  from  F 
for  false  to  T  for  true.  This  installation  is 
then  put  on  the  target  list.  The  user  cay  also 
rodify  properties  which  will  also  be  included  in 
the  target  list,  such  as  priority,  time  over  target 
(TOT),  probability  of  kill  (PK)  and  a  consent. 


Figure  6  Target  Selection  «  Remaining  Targets 

The  target  selection  procedure  is  repeated  until 
all  desired  targets  are  on  the  targets  list.  This 
list  can  then  be  displayeJ  on  the  Juniper  interface 
by  selecting  the  UST  TARGETS  function  under  the 
Display  OPS  menu  (See  Figure  6). 


Figure  7  N-KRS  System  Planning  Bab-al-azizia  Target 

Figure  7  shows  the  Navy  mission  planning  window. 

The  data  outlined  in  black  are  legal  values  for 
certain  aspects  of  the  plan.  These  values  get 


filled  into  the  detailed  plan  summary  in  the  window 
above.  The  “PPA1002"  designation  in  the  upper  left 
corner  identifies  this  as  a  power  projection  mission, 


Figure  8  MOOSE  -  Estimate  Refueling  Orbits 


The  system  can  now  estimate  refueling  locations  for 
the  route  (See  Figure  8).  The  refueling  icon  is 
the  arrow  inside  of  the  ellipse.  The  ellipse  re¬ 
presents  the  orbit  of  the  tanker  and  the  arrow 
indicates  the  direction  the  strike  force  is  moving. 
In  this  case  the  length  of  the  route  is  4880 
nautical  miles  and  requires  5  refuelings. 
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Figure  9  Juniper  System  -  Summary  of 
Candidate  Missions 

8oth  services  have  returned  all  of  their  undidate 
missions  for  the  Benghazi  military  barracks.  A 
summary  of  the  plans  is  displayed  on  the  Juniper 
interface  (See  Figure  9).  It  is  now  up  to  the 
user  to  select  among  these  candidate  missions 
based  on  some  theater  level  strategy  or  other  out¬ 
side  intelligence.  The  fuzzy  logic  tool  can  also 
be  used  to  help  the  user  make  a  decision. 
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Figure  10  Juniper  System  -  Joint  Plan  Suirmary 


The  selected  Benghazi  and  8ab-al-aziziamissions 
are  now  added' to  the  Joint  Plan  Surrrcary  and  dis¬ 
played  for  operator  approval  (See  Figure  10). 
This,  as  well  as  raost  of  the  other  stages  of 
planning,  can  be  printed  out  in  Navy  hardcopy 
format. 
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ABSTRACT 

An  adaptive,  model-based  interface  provides  a  way  to 
enhance  the  quality  of  team  decisionmaking.  An  operator 
function  model  of  human  decisions  was  used  as  a  tool  to 
guide  interface  development  for  a  tactical  decisionmaking 
environment.  The  resulting  model-based  interface  sclf- 
adapts  to  the  information  needs  of  the  team  members  which 
vary  with  the  system  state  and  the  operator  activities. 
Both  the  information  content  of  displays  and  the  command 
structure  of  the  interface  support  the  human  operators.  The 
interface  was  designed  to  decrease  the  amount  of  low-level 
perceptual  and  manual  tasks,  thereby  freeing  team  members 
to  concentrate  on  advanced  decisionmaking  problems.  A 
preliminary  evaluation  of  the  modcl-bascd  interface  showed 
that  teams  using  this  Interface  perceived  c  lower  workload, 
yet  were  able  to  achieve  a  significantly  higher  level  of 
system  performance. 


INTRODUCTION 

Modern  computer  technology  provides  the  human- 
system  interface  designer  with  almost  unlimited  options  for 
both  the  content  and  format  of  displays.  When  digital 
computers  were  first  introduced,  their  displays  tended  to 
reflect  precomputer  practices  (Mitchell  and  Miller,  1986). 
Before  the  advent  of  computers,  when  systems  were  manip¬ 
ulated  directly,  multiple  sensors,  each  tracking  a  separate 
low-level  process,  reported  their  current  status  to  the  oper¬ 
ator  This  so-called  single-sensor,  singlc-mdicator  layout 
was  directly  transferred  to  computer  displays,  so  that  the 
system  representation,  as  viewed  by  the  user,  consisted  of 
multiple  status  indicators,  a  subset  of  which  updated  when¬ 
ever  a  system  event  occurred.  Given  the  information  pro¬ 
cessing  capabilities  of  both  humans  and  computers,  this 
proved  to  be  a  poor  interface  design  approach.  Searching 
for  and  integrating  unprocessed  data  is  a  time  consuming 
responsibility  for  a  human  operator.  Time  that  could  be 
spent  in  high  level  decisionmaking  is  spent  doing  tedious 
data  aggregation  tasks  -  tasks  Utter  suited  for  a  digital 
computer  than  a  human  decisionmaker. 

The  importance  of  interfaces  which  reflect  the  oper¬ 
ator’s  information  needs  is  now  widely  recognized.  Smith 
and  Mosier's  (1986)  user  interface  design  guidelines  state 
that  we  should, 


*  This  work  was  sponsored  by  the  Office  of  Naval 
Research  under  contract  N00014-S4-C-0577. 


"Tailor  displayed  data  to  user  needs,  providing 
only  necessary  and  immediately  useable  data  for 
any  transactions;  do  not  overload  displays  with 
extraneous  data."  p«  98 

Although  the  goal  is  recognized,  little  has  been  written  on 
methods  for  achieving  it.  As  noted  by  Mitchell  and  Miller 
(1986)  the  current  focus  of  human  factors  literature  is  on 
enhancing  the  format  of  information,  rather  than  on  deter¬ 
mining  how  to  generate  the  information  content  of  dis¬ 
plays.  The  latter  issue  is  addressed  here. 


THE  OPERATOR  FUNCTION  MODEL 

A  modeling  approach  has  been  developed  from  which 
adaptive  interfaces  can  be  created.  The  interface  is  designed 
to  adapt  to  the  human  operator  in  the  following  respect. 
A<  the  operator  task  and  the  system  state  evolve  over  time, 
the  displays  vary  m  information  content,  the  set  of  avail¬ 
able  commands  changes,  and  the  procedures  to  accomplish 
commands  alter. 

Human  functioning  in  complex  systems  has  been  suc¬ 
cessfully  represented  by  "discrete  control  models"  (Miller, 

1985)  Systems  of  interest  are  those  in  which  alternatives 
available  to  the  human  arc  finite  and  sequential  decisions 
arc  made  Precedent  decisions  affect  the  system  and,  there¬ 
fore,  influence  future  decisions.  Discrete  control  models 
create  a  mathematical  representation  of  the  decomposition 
of  a  complex  system,  together  with  a  description  of  how 
operator  activities  are  related  and  coordinated. 

The  "operator  function  model"  (Mitchell  and  Miller, 

1986)  is  built  upon  discrete  control  modeling  constructs, 
but  redefines  the  network  elements  so  that  the  model  may 
serve  as  a  basis  for  user  interface  design  (Mitchell  and 
Saisi,  1987)  Like  the  discrete  control  model,  the  operator 
function  model  is  a  heterarchical  J  hierarchical  network  of 
arcs  and  nodes  with  the  links  between  nodes  expressing 
how  system  elements  are  related.  However,  the  lowest- 
level  system  components  (i.e.,  system  outputs)  are  rede¬ 
fined  as  operator  control  actions  (either  cognitive  or  man¬ 
ual)  and  information  needs.  Cognitive  action  nodes  are 
linked  to  the  information  a  person  requires  to  cany  out  the 
mental  activity.  These  modeling  enhancements  allow  the 
human’s  dynamic  focus  of  attention  and  evolving  infor¬ 
mation  requirements  to  be  explicitly  included  in  the  net¬ 
work,  even  in  cases  where  the  person  engages  in  cognitive 
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THE  DDD  EXPERDIENTAL  PA2AIXGM 

The  operator  fancrica  modd  ins  2jp5kJ  to  dettgsac 
the  system  commands.  lie  ccmmarzl  proee&res.  rad  fee 
display  content  fer  fee  DicSed  Dyras:  Daina- 
makiag  (DDD)  apcsya?3  pgadrgm.  Tbs  DDD  preifeigm 
is  aa  simplified  xcpscsczxxa  of  2  ttdial  cere?  red  2d 
control  carecresd  and  *«  dreeScped  to  atrer  bmr  2 
team  of  decisionmakers  solves  problems  of  cagbr. 
jijcMsts  zad  rcjorcc  crupra:  cadre  trecarer. 
The  paradigm  invehres  fee  zUccarion  of  hctercjcaacss 
resources  to  pros ecree  differed  types  cf  ferrets  is  2 
dynamic,  uncertain.  multi-object  cnTL-omrarnl  (Kkiamzn. 
Srefaty.  23d  Luh.  1934;  Seda y  23d  KIriaman.  1935).  Tie 
following  is  2  sample  of  fee  fcaeaaal  drexarittes  sup¬ 
ported  by  fee  p zradigm. 


OBJECT  TYPE 

Incoming  objects  are  assigned  23  idemity.  There  arc 
two  types  of  objects  feat  are  ferrets  2nd  should  be 
destroy  ed  before  they  penrerate;  feese  can  be  thought  of  as 
air  and  surface  threat.  There  is  3  friendly  cr  nresral  type 
that  should  not  be  prosecuted.  Seme  objects  are  assigned 
aa  unknown  type  and  require  identification-  The  identity 
can  be  found  either  through  probing  fee  environment  or 
receiving  information  from  one's  partoer.  or  can  be  esu- 
mzted  from  object  attributes. 


FINITE  OPPORTUNITY  WINDOW 

The  DDD  paradigm  supports  time-restricted  decision¬ 
making.  Each  incoming  object  is  assigned  2  finite  time 
available  (a  random  variable),  and  decisionmakers  arc  able 
to  process  objects  only  within  that  time  span. 


TARGET  ATTRIBUTES 

Each  object  is  characterized  by  an  attribute  set  g.  The 
first  attribute  component  can  be  thought  of  as  strength,  the 
second  as  evasiveness.  The  aj  are  random  variables 
selected  from  a  distribution  whose  range  depends  on  object 
type.  The  g  ranges  for  different  object  types  partially 
overlap. 


RESOURCES 

Tfcarc  is  a  fixed  amount  of  renewable  resources  1  avail¬ 
able  to  the  team.  Resource  components  can  be  thought 
of  as  aircraft,  ships,  and  radars.  At  any  time  each  team 
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bet  ia  adentny  escH  be  pro  to  cm  persea  and  dbwo 
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THE  BCD  0i^T02H2iCTro  MODEL 

Since  there  me  cshpZe  dcrisreremires  three  shedd  be 
ceijple  operator  fim erica  models  to  dxancize  cafe  team 
member's  respcasShcEtSe*  However,  in  fee  present  stody 
sbee  we  focus  ca  2  two-persca.  parallel  team  (a  dyzd) 
where  team  members  hare  the  same  type  of  respensiba- 
iries.  one  model  was  sufficient.  The  following  descripfe ca 
of  the  DDD  operator  fancies  model  is  pva  from  the  per¬ 
spective  of  one  team  member,  'the  decisionmaker",  who 
support*  aad  is  supported  by  the  other  team  member,  'the 
part sex'. 

There  are  five  major  DDD  operator  functions 
(Figure  1).  The  model  indicates  that  situation  assessment 
is  the  central  function.  Situation  Assessment  refers  to  bofe 
external  (object)  aad  internal  (resource)  states-  The  deci¬ 
sionmaker  assesses  the  situation  and  makes  one  of  three 
decisions.  The  first  leads  to  target  processing,  the  second 
leads  to  resource  redistribute^,  znd  the  third  results  in 
monitoring  for  a  relevant  event  to  occur.  When  any  of 
these  three  functions  is  completed,  the  decisionmaker 
returns  to  situation  assessment.  The  situation  assessment 
function  can  be  interrupted  by  a  request  from  the  decision* 
maker's  partner.  Once  the  request  is  acknowledged,  the 
decisionmaker  resumes  assessing  the  situation. 

Each  major  operator  function  is  decomposed  into  sub- 
functions.  tasks,  subtasks,  etc.  To  transition  between 
these  activity  nodes,  a  system  event  must  occur  or  a  system 
condition  must  hold.  Transition  arcs  arc  labeled  with  the 
appropriate  system  event  /  condition.  Information  nodes 
are  connected  to  the  lowest  level  activity  nodes  with 
information  arcs.  Approximately  150  activity  and  infor¬ 
mation  nodes  were  used  decompose  the  five  major  operator 
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Figure  L  DDD  Operator  Fbttcs*. 


fcKasa.  Tie  fe£fd  dcMcytaoa  is  tcjwd  tie  sccpc 
of  cHs  payer,  be:  era  be  fixed  b  Sad  d  il  (1923). 


THECrERATOR  FUNCTION  iSODELBASED  INTERFACE 

figure  2  jhw  23  overview  of  on  intorfsee  designed 
based  cpco  a  DDD  eperrtor  f=dk»  model  (OEM).  The  top 
half  of  lie  screes  is  dedicated  to  jso»idbj  object 
iefeesuden  required  for  situauon  assessment  red  for 
systons  monitoring,  Wfca  the  decisionmaker  determines 
ia:  so  action  is  cctcsdy  approprizto.  be  noves  into  a 
less- cognuively  dfgxa&g  system  mccitorin g^fesexSen  in 
which  he  wails  for  the  arrival  of  a  new  object,  new 
information.  or  more  resources.  In  addition  to  the  object 
information.  the  amosms  of  current  and  reaaasg  rcsocrces 
are  also  required  for  sitoodon  assessment  -  once  objects 
have  been  prioritized,  it  is  necessary  to  determine  the 
amount  of  team  resources  available  to  process  top  priority 
objects.  The  decisionmaker  allocates  a  great  amount  of 
lime  to  the  situation  assessment  function,  leaving  it  to 
process  a  target,  redistribute  resources,  or  respond  to  a 
request  from  Hs  partner,  and  then  reluming.  Therefore, 
there  arc  no  commands  required  to  access  information 
required  for  situation  assessment,  and  this  information  is 
displayed  continuously. 

The  command  execution  area  is  where  the  remaining 
major  operator  functions  (i-c-.  process  a  target,  redistribute 
resources,  and  acknowledge  request)  are  accomplished.  The 
command  buttons  directly  correspond  to  the  subfunctions  of 
these  three  top  level  functions.  The  information  required  to 
accomplish  these  subfunctions  are  displayed  os  needed  in 
both  the  attribute  information  area  and  the  command 
execution  area.  The  commands  to  accomplish  subfunctions 
adapt  to  the  system  state,  for  example,  if  a  procedure  will 
not  yield  new  information,  it  is  not  presented  as  an  option. 
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Figure  2.  An  Overview  of  the  OFM-Based  Interface. 


EVALUATION  OFTHE  OPERATOR  FUNCTION 
MODEL  BASED  INTERFACE 

An  experiment  was  conducted  to  evaluate  the  OFM- 
based  interface  whose  design  was  guided  by  a  model  of  the 
the  DDD  team  members*  functions.  We  were  Interested  in 
testing  the  hypothesis  that  the  operator  function  model  can 
be  used  os  a  design  tool  to  produce  on  interface  that  causes 
a  reduction  :n  workload  and  an  improvement  in  team 
performance.  To  evaluate  the  operator  function  model 
interface  design  approach,  the  CFM-based  interface  was 
compared  to  a  baseline  interface  developed  using  a  typical 


376 


jirftja  approach  ia  «fsi  c&eaaeo  zsjccsnoi 

rlrrtor.:s  (a  6a  ewe  xflsocssg  cJyca)  s 
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li  *o=3d  fcc.dif5c u5s  to  test  cc:  experiment!  hypnic- 
ta  ss^y  fcycunpxri-g  Use  CrM-bztod  cd  tie  fcsc&e  I 
h&rtlxrs.  exc  6rc  ere  easy  &c^aao  bebta  6oe 
i»o  berfira  ia  addrtio a  to  their  cfclycj  toija 
s^rsato-  Oar  set  of  Kiyra  «t  run  ia  1935  ca  tic 
fcaeJa:  I  isdice;  rwier  tdjot  pool  »a  t#td  to  tost 
tie  OFM-fewcd  iarcrfzce  ia  1937.  Tie  cserftaj  were 
xnpJemrosed  ca  dHTercns  hardware.  Tat  fcoelae  1  rsdxr 
*3  c^eaayJ  ca  a  PDP-1.J63  ccmpctor.  the  OFM-b«cd 
carrfzre  ea  a  nrawede  of  SUN-3/I60C  wcrksmicas.  The 
SUN  3/160C  has  masy  fcatores  not  available  ca  tic  PD?- 
11/60,  iacl udmg  cere  memory.  multiprocessing  capabil¬ 
ities.  high  rescjmica  graphics,  color,  overlapping  win¬ 
dows,  and  mouse  iupeL 

Ia  23  effort  to  jrparato  the  effects  of  external  factors 
(Le^  subjects.  time.  hxdwzzc.  zad  software)  from  the 
dependent  vanable  cf  mtoresi  (Lc^,  the  uoderI>x:g  intorface 
dess ga  approach).  two  intormediaie  i ziufzxs  were  devel¬ 
oped  2nd  evaluated.  The  first  of  the  new  interfaces,  the 
baseline  H  interface.  replicated  the  baseline  I  interface  oa 
the  SUN  system.  A  few  cjyages  were  rude  to  simplify  the 
programming  of  the  baseline  II  displays,  for  example  one 
terminal  radscr  then  two  was  used;  instea d  of  a  radar  scope,  a 
linear  display  was  implemented  to  show  the  location  of 
incoming  objects;  and  object  data  items  were  arranged  in 
columns  rather  than  rows.  The  second .  intermediate 
interface  incorporated  the  SUN’S  advanced  hardware  and 
software  features  using  human  factors  guidelines  (Smith  and 
M osier.  19S6)  and.  thus,  is  referred  to  as  the  "human 
factors”  interface.  The.  information  content  and  the 
command  structure  of  the  human  factors  display  is  that  of 
the  baseline  displays,  however  data  format  and  layout  are 
enhanced  (e.g..  using  graphics  and  color)  and  a  new 
command  input  device  (i.e..  mouse)  is  employed.  The 
most  salient  differences  between  interfaces  are  summarized 
in  Table  1. 


QXBALHYPOTHHSSS 

Moving  from  the  btseEsc  interfaces  to  the  hernia 
factors  rsrrfarc  and  tie  OrM-ind  interface,  a  axetew 
increase  n  team  performance  was  expected  to  occur '  The 
baseline  I  2nd  baseline  S  jgefrea  are  fcaraesUy  the  same 
r/rrfrees  cpitmrad  ca  two  dfiost  ccmpcter  system*. 
Tfy  frrt  hredmww  fat  w  vwM  he  ford 

betw-m  the  bwe?re  f  mi  brrtre  II  rTcficw.  " 

The  human  factors  interface  iacrxporatos  modem  hard¬ 
ware,  a  sew  in^cx  device  (Lc,  mouse),  and  software 
advancement.*  hxjudzi  color  coding,  shape  coding,  and 
dynamic  fees  ia  occcrdzsce  w*h  human  factors  gmdeli-cs. 
The  ctost  of  the  human  factors  interface  design  was  to 
enhance  the  dam  format  and  simplify  the,  manual  reqmrc- 
osusjc?  command  execra-on.  Tre  second  hvrethest*  wav 
fat  g_orr?tog^  Ae  tralfaE.11  g H  fan-CT  fwr*  trrer- 
ftoTS.  laaiaigaa  cr-barorrtf-«*  world  lead  to  r^rroved 
tVxTtnessV-eayrres  and  wcuM  cause  workload  to  decrease. 

The  OFM-bzsed  interface  incorporates  the  data 
enhancement  techniques  of'tbe  human  factors  interface,  bet 
these  principles  were  applied  after  new  data  and  command 
procedures  had  been  generated.  Display  content  and  systom 
commands  were  developed  based  upon  a  model  of  operator 
functions  in  the  system.  Higher  level  commands  were 
defined  that  mapped  directly  to  major  fmetioas  rad  sub¬ 
functions;  the  steps  required  to  accomplish  commands  were 
designed  to  adapt  to  the  current  state  of  the  system.  In 
addition  to  the  information  content  of  displays,  when 
information  appears  and  where  it  is  placed  were  also  guided 
by  the  DDD  operator  function  modeL  These  two  features  of 
the  OFM -based  interface  were  expected  to  lead  to  improved 
timeliness  measures  and  improved  performance  along  the 
accuracy  dimension.  It  was  also  expected  that  coordination 
would  improve,  since  the  OFM-based  interface  was  designed 
to.  keep  track  of  whit  information  has  and  has  not  been 
transferred,  and  the  display's  information  content  helps 
each  decisionmaker  anticipate  support  required  by  his 
p&rtner.  A. significant  decrease  in  workload  was  not 
expected.  At  first  glance  it  appears  that  the  features  of  the 
model-based  interface  would  promote  a  workload  decrement 
-  commands  better  map  to  operator  intent,  data  is  aggre¬ 
gated,  and  information  content  is  adaptive.  However,  the 
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DDD  operator  fisxriw  Bcdd  b&a;fd  tin  there  was 
£efrT~?rvr:  reared  by  the  tees  tbit  was  sot  displayed  fey 
tie  kttcSat  i^direj.  Tbs  teas  wsj  tie  CrJ!-hod 
kzgUcc  h 2d  sore  Tf!fyrt  cfcrtaaricn  available  for  we. 
which  was  expected  to  c ssterxet  tic  workload  deereaesL 
In  tr-rTrv.  the  third  *»  tv«  h  a  or-^rttn 

bc»cCT  Ox  team  fw»CT  gd  OFM-Mvrf  feicrfatc.  ft. 
OFM-«mtj  Hfrfrec  -"mM  k-td  i?  ;— -m-ri  tWfow. 
3“--^rv.  r-d  cresrrp  an  T-crcare  in 

m’ff'ctad  level. 


EXPERIMENTAL  DESIGN' 

SUBJECTS 

Four  two-member  teams  participated  in  tie  experiment. 
Subjects  were  gradm-to  and  undergraduate  students  from  the 
University  of  Connecticut.  Each  team  used  all  three 
interfaces,  ix^  baseline  II.  human  factors,  and  OFM-based. 
As  mentioned  previously,  performance  dau  for  the  baseline 
I  condition  was  obtained  in  an  earlier  experiment. 


PROCEDURE 

Subjctts  received  an  average  of  15  hours  training  to 
learn  the  game  usingAeir  first  interface.  Teams  required  an 
average  of  5  hours  to  learn, to' use  subsequent  interfaces. 
Subjects  were  trained  until  1)  they  were  above  a  specified 
minimum  performance  level.  2)  performance  appeared  to 
have  stabilized,  and  3)  team  members  fell  confident  in  their 
understanding  of  the  interface.  There  were  a  total  of  four 
interfaces  evaluated  in  this  experiment  (one  of  which  is  not 
discussed  in  this  paper),  and  each  team  was  presented  a  ran- 
domtzed  sequence  of  the  four  interfaces  to  prt  ml  order 
effects. 

Like  the  DDD  subjects  who  used  the  baseline  I  inter* 
face  in  1985,  these  subjects  were  paid  an  hourly  rate  for 
their  participation  and  a  cash  bonus  based  on  their  average 
score.  After  each  session,  subjects  received  feedback  on 
team  performance. 


INDEPENDENT  VARIABLES" 

The  main  independent  variable  of  interest  was,  of 
course.  Interface.  The  interfaces  were  run  across  a  variety 
of  scenarios  in  which  the  External  Lead  on  the  team  mem¬ 
bers  (i.e.,  tempo  of.  incoming  objects  and  scareity  of 
resources)  and  the  Overlap  of  abilities  and  information  were 
manipulated.  This  was  done  to  find  global,  rather  than 
scenario  specific,  interface  effects.  The  two-way  and  three- 
way  effects  will  be  described  in  a  subsequent,  paper  (Saisi 
and  Scrfaty,  1988). 


DEPENDENT  VARIABLES 

la  the  preliminary  dau  analysis  fire  dependent 
variables  were  examined..  The  first  cf  these  was  aa  overall 
system  performance  measure  called  Final  Strength.  Kail 
Strength  takes  into  account  the  number  of  Ureas  marked, 
the  values  cf  threats,  the  timeliness  of  the  art  ark,  and  the 
accuracy  cf  assigning  resources.  Two  cf  the  contributor  cl 
Kaal  SEr«^hjue. Accuracy  and  Tlutelisess  which  were 
examined  separately.  The  Commusiearioa  Rato  was  also  a 
dependent  measure  of  interest,  as  well  as  a  subjective 
measure  of  team  Workload,  the  Subjective  Workload 
Assessment  Technique  or  SWAT  (Reid.  Shingledecker.  and 
Eggemcir,  1981). 


PRELIMINARY  RESULTS 

This  section  presents  a  sample  of  preliminary  results 
available  at  this  rime.  A  complete  set  of  results  will  be 
available  in  Saisi  and  Scrfaty  (1988). 

Most,  but  not  all  hypotheses  were  supported.  The 
baseline  I  and  the  baseline  II  interfaces  (Table  1)  were 
compared  on  performance  measures,  i.e..  Final  Strength. 
Timeliness,  and  Accuracy,  and  on  the  process  measure. 
Ccmmunicarion  Rate,  but  have  yet  to  be  compared  on  the 
Workload  dimension.  No  significant  differences  were  found 
between  these  two  interfaces. 

Next  the  baseline  II.  human  factors,  and  OFM-based 
interfaces  were  experimentally  compared.  The  expected 
improvement  on  the  Final  Strength  measure  resulted 
(Figure  3).  When  teams  used  the  OFM-based  interface, 
they  maintained  a  higher  level  of  overall  system  per¬ 
formance  than  with  Ac  human  factors  interface,  and  the 
human  factors  interface  led  to  improved  system  performance 
over  the  baseline  II  interface. 

As  expected  there  was  a  significant  improvement  in 
Timeliness  for  Ac  human  factors  interface  over  Ae  baseline 
II  interface.  The  OFM-based  interface  equalled,  but  did  not 
surpass  Ae  Timeliness  improvements  of  the  human  factors 
interface  (Figure  4). 

In  addition  to  improving  on  timeliness  over  the 
baseline  II  interface,  Ae  OFM-based  interface  led  to  a 
significant  Accuracy  improvement.  The  human  factors 
interface,  on  the  other  hand,  did  not  contribute  to  an 
increased  Accuracy  score  over  the  baseline  II  interface 
(Figure  5). 

As  far  as  Communication  Rale,  there  was  a  great 
increase  n  rate  moving  from  Ae  baseline  II  interface  to  Ae 
human  factors  interface  and,  Acn  again,  from  Ae  human 
factors  interface  to  the  OFM-based  interface  (Figure  6). 
Comparing  Ae  elements  of  Conjnunication  Rate,  it  can  be 
seen  Aat  Ae  in  Ae  increase  in  Ae  human  factors  case  is 
due  to  a  high  transfer  rate  of  intended  actions  (Ais  capabil¬ 
ity  was  not  explicitly  available  in  Ac  baseline  II  interface. 
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TEAM  WAl  ST  HC  NOTH  (*) 


i!d»c|h  ibs  isforeudoa  t/cafa  chcs!  aiy  hr  cca 
ttcd  to  express  fatod cd  actions).  Cospsrfaj  tfu  .1- 
*>“«*  to  to  fcaxa  Isdxt  iaarfu*.  we  ice  to  to  xtxa 
uufer  txtc  it  tdd'cossiis.  hex  the  fafors2iica  ixzexfcr 
ice  it  pciOy  toeied.  WJSfa  x3  three  uucrfeees.  she 
resosree  trratfer  it  toe  as  a  Jow  and  ejal  iso. 

SKpritiajIy  there  wit  sot  a  lean  Workload 
between  the  h unran  factors  and  baseline  II  rr.lcrfrrc.  ha 
toe  was  a  sijnificaa  d-op  in  Workload  in  the  OFM-based 
fcaerface  condition  (figtse  7). 


Kgae  7.  The  Effect  of  Interface  on  Workload. 


aeraraeyjaassijniajresoscecs.  The  first  is  the  aenber  ef 
aKrilane  caeastncs  collected  fa  a  threat.  A  Robe  per  Threat 
peasnre  was  taken  that  indicates  that  no  more  probes  (i. 
ntfonaatron  Stapled  tan  the  environaent)  »ere  sent  ost 
in  the  OEM-based  condition.  Ho  a  ever,  it  is  shoan  front 
(tounenteatioa  Rare  that  in  this  condition  more  attribute 
nrearores  were  collected  throe  jh  cccnscsirathtg  with  one's 
pator.  The  second  ccnnibcior  to  Accuracy  in  resource 
assjjrcnntt  “  bo*  well  the  altribae  es! derates  are  coa. 
bmed  The  OFM-based  interface  is  desifned  to  aid  the 
opatttK  fa  wdgKnj  the  esiinuies  opi-nally.  The  third 
oonen:  of  Accuracy  is  the  tnappfay  from  threat  attrifcates 
to  to  resources  rerpired  for  anackfaj  the  threat.  The  deei- 
sronaakers  have  a  decision  support  system  (DSS)  to  aid 
t-.en  with  to  mapping.  Since  this  system  is  free  to  use 
(costs  no  resources  or  time)  to  OFM-based  interface  aato- 
totally  presenu  to  DSS  results  just  before  to  deersior- 
rrrtxer  assrprs  resources.  The  elements  of  Accuracy  will  he 
exammed  separately  in  to  next  phase  of  data  analysis. 


-  - - »"*'**'  *.**.4  uvuojcs  «om  ujc  oasC- 

line  II  to  the  human  factors  conditions.  This  is  probably 
due  to  the  simplified  manual  requirements  of  the  hum2n  fac¬ 
tors  interface  as  well  as  the  new  ability  to  transfer  intended 
actions  explicitly.  In  moving  to  the  OFM-based  interface 
there  was  another  leap  in  Communication  Rate.  The  OFM- 
based  interface  was  designed  to  promote  an  increased 
awareness  of  the  partner's  needs.  The  higher  information 
exchange  rate  may  be  due  to  team  members  having  more 
accurate  mutual  internal  models  and  therefore  being  able  to 
better  anticipate  and  respond  to  one  anothers  need  for 
information. 


DISCUSSION 

The  ODD  paradigm  has  been  used  as  an  experimental 
testbed  for  the  past  three  years  to  study  issues  in  distributed 
tactical  command  and  control.  During  this  time,  it  has 
been  found  that  the  Final  Strength  measure  is  quite  inflexi¬ 
ble,  that  is  not  easily  influenced  by  system  manipulations. 
The  improvement  in  system  performance  through  interface 
design  is  a  powerful  result  fox  two  reasons.  First,  we  have 
uncovered  a  variable  having  a  large  effect  on  system  per¬ 
formance  even  at  the  global  level,  and.  second,  this  is  an 
internal  variable  that  is  under  the  system  designer’s  con¬ 
trol  Velocity  of  incoming  objects  is  an  example  of  a 
variable  that  influences  overall  system  performance  but  is 
external,  i  e.,  not  controllable  by  a  system  designer. 

The  Final  Strength  can  be  broken  into  a  number  of 
components,  two  of  these  being  Timeliness  and  Accuracy. 
A  somewhat^  surprising,  result  was  that  Timeliness  in  the 
OFM-based  interface  condition  was  not  better  than  within 
the  human  factors  condition.  The  possibility  will  be 
explored  that  a  ceiling  effect  was  present.  In  could  be  the 
case  that  to  receive  the  minimally  required  information  on 
the  objects  (i  e..  identity),  a  mean  Timeliness  score  of  96 
percent  is  the  highest  that  could  be  realized. 

Accuracy  is  comparable  between  the  baseline  II  and 
human  factors  interface,  and  much  higher  for  the  OFM- 
based  interface  There  arc  a  number  of  contributors  to  the 


One  of  the  most  interesting  results  was  the  effect  of 
Interface  on  Workload.  The  human  factors  and  baseline  U 
21  if6*?  WfIC  Pcrccivc<J  producing  the  same  level  of 
Workload.  The  application  of  human  factors  princip’es  to 
an  existing  display,  without  altering  inform*, on  content 
or  command  procedures  is  a  common  approach  to  interface 
design.  Although  the  human  factors  interface  was  more 
viSuaHy  pleasing  (e.g..  having  color  and  shape  coding)  and 
allowed  the  operator  to  react  more  quickly  (,  e.,  with  mouse 
input),  the  cognitive  task  requirements  were  virtually  the 
same,  which  may  account  for  the  lack  of  a  workloid  decre¬ 
ment  On  the  other  hand,  the  OFM-based  interface  did  not 
merely  enhance  the  format  of  existing  data,  but  used  a 
model  of  the  operators  functions  in  the  system  to  generate 
relevant  information.  This  interface  ltd  to  a  significant 
decrease  m  subjective  team  workload. 


CONCLUSION 

An  operator  function  model  was  developed  for  the  DDD 
paradigm  to  represent  the  team  decisionmaking  process  m  a 
tactical  command  and  control  environment.  This  model 
was  used  as  an  interface  design  tool  to  create  an  interface  m 
which  the  content  of  displays  and  the  command  structure 
support  team  decisionmaking  in  the  system.  Decision¬ 
makers  arc  supported  in  two  ways.  First,  information  :$ 
presented  only  when  needed  and  is  aggregated  to  the 
required  level  of  detail.  Second,  commands  map  to  the  high 
level  operator  intent.  Given  system  state,  the  interface 
leads  the  human  operator  through  the  sequence  of  actions 
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list  will  most  efficiently  accomplish  t he  imcndcdrgeaL 
This  aEcvi-ics  t he  operator  from  dettrmimng  tic  required 
Is**  level  steps  tad  swinging  together  elernemary  consol 
eetiens. 

Prr’iminary  riau  analysis  shews  that  teams  using  the 
model-based  imerfaee  comm  erica  red  core,  performed  tasks 
mere  quickly  2nd  accuracy.  2nd  perceived  workload  to  be 
lower.  The  operewr  function  model  proved  to  be  2  valuable 
tool  for  the  design  of  2n  it-erface  that  produced  2  high 
level  of  system  performance  without  overloading  the 
operator. 
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ABSTRACT 

The  current  explanations  of  expert 
system  reasoning  are  often  incoherent  or 
ambiguous.  One  problem  ns  that 
explanation  components  fail  to  explicitly 
represent  the  linguistic  knowledge 
necessary  to  adequately  construct  and 
present  multisemential  texts.  A  theory  of 
the  rhetoric  of  explanative  texts  is  presented 
together  with  explicit  rhetorical  grammars 
and  their  semantic  mappings  onto  backend 
knowledge  formalisms. 


INTRODUCTION 

With  the  increasing  complexity  of  expert 
systems  -  significant  components  of  C3I 
applications  -  comes  an  increasing  need  for 
coherent  and  cogent  explanation  of 
reasoning.  Explanation  facilities  contribute 
to  both  the  development  and  use  of 
sophisticated  systems  (planners, 
diagnosticians,  etc.).  During  development, 
explanation  serves  as  a  debugging  aid. 
Also,  explanation  facilities  augment  system 
flexibility  by  supporting  not  only  problem 
solving  but  also  instructional  tasks.  From 
the  user's  perspective,  justification  of 
reasoning  promotes  confidence.  Finally, 
investigation  of  explanation  can  provide  an 
empirical  test  of  cognitive  theories  of 
knowledge. 

This  research  is  aimed  at  the  design  and 
development  of  a  computational  model  of 
textual  prcsentations.of  explanation  for  the 
Air  Foice  mission  planning  system,  KRS 


tuawson  et.  al„  1987],  Justifying  KRS' 
plans  requires  manipulation  of  both  domain 
knowledge,  knowledge  of  the  process  of 
planning,  as  well  as  linguistic  knowledge 
of  natural  language  utterances  and  their 
organization  into  texts.  This  work  builds 
on  a  previous  text  generation  system 
designed  and  implemented  by  the  author 
[Maybury,  1987, 1988).  The  major  issues 
mvesugated  by  this  work  are: 


•  Conceptual  models  of  the  task 


•  Linguistic  knowledge  of  rhetorical 
techniques  (e.g.  discourse  strategies) 

•  Expertise  level  of  hearer  (exoert,  student, 

novice  -  an  expertise  continuum) 

•  Attitude  of  hearer  toward  topic 

(attentive,  indifferent,  disinterested) 

•  Speaker’s  altitude  toward  topic 

(attentive,  indifferent,  disinterested) 


These  knowledge  sources  should  have 
several  effects  on  the  text  produced  the 
natural  language  generator  including: 

•  molding  perspective  of  description  or 
explanation  (e.g.  componential  vs. 
evidential  justification) 

•  limiting  completeness  of  explanation 

•  need  to  sell,  interest  reader  (illustrate  why 
explanation  important  -  subtlety) 

•  length,  verbosity,  lexical  choice 
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tests  and  observations 


Figure  1:  Relevant  Portion  of  the  Knowledge  Base 


EXPLANATION  RHETOR  TP 

Previous  explanation  systems  have 
primarily  achieved  textual  coherence  from 
the  actual  underlying  plan,  rule  chain,  or 
procedure  (e.g.  [Appelt,  1985]).  In 
contrast,  the  approach  presented  here  is  to 
expand  on  previous  work  on  discourse 
strategies  [McKeown,  1985]  and  develop 
an  explanation  rhetoric  (ER)  which 
provides  textual  coherence.  ER  are 
strategies  that  humans  employ  to  describe 
or  justify  their  reasoning.  The  impetus  of 
this  approach  is  work  in  text  generation  for 
presentation  of  the  diagnostic  results  of 
frame  based  expert  systems  [Maybury, 


1987,  1988].  For  example  in  response  to 
the  query,  Why  did  you  diagnose 
Korsakoff's  disorder?,  typed  in  the 
functional  notation  (explain  Korsakoff s), 
the  generator,  GENNY,  highlights  relevant 
portions  of  the  knowledge  base,  as  in 
figure  1  above.  Then  the  system  generates 
a  pool  of  relevant  rhetorical  propositions 
(possible  utterances)  by  instantiation  with 
information  from  the  knowledge  base.  The 
propositions  are  organized  using  rhetorical 
schema  representing  common  explanation 
strategies  (a  local  focus  algorithm  controls 
topic  shift)  and  then  realized  with  a  phrase 
structure  grammar,  lexicon  and 
morphological  synthesizer: 
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Why  did  you  diagnose  Korsakoff's 
disorder? 

(explain  Korsakoffs) 
reason 

evidence  / 

cause-effect 

attributive 

attributive 

Korsakoffs  disorder  is  manifest  because  a 
memory-iq  observation  and  an  apathetic  observation 
indicate  damage.  The  memory-iq  observation  has  a 
likelihood  value  of  nine.  The  apathetic  observation 
has  a  likelihood  value  of  ten. 


Current  research  in  the  presentation  of 
reasoning  in  a  tactical  mission  planner, 
KRS,  is  leading  to  a  more  explicit  and 
detailed  formulation  of  explanation  rhetoric. 
In  the  following  example,  the  user  has 
selected  the  incorrect  aircraft  for  this 
mission  and  the  expert  system  has  to 
express  that  to  encourage  the  user  to 
recover  from  the  error.  The  planner's 
underlying  justification  is  presented  in 
figure  2. 


Replacing  this  directly  using  a  pattern 
matcher  yields  the  current  explanation 
implementation: 

"By  TARGET-AIRCRAFT-2:  There  is 
a  severe  conflict  between  the  target  and  the 
aircraft  since: 

1.  DATA:  The  target  of  OCA1002  is 
BE50318 

2.  DATA:  PartofBE50318isBE50318- 
SEARCH-RADAR 

3.  INHERITANCE:  BE50318-SEARCH- 
RADAR  is  active 

4.  DATA:  The  aircraft  of  OCA1002  is  F- 
1 1 1 E  and  F-l  1  IE  is  not  a  F-4G." 

One  suggested  output  (Meteer  and 
McDonald,  1988)  is:  The  target  has  an 
active  search  radar,  but  the  mission  aircraft 
are  F-l HEs  rather  than  F-4Gs.  This  might 
indeed  be  sufficient  for  a  mission  planning 
expen  end  user. 

A  different  strategy  would  exploit  all  of 
the  relevant  knowledge,  organizing  this 
with  rhetorical  models  of  explanation 
strategies  (e.g.  explanation  -->  justification 
+  evidence).  Once  again,  the  primitive 
messages  (e.g.  componential,  justification) 
are  selected  using  a  focus  algorithm  which 
controls  the  attentional  shifts  in  the  text  to 
ensure  proper  coherence. 


(target-aircraft-2 

(data  (target  OCA  1002  BE503 1 8)) 

(data 

(powa  BE50318  BE503 1 8-SEARC1 1-RAD AR)) 

(inheritance 

(is-a  BE503 1 8-SEARCII-R ADAR 

ELECTRONICS)) 

(data 

(aircraft  OCA1002  F-l  HE) 

((NOTEQ  F-l  1  IE  ’F-4G)))) 

I  where:  OCA  -  offensive  counter  air  mission 


powa  --  part  of  which  are 
BE  -- battle  element 
NOTEQ  --  not  equal _ 


Figure  2:  KRS1  justification  of  an  automatic  planning  failure 


A  proposed  response  to  the  simulated 
query.  Why  was  there  a  conflict  between 
the  target  and  the  aircraft?,  would  be: 

(explain  target:aircraft-2) 

EXPLAN 

justification 

evidence 

componential  justification 
componential  elaboration/attributes 
attributive 

attributive  justification 

The  OCA1002  mission  plan  failed 
because  there  is  a  severe  conflict  between 
the  target  and  the  aircraft.  The  target  has  an 
active  search  radar.  The  aircraft  is  an  F- 
111E  instead  of  an  P-4G.  An  F-111E  can 
only  block  radar  but  an  F-4G  can  destroy 
it. 

or 

componential  justification 
componential  elaboration/attributes 
definition 

definition  (juxtaposition) 

The  OCA1002  mission  plan  failed 
because  there  is  a  severe  conflict  between 
the  target  and  the  aircraft.  The  target  has  an 
active  search  radar.  The  aircraft  is  an  F- 
11  IE  which  can  block  radar.  An  F-4G,  on 
the  other  hand,  can  destroy  radar. 


These  explanation  strategies  were 
abstracted  from  explanative  texts  which 
humans  generate.  These  were  formalized 
into  the  explanation  rhetoric  presented  in 
figure  3. 


Explanation  predicates  are  mapped  to  the 
backend  knowledge  formalism  using  a 
range  of  semantic  relationships.  (This 
mapping  could  be  a  non-trivial  task, 
particularly  if  the  system  were  not  based  on 
some  semantically  explicit  model  of 
knowledge,  such  as  frames,  rules,  or  if  the 
knowledge  itself  was  poorly  represented.) 
The  variety  of  the  explanations  will  partially 
depend  in  part  on  the  semantic  richness  of 
the  underlying  expert  system.  The 
explanation  predicates  are: 


Explanation  predicates 
componential  justification 
evidential  justification 
physical/causal  justification 
classificatoty  justification 
generalization  justification 
associative  justification 
characteristic  justification 
functional  justification 


The  semantic  relationships  which 
correspond  to  these  (in  order)  are: 


Semantic  relationships 
aggregation:  "a  part  of’ 
indication:  "an  indicator  of' 
causation:  "a  cause  of' 
classification/specialization:  "a  kind  of' 
instantiation:  "an  instance  of' 
association:  "a  set  of’ 
attribution:  "a  property  of' 
capability:  "a  capability  of’ 


EXPLAN  =>  justification  +  evidence 

reason  =>  componential  I  evidential  I  physical/causal  I  classificatoty  I 

generalization  I  associative  I  characteristic  I  functional  justification 

evidence  =>  attributive*  I  definition*  I  inference  I  reason 


Figure  3:  Explanation  Rhetoric 
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CONCLUSION 

This  paper  presents  an  approach  to_  the 
presentation  of  expert  system  explanations 
which  are  guided  by  an  explicit  rhetorical 
model  of  justification.  This  approach  is  in 
contrast  to  recent  work  in  explanation 
presentation  which  presents  explanations  as 
a  trace  of  the  causal  links  between  events  in 
the  expert  system  [Paris,  19871.  By  taking 
into  account  the  semantic  relationships,  the 
resultant  text  should  more  clearly  present 
the  justification.  This  is  due  to  the  fact  that 
lexical  and  syntactic  selection,  as  well  as 
the  choice  of  discourse  markers  (e.g. 
"because",  "therefore",  "then")  can  be 
guided  by  the  type  of  rhetorical  predicate 
being  realized.  The  empirical  success  of 
this  approach  is  the  focus  of  current 
research. 
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ABSTRACT 

A  methodology  to  model,  analyze,  and  evaluate  coordination  in 
organizations  with  decision  support  systems  is  presented.  The 
issues  of  inconsistency  of  information  and  synchronization  arc 
emphasized.  Predicate  Transition  Nets  are  used  as  the  basic 
technique  for  representing  organizational  structures  and  for 
characterizing  the  coordination  of  processes.  Protocols  of 
interaction  arc  modeled  by  transitions  for  which  the  rule  of 
enablement  is  that  the  decisionmakers,  when  interacting,  must 
refer  to  the  same  state  of  the  environment.  Two  measures  of 
coordination  are  then  introduced,  information  consistency  and 
synchronization.  These  measures  are  defined  on  the  basis  of  the 
attributes  of  the  tokens  belonging  tc.  the  input  places  of 
transitions  modeling  interactions.  A  recently  developed 
simulation  system  for  Predicate  Transition  Nets  is  used  for 
investigating,  through  an  example,  the  dynamics  of  such 
organizations  and  for  analyzing  how  a  dacision  support  system 
can  alter  the  coordination  in  an  organization. 


INTRODUCTION 

The  decisionmaking  by  organization  members  implementing  the 
command  and  control  process  must  be  coordinated  in  order  to 
improve  their  effectiveness.  Decision  aids,  which  are  part  of  the 
systems,  aim  at  increasing  the  ability  of  decisionmakers  to 
perform  their  mission  effectively.  By  offering  faster  processing 
capabilities  as  well  as  access  to  databases,  they  may  help  the 
organization  members  to  achieve  the  requirements  of  the 
mission.  However,  decision  aids  also  increase  the  possible 
alternatives  among  which  to  choose  in  order  to  process 
information,  and  in  so  doing,  modify  the  nature  of  the 
decisionmakers'  activities.  In  this  context,  it  is  important  to 
evaluate  the  extent  to  which  decision  aids ,  and  more  particularly 
decision  support  systems  (D$S),  can  alter  the  coordination  of 
the  various  decision-making  processes. 

The  framewoik  used  to  address  this  problem  is  the  quantitative 
methodology  (Levis,  1984, 19S8>  fui  the  analysis  and  evaluation 
of  alternative  oigamzauonai  shuctures.  In  ordei  to  provide  some 
insight  on  the  cohesiveness  of  organizations  carrying  out 
well-defined  tasks,  a  mathematical  description  of  coordination  is 
developed  as  u  relates  to  decision-making  processes.  The 
Predicate  Transition  Net  formalism  tGenneh  and  Lautenbach, 
1981>  used  m  this  paper  builds  on  Petn  Net  theory  (Beams, 
i983,>,  but  allows  the  modeling  of  coordination  based  on  the 
attributes  of  symbolic  information  earners  in  the  net.  In  this 


♦This  work  was  carried  out  at  the  MIT  Laboratory  for 
Information  and  Decision  Systems  with  support  provided  by  the 
Office  of  Naval  Research  under  Contract  No. 
N00014-S4-K-0519  (NR  649.* 13). 


model,  when  decisionmakers  interact,  they  must  have  some 
protocol  to  recognize  that  they  arc  exchanging  information 
pertaining  to  the  same  event.  Two  measures  for  evaluating 
coordination  are  introduced,  information  consistency  and 
synchronization.  The  latter  measure  relates  to  the  value  of 
information  when  the  decisionmakers  actually  process  it. 

A  generic  model  of  a  decision-maker  interacting  with  a  DSS  is 
presented.  The  focus  is  on  the  architecture  of  the  system  and  on 
the  different  system  components  that  the  decision-maker  urn 
access.  DSS’s  have  oecomc  an  increasingly  important  part  of  the 
military  Command,  Control  and  Communications  (Gq  systems 
(Waltz  and  Bucde,  1986).  In  this  context,  the  DSS's,  also  called 
battle  management  systems,  automate  the  fusion  of  data 
concerning  the  tactical  situation  and  the  quantitative  evaluation  of 
alternative  courses  of  action. 

Decision  aids  are  defined  as  any  technique  oi  piocedure  that 
restructures  the  methods  by  which  problems  are  analyzed, 
alternatives  developed  and  decisions  taken.  Keen  and  Scott 
Morton  (1978)  emphasize  that  decision  support  systems,  a 
particular  form  of  decision  aids,  have  specific  advantages: 

"0/  the  impact  is  on  de  i  is  ions  in  which  there  is  sufficient 
structure  for  computer  and  analytic  aids  to  be  of  value,  but 
where  decisionmakers  'judgment  is  essential. 

iu)  the  payoff  is  in  extending  the  range  and  capability  of 
decisionmakers’ decision  processes  to  help  them  impiove 
their  effectiveness, 

(ui)  die  relevance  for  decisionmakers  is  the  u  cation  oj  a 
supportive  tool  under  their  own  control,  which  does  noi 
attempt  to  automate  the  decision  process,  predefine 
objectives,  or  impose  solutions," 

Thus,  DSS's  do  not  automate  the  decisionmaking  process,  but 
must  facilitate  it.  When  confronted  with  a  particular  task,  the 
decisionmaker  keeps  the  .hoice  ol  performing  u  by  htmscll  oi 
requesting  information  from  the  DSS.  This  selection  depends  on 
the  reliability  of  the  DSS  or,  more  exactly,  on  the  extent  to 
which  the  organization  members  rely  on  it. 

The  evaluation  of  the  effectiveness  of  a  decisionmaking 
organization  consisting  of  human  decision  makcis  aided  by  a 
DSS  is  a  complex  issue  many  interrelated  lactois  allect  the 
effectiveness  of  the  ovetall  system,  e  g ,  the  limited  luluinunon 
processing  capacities  of  the  decision  makers,  the  haidwaie  and 
software  characteristics  of  the  DSS,  or  the  extent  to  which  the 
organization  members  use  and  rely  on  the  decision  aid.  One 
important  question  to  know  whethei  oi  not  the  oveiaii 
organization,  when  aided  by  the  DSS,  is  more  elective  in 
fulfilling  its  mission. 
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Earlier  work  has  assessed  the  impact  of  preprocessors  (Chyen 
and  Levis,  1985;  Weingaertner  and  Levis,  1987)  and  databases 
(Bejjani  and  Levis,  1985/ on  the  workload  of  the  decision¬ 
makers  However,  it  seems  necessary  to  measure  the  extent  to 
which  the  DSS  can  affect  the  coordination  of  the  various 
decisionmakers  who  use  it.  Indeed,  the  introduction  of  a  DSS  in 
an  organization  can  lead  either  to  an  improvement  or  to  a 
degradation  of  its  cohesiveness,  depending  on  the  functionality 
and  capabilities  of  the  DSS,  as  well  as  on  the  perception  of  and 
access  to  the  DSS  that  the  decisionmakers  have. 

Simulation  of  Predicate  Transition  Nets  is  introduced  to 
investigate  the  dynamics  of  decisionmaking  processes  - 
especially  phenomena  not  captured  by  analytically  tractable 
models,  such  as  the  use  of  different  protocols  by  different 
decisionmakers.  An  example  demonstrates  that  decision  aids  can 
degrade  the  coordination  of  decision-making  organizations  by 
affecting  the  dynamics  of  the  activities  and  by  increasing  the 
number  of  alternatives  for  processing  information. 


PREDICATE  TRANSITION  NET  MODEL 
OF  COORDINATION 

The  organizations  under  consideration  consist  of  groups  of 
decisionmakers  processing  information  originating  from  a  single 
source  and  who  interact  to  produce  a  unique  organizational 
response  for  each  input  that  is  processed.  In  Petri  Nets  terms, 
there  exists  a  source  place,  p^,  and  a  sink  place,  p^.  A  resource 
place.  pJS,  is  introduced  to  model  the  limited  organizational 
resources.  A  transition  tp^  models  the  partitioning  of  the  input 
from  the  single  source  into  inputs  received  by  different 
organization  members  or  C1  system  components.  Furthermore, 
if  seveiul  decisionmakers  piovide  responses  that  must  be  fused 
in  order  to  obtain  the  organizational  response,  this  stage  of 
response  fusion  is  modeled  by  the  transition  t,f  (sec  Figure  1). 


Fig,  1  Petri  Net  of  Interactions  between  a  Decisionmaking 
Organization  and  the  Environment 

The  source  p$q  generates  single  tokens  that  arrive  sequentially 
and  are  marked  with  the  arrival  time.  The  task  is  modeled  by  the 
alphabet  X  =  (X|... ,  xn)  and  a  probability  distribution 
prob(x  *  x,),  denoted  by  prob(x,)  defined  on  X  The  set  of 
subsets  of  X  is  denoted  by  fI(X),  then. 

n‘(X)*n(X)-{0)  0) 

where  0  denotes  the  empty  set. 

A  clock  is  used  to  mark  the  instants  Tc  at  which  the  process  is 
observed.  In  accordance  with  the  formalism  of  Timed  Pern 
Nets,  this  clock  provides  non-negative  rational  numbers. 


Distinguishability  of  Tokens 

The  fundamental  assumption  of  the  model  is  that  a 
decisiorii  raker  can  process  only  one  input  at  a  time  in  any  of  his 
internal  '.tages  it  follows  that  any  other  input  that  is  ready  to  be 
processed  by  the  same  stage  waits  m  memory.  Therefore, 
queues  of  tokens  can  build  m  the  places  of  the  system. 

At  any  internal  stage  of  the  decision-making  process,  a 
decisionmaker  can  discriminate  between  different  items  of 
information  on  the  basis  of  three  character  sties: 

-  the  time  Tn  at  which  the  inputs  that  these  items  of 
information  represent  entered  the  organization. 

-  the  time  at  which  the  item  of  information  entered  the 

internal  stage  where  it  is  currently  located. 

the  class  C  associated  with  any  item  of  information  by 
the  previous  processing  stage. 

The  definition  of  the  attributes  Tn,  Td  and  C  derives  from  the 
following  considerations; 

(i)  Since  inputs  originate  from  a  single  source,  one  at  a  time,  the 
attribute  Tn  corresponds  to  the  time  at  which  the  input 
represented  by  this  token  entered  the  organization. 

(lij  Since  in  stochastic  timed  Pan  Nets,  the  finng  of  any  token 
takes  an  amount  of  time  that  depends  on  the  processing  time 
of  the  corresponding  transition.  One  can  assign  to  any  token 
in  a  place  p  the  time  Tj  at  which  it  entered  this  place. 

(m)  Since  tasks  arc  modeled  by  the  alphabet  X  »  (xj . xn), 

it  is  assumed  that  each  place  p  is  associated  with  a 
partitioning  D(p)  of  this  alphabet.  The  number  of  elements 
of  this  partitioning  is  denoted  by  e(p>.  This  partitioning  is 
such  that  D(p)  =  (D(p,l),.  ,  D(p,e(p;)J  where  D(p,i) 
denotes  an  element  of  II  (X) .  Thus,  the  third  attnbutc  C 
of  each  token  belongs  to  a  certain  partitioning  D(p)  of  X , 
this  partitioning  depending  on  the  place  p  where  the  token  is 
located. 

The  different  resources  that  the  organization  has  are  assumed  to 
be  indistinguishable;  this  might  not  be  the  case  when 
organizational  resources  arc  allocated  to  different  inputs  m 
accordance  with  some  doctrine.  In  the  same  way,  the  resources 
that  represent  the  decisionmakers'  processing  capacities  are  not 
distinguishable.  Consequently,  »hree  types  of  places  are  defined: 
Memory  places  carry  information  internally  processed  by  each 
decisionmaker,  structural  places  carry  information  exchanged 
between  a  decisionmaker  and  the  environment  or  other 
organization  members;  and  resource  places  that  model  the 
limitation  of  resources  that  constrains  th*  processing  of 
information  by  individual  DMs.  Memory  and  structural  places 
contain  tokens  that  have  an  identity  since  they  m^Jel  inlurmation 
carriers,  while  resource  places  contain  tokens  with  no  identity 

Each  place  is  associated  with  one  of  the  vanables  %  or  $  The 
variable  x  takes  its  values  in  the  set  X  where  each  element  of  X 
is  a  color  represented  by  (Tn,  T<j,  C)  A  token  with  an  identity  is 
an  individual  that  is  assigned  a  color.  All  the  tokens  with  no 
identity  are  denoted  by  the  color  0.  The  variable  Q  takes  its 
values  in  the  set  <t>  such  that  {0}. 

The  marking  of  PN  is  defined  as  follows-  For  each  place  p, 
M(p)  assigns  to  each  value  of  the  variable  associated  with  p  a 
non-negative  integer  number  which  represents  the  number  of 
tokens  in  the  place  that  have  the  corresponding  color  If  m 
designates  a  certain  color,  M(p)[m]  will  denote  this  number 
Since  each  color  m  corresponds  to  a  triplet  (Tn>  T^,  C),  this 
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fa&s csss 

d  2  fSOTK  pb^.  tic  SCisS  C23  fcpt  <X.J  tbr  COuX  f  2=5 

MfcJM  <33  hr  decccrd  s==5iy  by  3!<fp)- 
ThfoScwi^ag^(I^2)Eb^6xd^a^ 


In  this  example.  the  following  rchticcs  bold: 

-  mjeX^eX, 

-  M(pj)[aj)  =*2;  Vxa  €  X-{o,).M(p,>:o)  =  0. 

-  MlfcXmj] = 1;  M(P2X=«J * I; 

V  m  €  X-Jra,.  cm}.  Mf^zX®}  =  0. 

-  M(P3)  =  3. 

-  V  m  €  X,  M(p4>Ioj]  =  0. 

The  firing  of  a  transition  t  is  charaGenced  by  &c  foUowng: 

-  if  p'  is  a  resource  place,  ra'  is  the  color  C. 

-  if  p  and  p*  arc  memory  or  structural  places,  m  2nd  ra* 
arc  elements  of  X. 

The  attribute  T„  characterizes  one  2nd  only  one  inpet  since  tbr 
source  generates  one  input  at  a  time.  Furthermore,  two 
representatives  of  the  same  input  cannot  stand  in  the  same  place. 
Indeed,  the  net  is  an  Marked  Graph  and.  so.  each  place  has  only 
one  input  transition  which  produces  in  each  of  its  output  places 
only  one  token  per  firing. 

Proposition  I:  A  place  cannot  contain  two  tokens  which  base 
the  same  attribute  Tn. 

Protocols  of  Interaction 

One  most  recall  that  the  set  of  input  places  of  any  transition  t  can 
contain  a  resource  place.  The  rule  according  to  which  the 
resource  place  must  contain  at  least  a  token  in  order  for  t  to  be 
enabled  will  apply.  However,  since  resource  places  do  not 
constrain  the  rule  of  enablement  of  a  transition,  but  by  requiring 
the  presence  of  a  token,  the  discussion  on  enablement  that 
follows  focuses  on  structural  and  memory  places.  The  Petri  Net 
mode!  of  transitions  where  fusion  of  data  is  done  is  shown  in 
Figure  3. 

When  the  fusion  cf  data  is  performed  by  a  decisionmaker,  only 
one  of  ike  places  pi,...,  p,  is  a  memory  place.  We  denote  u  by 
Pfc  Any  rule  of  enablement  can  be  introduced  at  this  point  Let 
M  denotethe  marking  of  the  net.  Then,  two  possible  rules  are. 


?1 


Hg.  3  Tern  Scz  Ma&J  of  bzrr^rSoa  Fzs&a  c£  Pga 

RdeI:UtfcaI*feiifrd(nVif  a3iaepsphe»cse» 
a  safest  Wsh  dhr  pm-,  w&r  cf  tSa  arr  Shcasl), 

Rrfc!  rueacschaaibr  carrico  tuiseesifed  if  zrxi  cebr  if  a3 
tbep&cetcekzycssctcxxzzasSJssaarczcescscrtiMcCiZc 
srx  rapes.  This  resets  tea  rie  fad  tin  ssesaccy  aed 
sgrtfr^lp£ajgctrm^<r^ajfgatcftigfr^.T6>Qtype.  zal 
tciraj  ferric*  t2r  srrarsci^T^rierrsfr:  lie  sa=xr 
cp^iTKotbcccgrazr^  serars&s. 

decis5cc^kgsc^r3g.^gysxs;  refer  to  dbc  same  spes. 

Hole  I'L.tseaibusdifadoe.'v  if  rcSe  I  ^fcs  or  there 
dies  a  Kira  b  the  rreewey  pbee  wtariSi  ka  tees  is  is  for 
Dcrctadcriaofcee 

Rule  2  models  the  tzcrsrSocs  where  deexsaoesakesws!  for 
jafocmrxo  from  exher  prtt  of  tie  ct^rrirzrioa  be:  osly  for  3 
cettcarasetcftiee. 

la  this  paper,  a  csssaaoowia  be  crabfedifaadocJyifruScl  is 
verified.  Ia  the  case  of  iemal  trxusirices.  rule  1  is  always 
verified  whea  all  ia  laps:  places  fcn  ;  a  tokca  jbee  tie  preset 
coeaiasocSy  00c  place  that  is  oocaresocree  place.  Itmeaas  that 
the  anribeces  Ta*  of  the  colors  mj.  _  must  fcanr  ibc  same 
Y2I2S. 

Token  Selection 

The  problem  of  token  selection  arises  since  the  tokens  are 
disringtrishabSc.  These  rules  operato  on  the  tokens  of  the  tepsa 
places  that  enable  the  transition  t  Hus  is  illcstnued  by  the 
example  of  figure  4  where  rule  2  of  enablement  applies. 

Scpposethax: 

-  mi  ^nV.Tjl.C1);  m,’ «  CT*1.  TV*  C’) . 

“r-W.Tai.c*). 

-  mj.CWT ftC*  M2»(V.T<?.C«k 

mf  *fro2.T-d2,  C“2). 

Since  the  enabling  condition  is  that  the  tokens  have  the  same 
arrival  time  Tn.  it  follows  that  the  transition  t  is  enabled  by  both 
sets  .flj”)  and  {mj.  my,  m2"}  Therefore,  a  rule 

must  exist  to  decide  which  token  set  will  be  removed  by  the 
next  firing  of  transition  l 

It  is  assumed  that  this  rale  works  as  follows:  it  selects  a  token  in 
a  certain  place  p  of  the  preset  of  transition  t ;  then  the  set  of 
tokens  removed  is  the  one  to  which  the  token  selected  belongs 
Therefore,  before  applying  the  rule,  it  is  necessary  10  decide  in 
which  place  p  the  selection  will  be  done.  One  can  see  on  the 
example  of  Figure  4  that  P|,  pj  and  pj  contain  each  two  tokens 
that  enable  transition  L  Inis  means  that  the  selection  of  the 
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aacna  fiaa.  wi^ie  fcci  ox  fce  dxe.  a  pfiice  ^  <s  puca  ^ 
cc  cCicc  px.  RSmss  caarpe*  aa  fee  ap^si  a&  cheese  £c 
^Ks.tafc»f3?s,i£c<±is^ecf  fiegJ3rs.©Q«SEi3fi£  Bribes 
sefecziag  ss5s  m£t  zpyfe  adcogxsoe^^aasscgtttiMbtyaa 
ra2s  PS&L  £w  cxh  nasjcicQ  i.  j25=a  fis  sane  «f  fie  sjsasea. 
Tics.  Cat  ssiessso  of  a  nsfcsa  m  fiss  pSace  drarrrrfjfft  xa 
assbea Tjp.  Tat  fcsjxfedgt  of  fies  accitas  aZoxs  to  ssSks  & 
cccsspctsf^  ciE»  «s  cdcr  pfca.  £a  fie  cacspfc  off^. 
4.  if  £5fc)  sfiese  pj.  tie  »iea  scSecaoa  mar  arcs:  rSKrssseaar 
bc»tca  ^  ic3  cd  oj.  If  a;  a  ssa^asl  fics  02' sad  o>* 
xasxtascs^xsZyf^tt^ajiK&piZti^. 


Fig.  4Tokra  Selccrioo 

Propoiizor.  2:  Tbc  sclaczon  »a  the  piarc  p  of  a  token  among  lie 
tokens  fiat  C2n  be  fired  by  tmesirian  I  dc^rmmes  uniquely  the 
tokens  that  trill  be  fired  in  lie  other  places.  Once  a  token  has 
been  sdeoed  in  the  place  p.  itsasribmcT,,  ©oerespoods  a>  ore 
and  os ly  one  token  in  any  ofier  place  of  the  preset  of  the 
riansmoat. 

Foes'  types  of  rules  of  selection  PS(i)  can  tc  considered: 

0)  rales  that  discriminattwith  respect  to  the  azritwcTo. 

(5)  rales  that  disarming  wun  respect  to  the  anribete  T<j. 

(ni)  rales  that  dlserimmare  with  respect  to  the  aaibctcC 

(iv)  rales  that  combine  different  m’es  of  the  previous  types. 

Some  example  of  possible  rales  are  the  following: 

FIFO:  the  decisionmaker  can  decide  10  process  firs;  the  inputs 
that  entered  the  organization  first.  In  this  case,  the  token 
with  the  lowest  Tn  is  selected. 

LIFO,  the  decisionmaker  decides  to  process  first  the  inputs  that 
entered  the  organization  lasL  Then,  the  token  with  the 
highest  Tn  is  selected. 

LOCAL  FIFO  (LFIFO):  the  decisionmaker  decides  to 
process  first  the  inputs  that  entered  the  internal  stage  where 
they  currently  arc  first.  The  token  with  the  lowest  Td  is 
selected. 

LOCAL  LIFO  (LLIFO):  the  decisionmaker  processes  first 
the  inputs  that  entered  the  internal  stage  where  they 
currently  are  lasL  The  token  with  the  highest  Td  is  selected. 


arr£y:siC  Be  fir. 

fieKjJeszjoaKy. 

MKtD:  d  smera*  posses  cf  sfocrarsoa  trrt  fie  jarxfcrghesa 
pocezy,  Cat  cszzsxxszzksz  «s  d£j  CszsSt  *>  appiX  socae 
szZccC fie  type  w  a>  tn=>  aa  firnram: tsc.  bowses  fie-., 


aiARACTERTZATION  OFCOORDXNAHOX 


Teeftrifc.Tpgi  yawrftigrTnirrCT 
seefioa  Jis  jio*a  a  Kpre  2.  The  draannax  cf  fie 
coxv^rjoo'  foc  xa.iatfxdos  ^.ene;  tie  PmScre 
Tizaica  Net  cruJd  *=tdxrJ  b  fie  prrvicxrs  icmoc.  derives 
ba  fie  ^rfsfiacocf  aa  crier  rrlczxc  00  fie  sea  of  tokens  fired 
bressSstja.  Talb^i:»nlrnartifrfrr^ 

Vj «  a  fccsry  rrJadcb  drfaed  by : 

((x.y.z)*,  <x\  /.  z)  )»<(*=*)  acd(r  e  V»  (2) 

^tfaferyr^Doo&fced^r: 

((x.y.x)V2(*'.y.ar>)»  C(x=x>aad(z=z,)(5) 

VjbaKa^.'dzawfdbggff: 

{(x.y.z)¥3  (x‘.y\2*))  ~  ( ( <x. y. 2) *F,  Of.y.zT)) 

and  (  (x.  y.  z)  V,  (x\  y",  z*)  )  ) 
(4) 

The  relation  ¥3  defines  an  order  rexaxiOQ  on  the  set  X.  Let 
0,.  _  denoce  ibe  elements  of  X  uiaA  represent  the  colors 
of  the  r  tokens  removed  from  places  pj.  — .  pP  respectively,  by 
transition  t^.  let  oc  denxes  the  color  of  the  token  remov  ed 
from  the  memory  place  p*.  Furthermore,  each  color  m, 
corresponds  to  some  triplet  (Ta\  Tj*.  O). 

The  fixing  of  t^  i>  synchronized  if,  and  only  if: 

Vi  e  (!.—.>)  (5) 

This  definition  allows  to  discriminate  between  firings  that  are 
synchronized  and  firings  m  which  one  or  several  tokens  m, 
arrive  in  their  respective  places  later  than  n>£  in  p^. 

The  finng  of  is  consistent  if.  and  only  if: 

V  (i,  j)  e  (1. —  r)  x  1 1 . 1),  ( T1..  T^.  C”)  (T1..  T^.  o’) 

(6) 

»Xr^  the  daa  fused  by  DMj,  art  consistent,  rf  they  vonespona  iu 
the  same  class  C.  On  this  basis,  the  following  dc»>>iition  foi  the 
coordination  of  an  interaction  is  obtained: 

The  firing  of  i,ftl  is  coordinated  if,  and  only  if,  it  ,s 
synchronized  and  consistent. 

It  is  possible  now  to  characterize  a  coordinated  transition  firing 
by  the  order  of  arrival  of  the  tokens  in  the  places  of  its  preset. 

Proposition  3.  When  the  finng  of  mj . mf  by  ilfl,  is 
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f^r.r^^ni^yja^xcsattfcg!^ 

(aj__  rr^}  fix  wtxfa  cfc.  tie  Mica  cf  the  rascey  pJsc.  is 
fe  tanyjc  psasg  cSsas*. 


<>® 

*.  r- 


TtcrfrfrfriOQcfcrnKflrxxTizg^gsro^ 

defsaiabcs  of  &c  cocwSaaoa  of  2  ss*Ss  tsk,  Le^  for  Jt 

scqacats  of  tsssastMQS  coccenssg  ibc  same  cpct,  ss  *t3  2s 

fie23t^oecs3s!r;sf<^m. 

Tbs  ocscsaoa  of  a  task  is  coordinated  if.  sad  ccly  if,  his 
eax£ax^(^£lhssx6ocisisaocard~*C3Ctx^. 

Tbt  cxccraoa  of  a  Feiri  Nrt  PN  is  coordinated  if,  and 
rxiy  if,  x:  ts  cocefecsd  for  23  tbc  usks  perfbracdL 


XNFOXZ3  IATT  ON  CONSISTENCY 

Gr.ra  2a  infcxsxaoa  sttgc.  ig,  dcxccs  the  casxcocd  traacooa 
star  raodds  tins  C2ge  u  tbs  ?csi  Net  rrpecscsiitxa.  as  shoe's 
xa  Fipr"  3  A.  cadi  czasmoa  1^3..  the  decisionmaker  DM* 
msockms  2  class  C*  with  each  icpc:  X£  tic;  class  is  deocced  by 
C^Xj,  ijx)  zsd  bclocgs  tc  Ufa^X.  a  paniboa  of  the  alphabet  X. 
tbs  tie  designer  defines  a  priori. 


This  oasss  vanes  between  0  and  1,  w«h  1  ber»£  tbc  ideal 
tdccnrxn  cacKWcscy  of  a3  tsemesoes  for  the  whole  task. 


SYNCHRONIZATION 

Tbc  total  processing  nee  of  as  item  of  information  fix 
decisioscnkcr  DM*  consist  of  two  parts:  0)  tbc  total  uroeT^ 
dcrir 5  wLicfc .  lie  decisionmaker-  actually  operates  on  tbc 
iafcrinatxe;  ard  (□)  tbc  total  time  TjP  spent  by  tie  mfcmrmoa  in 
crosty  prior  to  being  processed. 

Tbc  tine T^*  is  doc  to  two  lectors:  (i)  Infocmaaon  can  reman  in 
tbc  mcroocy  of  tbc  decisionmaker  cnril  be  decides  to  process  it 
widi  tbc  relevant  aigonthnr  Since  an  algorithm  cannot  process 
two  inp«s  at  the  same  time,  some  inpsts  will  have  to  remain 
unprocessed  in  memory  for  a  certain  amount  of  umc  end  tbc 
relevant  algorithm  is  available,  (ii)  Infocmatioa  can  also  remain 
in  memory  bccacsc  tbc  decisionmaker  has  to  wait  to  receive  data 
from  kactberorga.'uzabon  member. 


In  order  to  achieve  a  higher  consistency,  the  desipier  has  to 
ensure  that  tbc  t  decisionmakers  wbo  zattraea  In  a  particular  stage 
arc  provided  web  tbc  same  set  of  classes;  therefore,  it  is 
assumed  that: 


VG.De  O'- r)xfl._.r).  flty-Dty  (7) 

If  Cj,  dg  designate  the  colors  of  the  tokens  in  tbc  preset  of 
tej  thzi  correspond  to  input  Xj  and  that  are  fired  by  1^.,  then  ifce 
quantities  CF(x *.  t^)  denote  tedr  attribute  C  Let 

V(x,,  t**)  designate  the  vector  (C^xj.  1^,  _ 

clement  of  f  n *<X>/.  Let  probiCkx,.  t,3l) . <?(*,.  t^)) 

denote  the  probability  of  having  tokens  with  attribute  C*(X|. 

), ....  0{x,,  t^)  for  the  input  xj  at  tbc  stage  t,*  f  *  places 
pl.~.  pj.  It  will  be  wTitten  as  prob(VvX,-,  q^)).  If  z(V(x,%  t^t)) 
is  the  number  of  subsets  of  two  elements 
{C2(x,.  t,=1),  C^(x|.  :inl)}  of  lCk^rW*  °(xi'  W).  wc 
have: 

=2lW  (8) 

where  n(V(xj,  t^)  is  the  number  of  subsets  of  two  elements 
( C3(x,,  t,nj ),  C^(Xj,t,aj)J  of  (Ckxjdiat)*— » C*(Xj,  tjn|)}  such 
that  C^fXj.  t^x )  a  Ckxpttfa)*  Finally. 


The  degree  of  information  consistency  for  stage  !,nt  and 
input  x:  is: 

nWx^iJ 


V  .  n^\*w 


(9) 


An  organization  is  not  well  synchronized  when  the 
dedsronrcakers  have  to  wait  for  long  periods  before  receiving 
the  information  that  they  need  in  jeda  to  continue  their 
processing.  Conversely,  the  organization  is  well  synchronized 
w  hen  these  lags  are  small. 

Tbc  sojourn  time  T^*^)  of  the  token  nan.  representing  the 
input  xj  in  the  place  pj,  of  tbc  preset  of  transition  measures 

the  amount  of  time  spent  by  the  token  in  the  place  before  it  is 
fired: 

1»<xr,«^=Tt'T4  <») 

This  quantity  is  zero  when  »J«e  firing  occurs  at  the  same  time  the 
token  enters  the  place.  Conversely,  it  differs  from  zero  when  the 
firing  cannot  be  initiated  at  the  same  time  the  token  enters  the 
place.  The  following  quantity  can  now  be  introduced. 

SL<V«.)=-  Tt<VJ  ■  <,2> 


The  quantity  S^hJ(xj,  t-j)  measures  the  difference  between  the 
sojourn  times  of  the  tokens  representing  Xj  in  pj,  and  pr  i.c.,  the 
difference  between  tbc  lengths  of  time  that  the  information  sent 
by  DMjj  and  DMj  to  DMjt  remained  inactive  before  being 
processed. 

When  pk  represents  the  memory  place,  Sjy(x,,  t,r4)  will  be 
computed  far  e3ch  structural  place  pr  If  it  is  positive,  it  implies 
that  the  token  n>t  has  spent  more  time  in  pjj  than  the  token  m3  in 
pj.  If  it  is  negative,  the  opposite  is  true.  In  ihe  latter  c|sc,  there  is 
no  degradation  of  synchronization,  because  DM^is  not  ready  to 
process  the  next  task. 

Let  F(x)  denote  the  function  defined  on  the  set  of  rational 
numbers,  Q,  by: 


By  adding  the  degrees  of  kformatten  consistency  d{xj,  tIfit>  for  V  x  e  0,  (x  ^  0)  =>  (  F(x) »  x ) 

each  organizational  interaction  tjnl  and  each  input  xjand 

weighing  by  the  probability  of  having  that  input,  one  can  (x  <0)  =»  ( F(x)  =  0 )  (13) 

measure  the  organizational  degree  of  information 
consistency,  D,  for  the  task  at  hand: 
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Let  IXTCtjjjj)  dcsccc  the  sd  of  indices  h  for  the  strocrcrJ  places 
Pi  of  Prc(^).  Then  rise  tottl  bg  for  the  maritioa  in 
pro oessesg  xapet  x*.  S(Xj.  t^j).  can  cow  be  defined  as  follow*. 

S(x  tj  =  sax  (  FfS^x  t  )]  )  (14) 

keLvn^) 

or,  from  (12), 

S(xrtJ=  osx  (  F(T^(x,tI)-1^(xi.t=t))  )  05) 

Thus.  S(x*.  ora  seres  the  maximum  of  all  the  lags  during 

which  the  decisionmaker  has  to  wait  before  having  2ll  the 
information  he  needs  to  continue  his  processing.  The  measure  S 
does  not  take  into  consideration  the  items  of  information  for 
winch  the  decisionmaker  does  not  wait 

The  measure  of  synchronization  for  decisionmaker  DM* 
and  the  rest  of  the  organization,  S*.  is  defined  as: 

St=  X  V”***)  X  S<V-J  <16> 

*» 

It  is  the  expected  value  of  the  sum  of  the  maximum  lags  for  the 
interaction  stages  executed  by  decisionmaker  DM*  for  the  inputs 
*«« 

The  measure  of  synchronization  for  the  organization,  Sp. 
is  given  by: 

ST=  X  Frob<x,>  X  S<Via,>  07) 

*i 

It  is  the  expected  value  of  the  sum  of  the  maximum  lags  over  the 
overall  decisionmaking  process  for  the  inputs  Xj. 

On  the  one  hand,  the  measures  Sk.  for  each  k.  and  Sj  achieve 
their  best  values  when  they  are  zero.  On  the  other  hand,  there  is 
no  upper  bound  on  the  values  taken  by  these  measures;  they 
grow  to  infinity  if  a  deadlock  occurs.  Since  each  interactional 
transition  t,nl  belongs  to  one  decisionmaker,  and  one  only,  the 
following  relation  holds: 

sr  =  X  St  (IS) 

k 

Thus,  one  can  compute  the  contribution  of  each  individual 
decisionmaker  DMj.  to  the  total  synchronization  measure  Sjfor 
the  organization  by  taking  the  ratio  S^/Sp 

A  MODEL  OF  A  DECISION  SUPPORT  SYSTEM 

The  amount  of  data  that  must  be  handled  by  C*  systems  for  a 
typical  mission  is  very  large  For  example,  the  antisubmarine 
warfare  (ASW)  mission  requires  the  surveillance  of  a  vast  area 
where  multiplesensors  gather  information  on  the  environment. 
The  typical  information  requirements  (Waltz  and  Buede,  1986) 
arc  the  following: 

-  the  surveillance  area  covers  2000  x  2000  km% 

-  the  sensor  systems  consist  of  4  surveillance  aircraft, 

12  ASW  ships,  and  2  ASW  submarines. 

-  the  number  of  targets  can  be  as  high  as  200. 

-  the  number  of  repons  per  minute  ranges 
from  1000  to  5000. 


la  this  context,  there  is  clear  need  for  2  computerized  decision 
aiding  system  for  the  ooordinarioa  of  the  activities  of  the  various 
dccistormzkers.  Soch  a  decision  support  system  can  modify  the 
activities  of  a  decision-maker  because  the  laner  has  to  consider 
the  possibility  of  querying  the  system  (Weingacnosr  and  Levis, 
1987).  For  each  input  and  each  stage  of  his  internal 
decisionmaking  process,  the  decisionmaker  must  make 
meta-decisions  concerning  the  use  of  the  DSS.  These 
meta-dectsiocs  are  of  three  types: 

-  the  DM  does  not  query  the  DSS  and  performs 
all  processing  by  himself. 

-  the  DM  sends  a  query  to  some  component  of 
•be  system  and  relies  totally  00  the  response. 

-  the  DM  sends  a  query  to  seme  component  of  the  system, 
but  compares  its  response  with  his  own  assessment. 

When  several  decisionmakers  use  a  DSS  for  a  common  task,  the 
DSS  can  increase  or  decrease  the  coordination  of  the  group. 

It  is  not  possible  to  define  a  generic  type  of  decision  support 
system  because  DSS’s  are,  in  general,  application-oriented  and, 
therefore,  quite  specific  to  the  organizations  which  use  them  and 
to  the  task  that  must  be  performed.  The  following  model  takes 
into  account  several  capabilities  and  characteristics  which  are 
common  to  most  of  the  real  systems.  In  particular,  it  takes  into 
consideration  the  fact  that  most  real  DSS's  have  facilities  shared 
by  several  users  and  facilities  accessed  individually.  From  a 
physical  standpoint,  the  DSS  consists  of  a  mainframe  shared  by 
the  organization  and  which  is  accessed  by  the  decision-makers 
through  remote  intelligent  terminals  and  a  communication 
network.  The  tetminals  2re  called  "intelligent"  to  the  extent  that 
they  provide  the  users  with  the  opportunity  to  do  local 
processing  without  querying  the  central  system. 

The  DSS  provides  a  multiple-access  capability  to  the 
decisionmakers  who  can  query  it  in  parallel.  Several  databases 
are  stored  in  the  mainframe  so  that  a  decisionmaker  can  get 
information  concerning  the  state  of  the  environment  as  well  as 
the  possible  responses  that  he  can  give  to  any  input;  it  implies 
that  the  decisionmaker  can  query  the  database  both  in  his 
Situation  Ascssmem  stage  and  in  his  Response  Selection  stage. 

The  applications  implemented  on  the  system  do  not  embody  any 
heuristic  and  do  not  develop  alternative  solutions.  They 
implement  models  and  doctrines  well  known  to  the  decision¬ 
makers.  Consequently,  the  processing  of  any  particular  task  by 
DMj  involves  some  or  all  of  the  four  essential  components 
described  in  Figure  5:  the  decisionmaker  DMt,  the  intelligent 
terminal  i  that  he  uses,  the  communication  network,  and  the 
mainframe. 


For  each  of  the  three  paths  illustrated  above,  the  amount  of  time 
that  it  takes  to  process  the  input  for  each  internal  stage  of  DM, 
depends  on  several  factors: 

(i)  in  path  1,  the  accision-maker  processes  the  information  by 
himself,  this  takes  an  amount  of  time  equal  to  the 
processing  time  of  the  corresponding  protoco.. 

(ii)  m  path  2,  the  decision-maker  uses  only  the  intelligent 
terminal.  The  total  amount  of  time  taken  by  this  operation 
corresponds  to  the  sum  of  the  following  delays: 

-  time  spent  by  the  decision-maker  to  query  the  terminal, 

-  time  spent  by  the  terminal  to  process  and  display  the 
information; 

-  time  spent  by  the  decision-maker  to  assess  the  response. 
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Fig-  5  DM,  Interacting  with  the  DSS 


CtiO  in  path  3.  the  decision-maker  uses  the  terminal  as  a  dumb 

terminal  to  query  the  mainframe.  The  total  delay  of  this 

operation  is  the  sum  of  the  following  delays: 

-  time  spent  by  the  decision-maker  to  query  the  mainframe; 

-  rime  spent  by  the  terminal  to  access  the  network; 

-  time  of  transmission  to  the  mainframe; 

-  time  spent  by  the  mainframe  to  recognize  the  query  and 
initiate  the  processing; 

-  time  spent  by  the  mainframe  to  process  the  information; 

-  rime  spent  by  the  mainframe  to  access  the  network; 

-  rime  of  transmission  to  the  terminal; 

-  rime  spent  by  the  terminal  to  display  the  information; 

-  time  spent  by  the  decision-maker  to  assess  the  response. 

The  use  of  the  mainframe  involves  the  execution  of 
operations  that  can  take  an  amount  of  time  which  depends  to  a 
large  extent  on  the  physical  configuration  of  the  system.  In 
particular,  the  delay  of  transmission  through  the  communication 
network  can  vary  over  a  wide  range  according  to  the  specific 
route  use  which  depends,  in  turn,  on  the  origin  and  the 
destination.  Furthermore,  a  query  to  the  mainframe  may  be 
much  more  subject  to  errors  due  to  noise  and  the  distortion  in  the 
transmission  than  a  quety  to  the  intelligent  terminal. 

Petri  Net  Model  of  Decisionmaker  Aided  by  a  DSS 

The  Petn  Net  model  of  a  decisionmaker  DM  aided  by  a  DSS 
is  given  in  Figure  6  This  model  represents  the  different 
information  flow  paths  that  exist  when  a  DM  interacts  with  the 
DSS  at  any  internal  stage  of  his  decisionmaking  process.  Figure 
6  illustrates  the  information  flow  paths  for  the  case  where  the 
DM  uses  only  one  algorithm  f  for  performing  his  task.  The 
symbols  in  the  figure  are  defined  as  follows' 

-  u  is  the  decision  variable  for  choosing  between  the  five 

alternatives: 

(1)  DM  performs  the  stage  by  himself. 

(2)  DM  queries  the  mainframe,  performs  his  own 
processing,  and  compares  the  two  results. 

(3)  DM  queries  the  intelligent  terminal,  performs  his  own 
processing,  and  compares  the  two  results. 


(4)  DM  queries  the  mainframe  and  relies  on  its  response. 

(5)  DM  queries  the  intelligent  terminal  and  relies  on  its 
response. 


Fig.  6  Petri  Net  Model  of  DM  Aided  by  the  DSS 

qma  is  the  algorithm  used  by  ,DM  to  query  the  mainframe  m 
alternative  2. 

qta  is  the  algorithm  used  by  DM  to  query  the  intelligent 
terminal  in  alternative  3. 

qm  is  the  algorithm  used  by  DM  to  query  the  mainframe  in 
alternative  4. 

qt  is  the  algorithm  used  by  DM  to  query  the  mainframe  in 
alternatives. 

fm  is  the  algonthm  that  DM  executes  when  he  has  queried 
the  mainframe  in  alternative  2. 

ft  is  the  algonthm  that  DM  executes  when  he  has  quened  the 

intelligent  terminal  in  alternative  3. 

adm  is  the  algonthm  used  by  DM  to  assess  the  response  ot 

the  DSS  and  to  compare  it  with  the  result  of  his  own 

processing  in  alternatives  2  and  3, 

adss  is  the  algonthm  used  by  DM  to  assess  the  response  of 

the  DSS  i.t  alternatives  4  and  5. 

QDSS  is  the  query  sent  by  DM  to  the  DSS. 

RDSS  is  the  response  sent  by  the  DSS  to  DM 
ul{  is  the  decision  variable  which  determines  whether  the 
intelligent  terminal  or  the  mainframe  must  process  the  query, 
tf  is  the  algorithm  performed  by  the  intelligent  terminal  to 
process  the  query. 

QMF  is  the  query  sent  by  the  intelligent  terminal  to  the 
mainframe. 

RMFT  ts  the  response  from  the  mainframe  transmitted  by  the 
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network  to  the  intelligent  terminal. 

-  tim  is  the  protocol  of  transmission  from  the  intelligent 
terminal  to  the  mainframe. 

-  tmi  is  the  protocol  of  transmission  from  the  mainframd'to  the 
intelligent  terminal. 

-  QMFT  is  the  query  from  the  intclligcni  terminal  transmitted 

by  the  network  to  the  mainframe.  ^ 

-  RMF  is  the  response  from  the  mainframe. 

-  pmf  is  the;  algorithm  performed  by  the  mainframe  for 
processing  the  query,  -s 

-  dbq  is  the  algorithm  that  queries  the  database. 

-  dbs  is  the  algorithm  that  performs  the  search  in  the  database. 

Tms  model  show's  that  the  decisionmaker  interacts  with  the  DSS 
by  fusing  the  information  that  the  latter  produces. Therefore,  it  is 
possible  to  evaluate  the  synchronization  between  DM  and  the 
DSS. 

The  places  labelled  QDSS  and  RDSS  represent  the  structural 
places  that  contain  the  information  exchanged  by  DM  and  the 
DSS.  In  accordance  with  the  Predicate  Transition  Net  model,  the 
transitions  adm  and  ads s  are  the  only  interactional  ones.  These 
transitions  will  fire  only  if  the  tokens  in  their  input  places  have 
the  same  attribute  Tn,  i.e.,  they  correspond  to  the  same  input 
from  the  environment.  The  measjre  of  the  synchronization 
between  DM  and  the  DSS  evaluates,  for  each  input  and  each 
stage,  the  sojourn  time  of  the  item  of  information  in  the  memory 
place  of  the  preset  of  adm  or  adss.  Since  the  emphasis  in  this 
study  is  the  coordination  between  DMs,  for  simplicity,  it  is 
assumed  that  the  synchronization  between  DM  and  DSS  is 
perfect  The  same  approach  can  be  used  to  analyze  the  case 
when  synchronization  between  DMs  and  the  DSS  is  not  perfect. 


EXAMPLE 

The  impact  of  a  decision  support  system  on  the  coordination  of  a 
two-person  organization  is  the  key  question  addressed  in  this 
example.  The  degradation  of  the  synchronization  of  a 
decisionmaking  organization  can  result  from  two  types  of 
factors: 

-  the  dynamics  of  the  activities  which  lead  the  decisionmakers 
to  process  vanous  inputs  with  different  pnonty  orders. 

-  the  information  flow  paths  that  each  decisionmaker  uses  to 
perform  his  task. 

The  impact  of  the  first  category  of  factors  on  the  decisionmaking 
process  was  discussed  in  Grevet  et  al.  (198S).This  example 
assesses  the  second  type  of  factors.  Such  a  situation  arises  when 
the  decisionmakers  are  provided  with  a  DSS  which  allows  them 
to  access  different  local  or  remote  computer  facilities.  The  DSS 
can  alter  significantly  the  coordination  of  the  activities, 
depending  on  the  configuration  of  the  system  with  respect  to  the 
organization. 

The  Organization  and  the  Task 

The  example  presented  in  this  section  aims  at  modeling  the 
organizational  structure  and  decisionmaking  activities  of  a 
two-person  organization  in  a  simple  ASW  context  The  task 
models  a  mission  of  surveillance  that  consists  of  listening  to 
detect  enemy  submarines.  In  such  an  environment,  the  use  of 
decision  suppon  systems  to  process  the  signals  and  discriminate 
between  them  is  necessary. 

The  organization  consists  of  a  submarine  and  a  surface  ship 
which  are  in  charge  of  tracking  enemy  submarines  It  is  a 
hierarchical  organization  where  the  submarine  is  the  subordinate 


and  the  surface  ship  the  commander.  This  example  has  been 
studied  from  another  standpoint  by  Papastavrou  (19S6)  The 
Petri  Ket  model  of  such  an  organization  is  presented  in  Figure  7. 


The  decision-making  process  of  the  commander  and  the 
subordinate  have  three  stages  each.  In  the  Situation  Assessment 
stages,  they  assess  the  signals  that  they  receive  from  the 
environment.  The  subordinate  sends  the  result  of  his  own 
assessment  to  the  commander,  who  fuses  in  the  Information 
Fusion  stage  this  information  with  his  own  assessment  On  the 
basis  of  the  result  of  this  interaction,  the  commander  identifies 
the  signal  and  produces  an  order  which  is  the  sent  to  the 
subordinate.  The  latter  interprets  the  order  in  the  Command 
Interpretation  stage  and  produces  the  oiganizauonal  response 

The  task  is  modeled  as  the  alphabet  X  and  the  probability 
distribution  prob(x)  such  that: 

X  =  (Xj=  a.b.Cjd.c.f,  I  (a,.b1.c,.d,,c„fl)  e  (0,1  )6  ) 

V  (xj,  xj)  e  X  x  X,  prob(x,)  =  prob(Xj) 

Therefore,  each  input  consists  of  an  ordered  stnng  of  six  bits. 
There  arc  64  possible  inputs  that  represent  the  signals  that  must 
be  identified  by  the  organization  in  order  to  produce  the 
response.  It  is  assumed,  furthermore,  that  these  inputs  arc 
equiprobable,  so  that  the  probability  distribution  prob(x)  is 
defined  by: 

V  x  e  X,  prob(x  «  x.)  09) 

*  ‘  04 

The  organization  can  produce  four  responses,  labelled  R  R2. 
R3  and  Rj: 

-  it  the  bits  a,  and  d,  arc  both  equal  to  0,  the  signal  does  not 
come  from  an  enemy  submarine  and,  therefore,  the 
submarine  DM,  should  not  do  anything.  This  response  is 
R,.  The  probability  of  having  such  an  input  is  1/4 

-  if  b,  and  e,  are  both  equal  to  0,  the  signal  comes  from  an 
enemy  submarine  which  is  trying  to  test  the  capabilities  of 
submarine  DM,  This  one  should  deceive  it  by  under¬ 
reacting.  This  response  is  Rj.  The  probability  of  having 
such  an  input  is  3/16, 

-  if  the  bits  c,  and  d,  are  both  equal  to  0,  the  signal  conies 
from  an  enemy  submarine  which  is  moderatly  threatening 
submarine  DM,  The  latter  should  over-react  to  this  threat  to 
deter  the  enemy  submarine  This  response  is  R3  The 
probability  of  having  such  an  input  is  9/64 
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otherwise,  the  signal  comes  from  an  enemy  submarine 
which  is  threatening  submarine  DMj.  In  this  case,  DM j 
should  also  over-react  but  at  a  higher  level  than  previously. 
This  response  is  R4.  The  probability  of  having  such  an  input 
is  27/64. 

Tabic  1  summarizes  these  possibilities.  The  partitioning  of  the 
input  is  done  according  to  the  following  rule; 

the  submarine,  DMj,  receives  the  first  three  bits  a,bjCj. 

-  the  surface  ship,  DM3,  receives  the  last  three  bits  a,e,f;. 

The  decisionmaking  process  takes  place  on  the  basis  of  this 
partitioning  The  Table  2  presents  the  cost  matrix  that  gives  the 
costs  associated  with  the  discrepancies  betw'een  the  ideal 
responses  and  the  actual  responses  provided  by  the  organization. 

,  TABLE  1  Organizational  Responses 


input 

response 

(a,.  df>  =  (0.0) 

Ri 

(a,.d)  *  (0.0) 

«>,.<:,)  =  (0.0) 

K2 

(a,.d()  *  (0.0) 

(b.c-)  *  (0.0) 

(Cj.f.)  "  (0.0) 

R3 

(Sj.d,)  *  (0.0) 

(t>..Cj)  *  (0.0) 

(Ci-fj)  *  (0.0) 

R. 

TABLE  2  Cost  Matrix 


\  actual 

\  R 
ideal 

R  \ 

R 

1 

R 

2 

R 

3 

R 

4 

R 

l 

0 

2 

3 

4 

R 

2 

4 

0 

» 

2 

R 

3 

6 

4 

0 

2 

R 

4 

8 

4 

3 

0 

The  accuracy,  J,  of  the  organization  is  computed  as  the 
expected  value  of  the  cost  for  the  particular  set  of  inputs.  It  is 
assumed  that,  when  DMj  and  DM2  assess  the  input  by 
themselves,  without  querying  the  DSS,  they  produce  vocrcctly 
the  first  two  bits  of  the  strings  of  three  bits.  That  is,  for  an  input 
x,  =  the  result  of  the  SA  of  DM!  is  a,b,u,  where  u, 

is  the  value  of  die  third  bil  that  DMj  produces .  11  is  assumed  that 
this  value  is  equal  to  c,  with  probability  1/2.  In  the  same  way, 
the  result  of  the  SA  of  DM2  is  d^vj  where  v,  is  the  value  of  the 
sixth  bit  that  DM2  produces,  this  value  is  equal  to  f,  with 
probability  1/2. 

It  is  furhter  assumed  that  the  decisionmakers  query  the  DSS  only 
during  their  Situation  Assessment  stages.  Figures  8  and  9 
provide  the  models  of  the  organization  aided  by  the  DSS.  in 
Figure  8,  the  model  of  DSS  is  aggregated,  in  Figure  9  the  whole 
model  is  shown. 


Only  three  of  the  five  alternatives  a  DM  has  to  perform  his 
processing  in  any  internal  stage  where  he  can  use  the  DSS  are 
considered: 


CO  '  DM,  does  not  access  the  DSS . 

(ii)  DM,  queries  the  intelligent  terminal  and  relies  on  its 
response. 

(hi)  DM;  queries  the  DSS  and  compares  its  response  to  his  own 
assessment. 

fn  the  remainder  of  this  section,  the  following  notation  will  hold. 


-  SAj  represents  HtemitiveO). 

-  IT,  represents  alternative  (11). 

-  MF{  represents  alternative  (tii). 

This  model  shows  that  multiple  flow  paths  can  be  used  to 
process  the  information.  Since  each  DM  has  three  alternatives 
with  respect  to  the  use  of  the  DSS,  there  are  nine  pure 
organizational  strategies: 


-  (SAi,  SA2) 

-  (SAi,  ITj) 

•  (SA!.MF2) 

-  (ITi,SA2> 

-  (iTi.rr*) 

-  OT1.MF2) 

•  (Mrj,  SA2) 

-  (MFj,  ITo) 

.  (MFj,  MF2) 


A  mixed  strategy  P2»  P»3)  f°r  DMj  corresponds  to  a 
convex  combination  of  his  three  pure  strategies  SAj,  ITj  and 
MFj  weighted  by  the  probabilities  p,1,  p,2,  p,3. 

An  organizational  behavioral  strategy  is  the  combination  of  the 
mixed  strategies  of  DMi  and  DM2.  Therefore,  it  corresponds  to 


(St(Pi!.  Pi2.  Pi3).  S2<P2!.  P22  P23)). 


It  is  assumed  that  the  processing  of  information  through  the  use 
of  the  DSS  provides  different  results  depending  on  whether  the 
intelligent  terminal  or  the  mainframe  is  queried.  When  the 
intelligent  terminal  is  accessed,  the  decision-makers  can 
produce  correctly  the  first  bit  of  the  strings  of  three  bits.  That  is, 
for  an  input  x,  a  a,b,c,d,c,f,,  the  result  of  the  SA  of  DMj  for  the 
alternative  IT*  is  a,u,y,  where  u,  and  y,are  the  values  of  ihe 
second  and  third  bus  that  DMj  produces,  each  of  these  two 
values  is  equal  to  the  actual  value  with  probability  1/2  In  the 
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DM 


IF  K$ 


Fig,  9  Two-person  Organization  Aided  by  DSS 


Fig.  8  Two-Person  Orgamzauon  Aided  by  DSS  -  Aggregated 
Representation 


same  way,  the  result  of  the  SA  of  DMj  for  the  alternative  IT^  is 
d,v,z,  where  v,  and  z,  are  the  values  of  the  fifth  and  sixth  bus 
that  DM2  produces  each  of  them  corresponds  to  the  actual  value 
with  probability  1/2, 


When  the  mainframe  is  accessed,  the  decision-makers  arc  able  to 
produce  correctly  all  three  bits  of  their  respective  strings  That 
is,  for  an  input  x,  *  a^c.d^jf,,  the  result  of  the  SA  stage  of 
DM.  for  the  alternative  MFj  is  3jb,c,.  The  result  of  the  SA  stage 
of  DM2  for  the  alternative  MF*  is  d,c,f.  This  means  that,  when 
the  organizational  strategy  is  (MFi,  MFjj),  the  organization  will 
be  able  to  produce  the  correct  response  for  all  inputs.  For  all 
other  strategies,  the  responses  provided  may  differ  from  the 
ideal  response. 


The  access  to  the  intelligent  terminal  provides,  however,  a 
means  of  improving  the  timeliness  of  the  decision-making 
process.  Indeed,  it  will  be  assumed  that  the  amount  of  time 
necessary  to  process  the  information  is  lower  when  the 
decisionmaker  uses  his  intelligent  terminal  than  when  he  queries 
the  mainframe  or  performs  his  processing  alone. 


The  amount  of  time  taken  by  the  decisionmakers  to  execute  the 
different  algorithms  is  equal  to  one  unit  of  time,  except  for  ihc 
Situation  Assessment  algorithms.  Different  cases  have  been 
investigated  in  which  the  processing  times  of  these  algorithms 
differ  from  unity. 


These  considerations  account  lor  what  occurs  in  most  situations 
in  C3  systems.  The  different  decisionmakers  have  access  to 
different  facilities  which  do  not  have  the  same  response  tune  or 
the  same  accuracy.  On  the  one  hand,  an  intelligent  terminal  s 
likely  to  provide  faster  responses  because  u  is  co- located  with 
the  decisionmaker.  However,  it  has  no  centralized  database 
which  can  aggregate  data  from  multiple  sensors  to  get  a  global 
picture  of  the  situation  and.  therefore,  the  responses  it  can 
provide  arc  necessarily  less  accurate.  On  the  other  hand,  the 
access  to  the  mainframe  may  require  the  communication  ot  data 
from  and  to  remote  locations  through  a  network,  the  response 
time  can  be  quite  long. 

The  next  secrion  contains  the  results  obtained  for  different  access 
times  to  the  mainframe.  In  each  case,  the  performance  loci  have 
been  constructed  for  the  three  measures,  accuracy  J,  expected 
delay  T,  and  synchronization  Sp. 

Results 

The  results  on  the  accuracy  of  the  responses  produced  by  the 
organization  for  the  nine  pure  organizational  strategies,  are  listed 
in  Table  3.  Accuracy  is  maximal  when  both  decision-makers 
query  the  mamhame  and  reaches  its  worst  level  when  they  both 
query  their  intelligent  terminal. 
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TABLE  3  Accuracy  of  the  Organization 


,SA, 

SA, 

SAj- 

,MF, 

w. 

MFj 

'SA2 

*2 

..sc- 

SAj 

'*2 

MF2 

SA2 

*2 

^2 

J 

0<2 

076 

0.21 

076 

101 

069 

021 

069 

000 

Two  cases  have  been  investigated  as  far  as  the  processing  times 
of  me  Situation  Assessment  stages  arc  concerned: 


(i)  case  1:  SAj  and  SAo  take  10  units  of  time,  ITj  and  IT2  take 
5  units  of  time.  MFj  and  MFj  take  15  units  of  time.  This 
case  corresponds  to  the  situation  where  the  processing  times 
of  both  decision-makers  are  equal  when  they  use  the  same 
strategy  with  respect  to  the  use  of  the  DSS. 

(ii)  case  2  SAj  and  SAj  take  10  units  of  time.  ITi  and  IT2  take 
5  units  of  time.  MP]  takes  15  units  of  time  but  MF2  takes  10 
units  of  time.  This  corresponds  to  the  situation  where  the 
commander  has  a  faster  access  to  the  mainframe  than  the 
subordinate  because  of  a  bettertransmission  time. 

In  both  cases,  when  the  two  DMs  perform  their  situation 
assessment  by  themselves,  they  take  the  same  amount  of  time  to 
do  it.  This  means  that  the  Information  Fusion  $»age  of  DM2  is 
perfectly  synchronized. 

Tables  4  and  5  show  the  results  for  the  expected  delay,  T,  and 
the  synchronization,  Sp,  m  case  1  and  case  2.  for  the  nine  pure 
organizational  strategics. 

TABLE  4  Delay  and  Synchronization  in  Case  1 
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s\ 

SAj 

", 

MFj 
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MFj 
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"j 

MFj 

SAj 

n2 

MFj 

SA2 

*2 

^2 

T 

U 

15 

20 

15 

10 

20 

20 

20 

20 

2 

7 

7 

7 

2 

12 

7 

12 

2 

. 

TABLE  5  Delay  and  Synchronization  in  Case  2 
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15 
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20 

20 

20 

S 

2 

7 

2 

7 

2 

7 

7 

12 

7 

T 

In  case  I,  the  maximum  delay  is  obtained  when  at  least  one  of 
the  decisionmakers  accesses  the  mainframe.  The  minimum  delay 
is  reached  when  both  decisionmakers  use  their  intelligent 
terminal.  When  the  maximum  delav  is  reached,  the 
synchronization  can  have  very  different  values  depending  on  the 


coordination  of  the  strategics  of  the  decisionmakers.  When  they 
both  access  the  mainframe,  the  synchronization  is  optimal  with  a 
delay  of  20  units  of  time.  For- this  same  delay,,  this 
synchronization  can  degrade  considerably,  if  one  of  them 
accesses  his  intelligent’ teyminal  as  the  other  queries  the 
mainframe. 

In  case  2,  the  maximum  delay  is  reached  when  DM,  accesses  the 
mainframe  Nevertheless,  when  'DM2  queries  the  mainframe 
alone,  the  delay  does  not  increase  to  this  level.  The  optimal 
synchronization  can  no  longer  be  obtained  when  the  delay  is 
maximal.  Furthermore,  the  worst  value  for  the  synchronization 
is  reached  only  for  one  pure  organizational  strategy,  1  e.,  for 
(MFj,  IT2).  This  value  was  reached  for  two  pure  organizational 
strategies  in  case  1, 1  e.,  (MF,,  ITj)  and  (IT|,  MF^. 

The  interpretation  of  the  results  can  be  done  through  the 
consideration  of  the  performance  loci  for  the  measures  J,  T  and 
Sp.  The  performance  loci  for  the  two  cases  presented  in  the 
previous  section  are  showr.  in  Figures  10  and  11.  They 
represent  the  values  of  J,  T  and  $p  reached  for  each 
organizational  strategy,  pure  or  behavioral. 

These  figures  show  the  relations  and  tradeoffs  between  the 
various  measures  of  performance.  It  is  recalled  that: 

*  the  lower  the  value  of  T,  the  better  the  delay. 

-  the  lower  the  value  of  Sp,  the  better  the  synchronization. 

-  the  lower  the  value  of  J,  the  better  the  accuracy. 

In  case  2,  the  part  of  the  locus  where  J  is  the  lowest,  1  c.,  where 
the  accuracy  is  the  best,  corresponds  to  higher  values  of  Sp  than 
in  case  1  This  shows  that  there  exists  a  trade-off  between 
accuracy  and  synchronization  when  the  DSS  docs  not  have  the 
same  response  time  for  the  two  decisionmakers. 

In  both  cases  1  and  2,  when  the  expected  delay,  T,  is  minimal, 
the  synchronization.  Sp,  is  also  minimal.  This  is  due  to  the  fact 
that  the  intelligent  terminals  provide  the  fastest  way  of 
performing  Situation  Assessment,  and  that  the  delay  will  be 
minimal  only  if  both  decisionmakers  query  their  terminal.  The 
assumption  that  these  terminals  give  the  responses  to  both 
decisionmakers  in  the  same  amount  of  time  is  realistic  because 
there  is  no  delay  due  to  transmission  and  the  algorithms  that  they 
use  are  similar.  Conversely,  the  fact  that  the  synchronization  is 
minimal  does  not  imply  that  the  delay  will  be  minimal.  In  case  1, 
the  synchronization  reaches  its  lowest  value  for  all  possible 
values  of  the  delay.  It  corresponds  to  the  fact  that,  for  any 
delay,  the  decisionmakers  can  find  some  way  to  be  as  well 
synchronized  as  possible. 

If  a  constraint  is  imposed  on  the  delay,  the  synchronization  of 
the  organization  docs  not  degrade.  One  can  notice  that  the  more 
stringent  the  constraint  on  T,  the  more  likely  the  synchronization 
will  reach  a  good  value.  In  case  2,  the  synchronization  does  not 
reach  its  lowest  value  for  all  values  of  T;  as  in  case  1,  the  best 
values  of  Sp  are  obtained  for  the  lowest  delays. 


In  case  2,  the  more  the  timeliness  of  the  organization  degrades, 
the  more  the  synchronization  will  degrade  too.  When  DMj  uses 
the  mainframe,  there  is  no  way  for  the  organization  to  be  well 
synchronized.  DM2  will  have  to  wait  for  long  inervals  of  time 
before  receiving  the  data  that  he  needs  in  his  information  fusion 
stage. 

These  facts  show  that  the  introduction  of  a  decision  support 
system  m  an  organization  can  have  different  effects  on  the 
coordination  of  the  activities  If  the  organization  members  are 
well  coordinated  when  they  do  not  use  the  DSS,  the  latter  can 
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Fig.  1 1  Performance  Locus  in  Case  2 


degrade  this  coordination  because  of  two  factors: 

the  decision-makers  can  use  a  larger  number  of  facilities,  a  is 
difficult  to  coordinate  their  access, 
the  quality  of  the  responses  provided  by  the  DSS,  1  e ,  the 
response  time  and  the  information  produced,  can  be  very 
different  from  one  decision-maker  to  another. 

Therefore,  on  the  one  hand,  the  decision-makers  have  many 
more  alternatives  that  they  can  use  to  perform  their  task ;  the 
coordination  of  these  activities  is  consequently  more  difficult  to 
achieve  On  the  other  hand,  in  coordinating  their  activities,  the 
organization  members  must  take  into  account  the  fact  that  the 
OSS  does  not  perform  equally  well  for  all  of  them. 

This  latter  consideration  is  illustrated  by  case  2  of  the  example, 
there  is  a  tradeoff  between  accuracy  and  timeliness  which  is 
coupled  with  a  tradeoff  between  accuracy  and  synchronization. 
In  order  to  achieve  good  accuracy,  the  organization  members 
must  use  strategics  which  lead  to  a  degradauwi  in  timeliness  and 
synchronization.  Conversely,  if  the  decisionmakers  wants  to  be 
well  synchronized,  the  accuracy  wiH  degrade  because  they 
cannot  access  the  mainframe  together. 


Therefore,  the  decision  support  system,  depending  on  its 
characteristics,  leads  to  mixed  effects  on  the  effectiveness  ot  the 
organization.  As  in  case  2.  a  can  lead  to  an  improvement  both  in 
accuracy  and  timeliness  of  the  organization,  but  the  coordination 
then  degrades.  Conversely,  as  in  case  1,  it  cannot  produce  an 
improvement  both  in  accuracy  and  timeliness,  but  coordination  is 
always  highest  when  accuracy  or  timeliness  are  optimal. 

CONCLUSIONS 

The  concept  of  coordination  was  defined  as  relating  to  the 
consistency  of  the  information  exchanged  by  the  different 
organization  members  and  to  the  synchronization  ot  the 
various  activities.  The  latter  bears  directly  on  the  dynamics 
of  the  decisionmaking  process.  A  decisionmaking  organization 
is  perfectly  synchronized  for  the  task  at  hand  it  none  of  its 
members  waits  for  the  information  that  he  needs  at  any  stage  ot 
the  process.  If  it  is  not  the  case,  the  value  ot  information  when  n 
is  actually  processed  may  have  decreased,  leading  to  a 
degradation  of  the  organizational  effectiveness  The  consistency 
of  information  shows  the  extern  to  which  different  pieces  ot 
information  can  be  fused  without  contradiction. 
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The  modeling  of  processes  that  require  coordination  has  been 
developed  using  the  basic  model  of  the  single  interacting 
decisionmaker  refined  through  the  use  of  the  Predicate 
Transition  Net  formalism.  In  particular,4  tokens  representing 
symbolic  information  carriers  have  been  differentiated  on  the 
basis  of  three  attributes  which  account  for  characteristics  that 
decisionmakers  can  use  to  discriminate  between  various  data. 

The  protocols  of  interactions  between  organization  members 
model  the  fact  that  they  must  refer  to  the  same  input  when  they 
fuse  data.  Different  strategies  for  selecting  the  information  to 
process  have  been  introduced,  c.g.,  FIFO  or  priority  order 
between  classes  of  data. 

The  evaluation  of  the  coordination  is,  based  j>n  a  characterization 
of  the  Firing  of  interactional-transitions  in  the  Predicate 
Transition  Net  model  developed.  Furthermore,  two  measures  are 
introduced  in  order  to  perform  a  quantitative  evaluation  of  the 
coordination  of  decision-making  processes,  i.e.,  information 
consistency  and  synchronization. 

A  methodology  for  assessing  quantitatively  the  impact  of  a 
decision  support  system  on  the  activities  of  a  decision-making 
organization  has  been  presented.  It  was  used  to  show  that  the 
introduction  of  a  decision  support  system  can  alter  considerably 
the  synchronization  of  the  various  activities  because  the 
capabilities  offered  to  the  various  decisionmakers  by  the  system 
may  differ  For  example,  a  certain  decisionmaker  may  have 
faster  access  to  the  central  database  than  another  one,  because  of 
different  transmission  times.  However,  the  fact  that  some 
decisionmakers  are  provided  with  better  capabilities  can  allow 
the  organization  to  improve  both  the  timeliness  and  the  accuracy 
of  the  process. 
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ABSTRACT 


Distnbuted  decisionmaking  organizations  with  variable  structure 
are  those  in  which  the  interactions  between  the  members  can 
change,  or  which  can  process  the  same  task  with  different 
combinations  of  resources.  Variable  structure  could  be  a 
possible  design  solution  when  no  fixed  structure  organization 
can  meet  the  requirements  of  the  mission.  A  modeling 
methodology  is  introduced  to  represent  variable  structure 
organizations  that  is  based  on  the  theory  of  Predicate  Transition 
Nets.  Decisionmaking  organizations  are  then  viewed  from  a  new 
perspective  in  which  the  types  of  interactions  which  can  exist 
between  the  decisionmakers  are  first  considered  without  taking 
into  account  the  identity  of  the  decisionmakers  themselves.  The 
latter  are  represented  by  individual  tokens  (instead  of  subnets  of 
a  Petn  Net)  moving  from  one  interaction  to  the  other,  and  as 
such,  arc  treated  in  the  same  manner  as  any  other  resources 
needed  for  the  processing  of  a  task.  Interactions,  resources,  and 
tasks  are  modeled  independently,  i.c.,  the  representation  of  the 
interactions,  resources,  and  tasks  is  done  separately  m  separate 
modules,  and  modifications  in  one  module  can  be  made  without 
affecting  the  others.  The  methodology  is  illustrated  by  an 
example  of  a  three  member  decisionmaking  organization 
carrying  out  an  air  defense  task. 


1.  INTRODUCTION 

The  need  to  meet  ever  increasing  performance  levels  and  to 
satisfy  conflicting  requirements  has  led  to  the  investigation  of 
organizations  whose  structure  is  variable.  Variable  structure 
organizations  could  be  a  possible  design  solution  when  no  fixed 
structure  organization  can  meet  such  requirements  as  robustness 
or  survivability.  The  modeling  of  variability  in  the  structure  of 
organizations  constitutes  another  step  towards  the  representation 
of  more  realistic  decisionmaking  organizations. 

The  mathematical  formulauon  of  the  modeling  and  analysis 
problem  is  based  on  the  theory  of  Predicate  Transition  Nets, 
which  is  an  extension  of  the  Petn  Net  Theory  using  the  language 
of  first  order  predicate  logic  (Genrich  and  Lautenbach,  1981). 
The  information  processing  and  decisionmaking  organizations 
that  have  been  modeled  and  analyzed  in  earlier  work  (Levis, 
1984;  1988)  have  been  depicted  as  systems  performing  tasks  m 
order  to  achieve  a  mission.  These  organizations  are  now  viewed 
from  a  new  perspective.  The  types  of  interactions  which  can 
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exist  between  the  decisionmakers  are  first  considered  without 
taking  into  account  the  identity  of  the  decisionmakers 
themselves.  The  latter  are  represented  by  individual  tokens 
(instead  of  subnets  of  a  Petri  Net)  moving  from  one  interaction 
to  the  other,  and  as  such,  arc  treated  in  the  same  manner  as  any 
other  resources  needed  for  the  processing  of  a  task. 
Interactions,  resources,  and  tasks  are  modeled  independently, 
and  this  new  way  of  describing  decision  making  organizations 
allows  the  development  of  a  modeling  methodology  with  a 
modular  architecture.  By  modular  is  meant  that  the 
representation  of  the  basic  components  of  the  information 
processing  (interactions,  resources,  and  tasks)  is  done  in 
separate  modules,  and  that  modifications  in  one  module  can  be 
made  without  affecting  the  others. 

In  the  next  section,  variable  structure  organizations  are  defined, 
while  in  the  following  one  the  modeling  methodology  is 
desenbed.  A  case  study  is  presented  in  the  fourth  section,  it 
illustrates  the  whole  procedure  through  the  design  of  a  set  of 
three  candidate  structures  for  a  given  mission,  one  of  which  is 
variable.  Measures  of  Effectiveness  are  used  to  select  the  most 
effective  candidate  for  a  specific  mission. 


2.  VARIABLE  STRUCTURE  ORGANIZATIONS 

A  variable  structure  decisionmaking  organization  (VDMO)  is  a 
DMO  for  which  the  topology  of  interactions  between  the 
elements  or  components  can  vary.  Analogously,  a  DMO  which 
has  a  constant  pattern  of  interactions  among  its  components, 
i  e.,  a  fixed  structure,  is  called  a  FDMO. 

The  relationships  which  tie  the  components  togethci  arc  defined 
at  three  different  levels  physical  arrangements,  links  between 
components,  and  protocols  ruling  the  arrangements  of  these 
links.  The  architecture  of  the  organization  allows  the  topology 
of  interactions  to  vary.  The  way  it  docs  vary  is  implemented  in 
the  protocols  themselves.  The  rules  setting  the  interactions  can 
be  of  any  kind  We  distinguish  three  types  of  variability,  each 
corresponding  to  characteristic  properties  that  a  VDMO  may 
exhibit,  ar.  actual  VDMO  may  very  well  have  these  properties  (to 
some  extent)  together  and  simultaneously 

*  Type  1  variability.  The  VDMO  adapts  its  structure  of 
interactions  to  the  input  it  processes  Some  patterns  of 
interactions  may  be  more  suitable  for  the  processing  of  a  given 
input  than  others. 

•  Type  2  variability:  The  VDMO  adapts  its  structure  of 
interactions  to  the  environment  The  performance  of  a  DMO 
depends  strongly  on  the  characteristics  of  the  environment  as 
perceived  by  the  organization.  For  example,  an  air  defense 
organization  may  be  optimized  for  some  types  of  threats  and 
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ihcir  probabilities  of  occurence.  Now,  if  the  adversary's 
doctrine  changes,  or  the  deployment  of  his  assets  changes,  then 
the  probability  distribution  of  the  occurence  of  the  threats  is 
modified.  The  organization  (with  the  interactions  set  as  before 
the  changes  in  the  environment)  may  hot  meet  the  mission 
requirements  any  more. 

*  Type  3  variability:  The  VDMO  adapts  its  structure  of 
interactions  to  the  system's  parameters.  The  performance 
of  a  system  changes  when  assets  arc  destroyed  or  become 
unavailable  because  of  countermeasures  such  as  jamming  of 
communications. 

These  three  different  types  of  variability  can  be  related  to  the 
ropertics  of  Flexibility,  Reconfigurability,  and 
urvivability.  A  DMO  is  survivabie  when  it  can  achieve 
prescribed  levels  of  performance  under  some  wide  range  of 
changes  cither  in  the  environment,  or  in  the  characteristics  of  the 
organization,  or  in  the  mission  itself.  The  extent  to  which  a 
DMO  is  survivabie  depends  on  the  extent  to  which  it  is  flexible, 
and  reconfigurablc,  Flexibility  means  that  the  DMO  may  ada^t 
to  the  tasks  it  has  to  process,  to  their  relative  frequency ,  or  to  its 
mission(s)  Reconfigurability  means  that  it  can  adapt  to  changes 
in  its  resources.  Both  properties  overlap,  and  their  quantitative 
evaluation  clearly  falls  outside  the  scope  of  this  paper. 

The  organizations  under  consideration  are  restricted  to  the  class 
of  teams '  of  boundcdly  rational  decisionmakers  (DM's) 
(Boettcher  and  Levis,  1982).  Each  DM  is  well  trained  and 
memorylcss.  The  Petri  Net  formalism  has  been  found  to  be  very 
convenient  for  describing  the  concurrent  and  asynchronous 
characteristics  of  the  processing  of  information  in  a 
decisionmaking  organization.  The  internal  processing  which 
takes  place  in  any  decisionmaker  has  been  modeled  by  a  subnet 
with  four  transitions  and  three  internal  places.  A  simplified 
version  of  this  so-called  four  stage  model  is  shown  in  Fig.  1. 


Figure  1  Four  stage  Petri  Net  model  of  a  DM. 


This  model  allows  *o  differentiate  among  the  outputs  and  the 
inputs  of  the  decision  maker,  and  to  describe  the  types  of 
interactions  which  can  exist  between  tw-o  decisionmakers. 

The  decisionmaker  receives  an  input  signal  x  from  the 
environment,  from  a  preprocessor,  from  a  decision*^  ,  or  from 
the  rest  of  the  organization.  He  can  receive  one  input  to  the 
Situation  Assessment  stage  (or  SA)  at  any  time.  He  then 
processes  this  input  x  with  a  specific  algorithm  which  matches  x 
to  a  situation  the  decisionmaker  already  knows  He  obtains  an 
assessed  situation  z  which  he  may  share  with  other  DM's.  He 
may  also  receive  at  this  point  other  signals  from  the  rest  of  the 
organization.  He  combines  the  information  with  his  own 
assessment  in  the  Information  Fusion  stage  (IF),  which  leads  to 
the  final  assessment  of  the  situation,  labeled  z'  The  next  step  is 
the  possible  consideration  of  commands  from  other  DM's  which 
would  result  in  a  restriction  of  his  set  of  alternatives  for 
generating  the  response  to  the  input.  This  is  the  Command 
Interpretation  stage,  or  Cl.  The  outcome  of  the  Cl  stage  is  a 
command  v  which  is  used  in  the  Response  Selection  stage  (RS) 
to  produce  the  output  y  *  the  response  of  the  decisionmaker  * 
which  is  sent  to  the  environment  or  to  other  DM$. 


As  shown  in  Fig.,1,  the  decisionmakers  can  only  receive  inputs 
the  SA,  IF,  and  Cl  stages,  and  send  outputs  from  the  SA  and 
RS  stages  (Remy  and  Levis,  1987)  The  .ntcractions  which  are 
the  most  significant  are  shown  m  Fig.  2.  For  the  sake  of  clanty, 
however,  this  figure  only  accounts  for  ihe  interactions  as 
directed  links  from  DM,  to  DM..  Symmetrical  links  from  DM,  to 
DMje  exist  as  well.  1 


SA  IF  Cl  RS 


Two  kinds  of  places  can  be  distinguished,  internal  places,  or 
memory  places,  where  the  decisionmaker  stores  his  own 
information,  between  SA  and  IF,  IF  and  Cl,  or  Cl  and  RS.  The 
places  between  the  DM’s  and  the  sensors,  the  preprocessors,  or 
the  actuators,  as  well  as  those  between  two  DM’s  are  called 
interactional  places.  Knowledge  of  the  set  of  interactional 
places  is  equivalent  to  that  of  the  whole  structure  ot  the  net, 

A  decisionmaker  may  not  have  all  his  foui  stages  present. 
Depending  on  the  interactions  he  has  with  the  rest  of  the 
organization  and  with  the  environment  he  may  exhib*  different 
internal  structures: 

-  SA  atone. 

•  SA,  IF,  Cl  and  RS  (IF  and  Cl  can  be  simple  algonthms 
that  copy  the  signal). 

•  IF.  Cl.  and  RS. 

Depending  on  what  the  designer  of  the  organization  requires, 
different  constraints  on  the  allowable  interaction,  can  be 
expressed,  which  limit  or  expand  the  set  of  possible 
organizations. 

In  the  Pctn  Net  representation,  the  transitions  stand  for  the 
algorithms,  the  connectors  for  the  precedence  relations  between 
these  algorithms,  and  the  tokens  for  their  input  and  output  The 
places  act  like  buffers,  hosting  the  tokens  until  all  the  input 
places  of  a  transition  t  are  non  empty,  in  which  case  the 
algorithm  embodied  in  t  can  run  and  remove  the  tokens  The 
time  taken  by  the  algorithm  to  run  is  the  transition  processing 
time  p(t)  The  tokens  m  this  model  are  all  indistinguishable  A 
token  m  a  place  p  means  simply  that  a  piece  of  information  is 
available  there  for  the  output  transiuon(s)  of  p. 

In  the  earlier  model,  the  SA  and  P.S  stages  contained  several 
algonthms  and  a  switch  that  detrmmed  the  choice  of  algonthm 
The  switch  position  was  in  turn  determined  by  the  decision 
strategies  of  each  individual  DM  The  extension  of  the  concept 
of  a  switch  to  model  the  changing  interactions  in  a  vanable 
structure  organization  turned  out  not  be  useful,  it  introduced  a  set 
of  problems : 
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-  many  switches  are  needed. 

-  the  heeded  intercorrelation  between  the  switches  cannot 
be  indicated  on  the  net  A  table  has  to  be  attached  to  it. 
Thus,  the  net  representation  is  not  complete. 

•r  the  relation  between  the  inputs  and  the  patterns  of 
interactions  is  not  shown  explicitly  The  high  illustrative 
power  of  Petri  Nets  is  lost  since  the  behavior  of  the  net 
can  not  be  deduced  from  its  representation 

-  the  representation  becomes  quite  complex  even  for 
simple  organizations. 

-  the  addition  of  decisionmakers,  of  possible  links,  or  their 
removal,  obliges  the  designer  to  redesign  the  net  and  the 
attached  table  totally. 

Attributes  can  be  used  to  describe  what  the  tokens  represent 
For  instance,  if  the  decisionmaker  has  to  identify  an  incoming 
threat  and  to  respond  to  it,  then  a  token  on  the  input  place  of  his 
SA  stage  may  be  just  a  blip  on  the  DM's  radar  screen,  The 
token  that  the  SA  algorithm  produces  is  in  turn  formatted 
information  which  includes  the  DM's  measurement,  or 
assessment,  of  the  position,  speed,  nature,  behavior,  or  size  of 
the  threat.  The  DM  can  receive  from  elsewhere  in  the 
organization  other  formatted  information,  not  necessarily  of  the 
same  format,  provided  that  it  matches  what  his  IF  algorithm 
expects  as  inputs  formats  The  different  tokens  in  the  different 
places  have  then  different  formats,  and  different  a;  outes.  But 
as  long  as  the  protocol*  ruling  their  processing  do  not  vary  from 
one  set  of  attributes  to  the  other,  they  arc  indistinguishable 
tokens, 

What  is  needed  is  a  tool  which  would  allow  to  distinguish 
among  the  tokens,  and  which  would  have  the  capability  to 
implement  logic  able  to  determine  explicitly  what  interaction  and 
what  DM'S  have  to  be  active  for  the  processing  of  a  given  input. 
Individual  tokens.  Predicates,  and  Operators  can  meet  these 
requirements.  The  application  of  the  Predicate  Transition  Nets 
to  that  purpose  is  developed  in  the  next  section 


3.  MODELING  METHODOLOGY  FOR  VARIABLE 
DMO'S 

In  this  section,  a  step-by-step  procedure  for  the  modeling  of 
VDMO’s  using  Predicate  Transition  Nets  is  developed  An 
example  of  a  three  member  organization  with  type  1  variability 
illustrates  the  methodology.  The  methodology  has  a  modular 
architecture  (Fig.  3): 


Figure  3  Architecture  of  the  modeling  methodology. 


There  arc  five  modules, 

1  Interface  with  the  environment. 

2  ScarceTcsources. 

3  Interactions. 

4  Switching  module. 

5  Algorithm  implementation. 

Each  of  the  first  three  modules  can  be  executed  independently 
and  in  arbitrary  order.  The  three  modules  address  the 
sub*problems  (a)  of  modeling  of  the  inputs  that  the  DMO 
receives  and  the  responses  that  it  gives,  (b)  of  representing  the 
scarce  resources  that  the  DMO  needs,  and  (c)  of  modeling  the 
possible  interactions  which  can  exist  between  the  components. 

When  the  first  three  modules  have  been  completed,  the 
switching  module  is  executed.  The  switching  module  is  die  part 
of  the  model  where  the  logic,  which  controls  the  variability  of 
the  organization,  is  implemented.  For  each  incoming  input,  this 
is  the  part  of  the  model  which  decides  what  particular  resources, 
and  what  particular  set  of  interactions  will  be  adopted  The  way 
this  choice  is  made  will  determine  what  type  of  variability  the 
VDMO  exhibits. 

What  is  obtained  at  this  point  is  a  Predicate  Transition  Net  where 
only  the  non  trivial  operators  are  indicated  in  tne  corresponding 
transitions.  The  fifth  and  last  pan  of  the  methodology  consists 
of  the  rigorous  labeling  of  the  nodes,  connector*,  and  tokens  of 
the  net.  It  also  gives  precise  meaning  to  what  the  individual 
tokens  stand  for  (i  c ,  the  list  of  their  attributes),  depending  on 
the  places  which  host  them,  and  on  what  algorithm,  or  what  set 
of  algorithms,  a  particular  transition  models.  The  processing 
time  of  the  different  algorithms  is  also  specified.  The  steps  of 
that  methodology  arc  independent  enough  to  allow  changes  in 
any  subproblem,  without  threatening  the  functioning  of  the 
whole  model.  The  modular  architecture  is  also  very  convenient 
for  the  implemcntauon  of  extensions  of  the  model,  which  simply 
become  new  modules,  or  new  well-defined  subproblcms 

This  section  focuses  on  the  modeling  of  type  1  variable  DMO’s 
An  example  of  a  three  member  organization  with  type  I 
variability  serves  to  illustrate  the  methodology.  Examples  of 
VDMO's  exhibiting  type  2  or  type  3  variability  are  included  in 
Monguillet(1988). 

Interface  with  the  Environment 

The  goal  of  this  sub-problem  is  to  achieve  a  representation  of  the 
input  and  output  alphabets.  In  the  modeling  of  decisionmaking 
organizations,  the  discrete  representation  of  information  set*  is 
done  in  the  form  of  lists  of  attributes,  an  instance  of  which  is 
called  a  token.  In  the  ordinary  Petri  Net  representation  of  a 
DMO,  the  vatues  of  tne  attributes  were  of  no  importance,  no 
matter  what  these  values  were,  the  treatment  of  the  token  was  the 
same:  the  interactions  between  the  components  were  the  same 

In  the  case  of  type  1  VDMOs,  the  alphabet  X  of  inputs  ts 
partitioned  in  r  classes,  namely  X,,  for  i «  I,.. ,  r.  AH  inputs  x 
belonging  to  the  same  class  are  processed  with  the  same 
resources  used  with  the  same  pattern  of  interactions  A  given 
input  x  cannot  belong  to  more  than  one  class,  which  implies  that 
it  can  only  be  processed  with  one  specific  set  of  resources,  and 
one  specific  kind  of  interactions.  The  identity  of  a  token  is  the 
class  X,  to  which  it  belongs;  it  is  denoted  by  the  index  number  i. 
The  variable  "class  of  inputs"  is  denoted  by  x  and  has  the 
following  set  of  allowable  identities: 
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Rgcrc4  Example -Step  1. 

Scarce  Resources 

Resource  is  a  generic  name  which  designates  elements  needed 
for  the  processing  of  a  task.  A  resource  is  scarce  when  i:  cannot 
be  allocated  freely  to  the  processing  of  any  incoming  input 
because  of  insufficient  or  limited  supply.  The  scarcity  of 
resources  bounds  from  above  the  performance  of  the 
organization.  Scarce  resources  arc  modeled  in  a  convenient  way 
in  the  Pern  Net  formalism.  They  arc  represented  by  places  with 
multiple  input  transitions  and  multiple  output  transitions*  and 
non-zero  initial  marking  Examples  of  scarce  resources  can  be 
common  databases  with  limited  access*  communication  links 
with  limited  capacity,  mainframes  with  shared  processing  time, 
or  weapons  platforms  capable  of  handling  a  limited  number  of 
threats  at  a  time. 

In  this  modeling  methodology,  the  decisionmakers  arc  treated  as 
scarce  resources;  they  are  assigned  to  an  incoming  inp*it;  once 
they  have  been  assigned  to  a  certain  number  of  inputs,  tne  other 
inputs  have  to  wait  in  line  to  be  processed.  The  pool  of 
decisionmakers  w  hich  implements  the  organization  is  partitioned 
in  classes  of  DM's  who  have  the  same  function  within  the 
organization,  i  e.,  who  possess  the  sime  kind  of  algorithms. 
Two  decisionmakers  who  belong  to  the  same  class  are  then 
interchangeable.  The  DM's  of  a  class  are  represented  by 
individua*  tokens  of  a  variable,  and  placed  in  the  corresponding 
resource  place.  If  there  is  only  one  class  of  DM's,  then  the 
DM's  are  represented  by  indistinguishable  tokens.  The  other 
resources  that  the  organization  may  need  are  partitioned  and 
associated  with  variables  and  places  in  the  same  way. 
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Interactions 

The  allowable  interactions  between  components  arc  represented 
without  considering  the  identity  of  the  resources  they  involve. 
What  is  of  interest,  at  this  point  in  the  modeling,  is  oily  the 
topology  of  interactions  that  can  be  found  in  the  DMO.  The 
rjpical  model  obtained  21  this  point  is  shown  m  Rg.  6;  it  is  a  list 
of  the  possible  patterns  of  interactions  depicted  in  their  most 
aggregated  form.  Had  these  interactions  been  considered  alone 
as  DMO’s  with  fixed  structure,  the  input  and  output  places 
would  have  been  the  source  and  sink  places. 

The  possible  interactions  can  be  partitioned  in  four  generic 
types,  as  illustrated  in  Rg.  6: 

Type  (of,  the  pattern  of  interactions  is  that  of  an  organization 
with  a  fixed  structure  which  processes  the  inputs  without 
resources.  It  is  represented  by  an  ordinary  Petn  Net  which 
can  be  aggregated  in  a  super-node  In*  I. 

Type  (b).  the  pattern  of  interactions  has  the  same 
characteristics  as  in  type  (a),  but  the  net  which  models  that 
pattern  exhibits  some  properties  of  symmetry.  A  more 
convenient  representation  is  obtained  by  folding  the  net 
The  Predicate  Transition  Net  which  is  obtained  is 
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Any  o*er  combination  of  type  (a),  (b).  (c),  or  (d)  can  be 
encountered  as  welL  In  particular.  the  number  and  diversity  of 
resources  required  and  the  lack  of  symmecy  of  the  pattern  of 
interaccoos  may  make  aggregation  ta  super-nodes  inappropriate. 
In  that  case,  the  net  w  hkh  would  appear  in  fig.  6  would  show 
»n  detail  all  the  stages  of  the  decisionmaking  process. 

No  matter  where  the  resource  places  arc  connected,  the  subnet 
which  is  subsumed  in  a  macro-transition  represents  a 
decisionmaking  organization  where  the  internal  processing  of  the 
input  is  modeled  by  the  four  stage  representation  that  was 
described  in  figure  1.  That  net  stands,  therefore,  for  an 
organization  with  fixed  structure,  which  is  to  sa>,  that  it  may 
contain  some  switches,  but  the  setting  of  these  switches  docs  not 
affect  the  structure  of  the  interactions  between  the 
decisionmakers  (whose  identity  ts  cot  defined).  If  each  switch 
is  aggregated  in  a  macro  transition,  then  the  ordinary  Petri  Nets 
which  are  obtained  are  all  marked  graphs,  i.e.,  a  place  can  have 
only  one  input  transition,  and  only  one  output  transition. 

Example:  Step  3 

In  the  example,  only  two  patterns  of  interactions  are  actually 
distinct:  one  where  the  HQ  interacts  with  a  FU,  and  one  where 
the  FU  processes  the  task  alone.  The  first  part  of  the  modeling 
consist  of  representing  these  patterns  m  detail  (fig.  7).  Thei  an 


Foe  the  first  pattern  of  interactions  two  resources  are  required, 
namely  HQ  and  FU.  The  resource  HQ  is  not  used  in  the 
decision  process  until  a  response  is  chosen,  and  can  be  free 
before  that  The  resource  FU,  however,  is  needed  from  the 
beginning  of  the  processing  to  the  end.  finally,  this  pattern  of 
interactions  is  such  that  no  aggregation  in  super-nodes  is 
possible.  For  the  second  pattern,  the  only  resource  used  is  FU, 
and  it  is  needed  during  the  whole  processing  of  the  input 

Switching  Module 

The  objective  of  this  module  is  the  representation  of  the  decision 
rule  which  determines,  for  any  incoming  input,  what  the  actual 
configuration  rf  the  organization  will  be  The  switching  module 
is  the  part  where  the  type  of  variability  of  the  organization  will 
be  modeled,  ft  supposes  that  the  first  three  sub-problems  have 
been  already  completed. 

A  switch  is  implemented  as  an  output  node  of  the  source  and  the 
resource  places.  This  switch  consists  of  a  set  of  transitions  with 
operators,  whose  arguments  are  the  individual  tokens  in  the 
source  and  resource  places.  Recall  that  a  DMO  with  type  I 
variability  is  being  modeled,  and  that  it  has  been  assumed  that 


404 


xer’wffi) 


c^cisssrfssp^tisqssodz^a^aKpcssS&pzzaraof 
cgrgaca.  7^if6;ggr^grft^sKsrftqga»f.6gg 
ggg  aicrhgxfcrt  5a  ±a  fffai 

A  drcaacc.TjHsg  ccgastrancta  pads  23  hrrsaa  aad  some 
rrsoemes  »  process  aa  iacomg  bpcL  Tbcg?e  1  vzriabk 
DJtOaJ^teh^ctcci^Jofrad^&cadicterf 
i^ajp^iasswj^SttofratcrRS.  Thcfccal 
soai5oa  for  tbs  cpss,  resources.  i^Ktioa,  asd  their 
retraces  « tie  fbEoxrsg: 

/^pixs 

-  Aai^xa2S2aia&Tds23M»ttaof\,2nab3cx. 

-  Too  sosree  phee  SO  is  associated  wbhvarhbSex. 

-  T1rst:of2liw2^kJs^forxtfss{l.-.r}. 

-  AntcprJofva^abkxbckKgswrbcdassXj. 
fliecx  =  L 

Resources 

-  The  resources  place;  arc  Rk  fork =  1,_  K. 

-  Tfcc  raceme  phee  Rk  is  isscoa^uidi  the  vriabSesc. 

-  lbcsctof2U<K«blciuCcaDcsfoc-Skisst  =  (l,— S^l 

Inerordors 

-  The  parens  of  ineractiaas  2rc  Intf{y).  for  7=  1,  _  T. 
There  arc  J  transitions  tj  in  the  switch. 
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lc^  Ist#($G)). 

Rdcuors 

-  The  inset x  requires  a  panern  of  inxxactioas  #^(xX 
Lc.Im#(y(x)). 

-  The  inpet  x  requires  sock  resources  from  Rk,  which 

are;  ra(k.  x)  =  (s^x)  I  n  =  1,  N(x)). 

-  -«(x)  and  ra(k.x)  for  any  k  are  functions  of  x. 

-  ^(j)  is  a  function  of  j;  <>  is  anadxd  to  the  switch- 

An  incoming  Input,  modeled  as  an  instance  of  an  individual 
token  x,  belongs  to  the  class  X;-  The  organization  is  type  1 
variable,  and  it  adapts  the  pattern  of  its  interactions  to  the  class 
of  the  incoming  input.  The  processing  of  the  input  x  requires  a 
specific  pattern  of  interactions,  namely  Int#(y(x)).  Since  the 
same  interactions  can  be  adopted  for  different  classes  of  inputs, 
the  function  7  is  not  btjeem  e,  and  the  number  V  of  interactions  is 
necessary  smaller  than  the  number  r  of  classes  of  inputs.  The 
processing  of  this  individual  token  x  also  needs  some  resources 
of  type  Rk,  given  by  the  set  of  individual  tokens  res(k,  x).  The 
transition  of  the  switch  which  corresponds  to  the  pattern  of 
interactions  Int#(tfx))  is  the  transition  t,  such  that  <>(j)  =l(*); 
there  is  only  one  j  such  that  this  relation  is  verified,  which  is 
denoted  as  Q*1  ()(*))• 

If  all  (he  conditions  stated  above  are  fulfilled,  (hen  the  input  x  is 
processed  i.e.,  for  $(j)  -  y(x>,  the  transition  i}  is  enabled  and 
fires.  The  operator  Op}  associated  with  tj  expresses  in  logical 
terms  the  above  conditions,  and  can  be  written  as  follows; 

(3  x  €  SO)  a  (  tfx)  =  #j) )  a  (3  res(k,  x),  Rka  res(k.  x))  (1) 

Since  the  transition  t.  corresponds  10  Inlff($(j»>  and  since  this 
pattern  of  interactions  may  be  needed  for  more  than  one  class  of 
input,  the  actual  operator  associated  with  t;  is  the  logical  OR  (v) 
of  the  operators  (1)  for  the  inputs  x  such  that  7(x)  =  Q(j).  i.e., 
for  all  the  inputs  x  in  the  set  T^OO)) 18  lx  I  T(x)  =  $0))*  The 
operator  Opj  associated  with  tj  is  finely  the  following. 

Opj  *  V  [(3  x  e  SO)  a  (3  res(k,  x).  Rk  a  res(k,  x))l  (2) 


Tbs  cysaw  (0^.  wiodi  are  asacbed  10  the  raaiaocs 

tj I  -  the  irrxhs  ol  the  y*zdx  -  arc  sorb  that  *as  following 
ccefixt  rcsobmoa  rule  a  verified.  foe  any  apa  x  a  tbs  place 
SO,  tiers  Is  cos  2nd  at  cxjss  ocerrznssoa  »  tie  sea  (l)  whxb  » 
enabled,  lbs  one  with  tbs  cumber  j  =  There  », 

therefore,  co  cocfHst  and  as  sooa  zs  tbs  required  resources 
raCfc,x)  are  available,  tj  can  fire. 

The  cocceooes  fcoca  tbs  pkce:Rk  to  nassiaca  u  arc  labeled  by 
the  set  L^v^fRy.  tp  whose  ekmerns  are  the  symbolic  sens  of 
the  IndrvKlcal  tokens  in  resffc.  x).  It  the  set  resfk,  x)  is  non 
espy,  the  cocnccmr  from  R*  to  t,  has  the  following  laid; 

|  >.£  L*<Sj)  I  >.=  2  S.J.X)  sad  7«  =  <Xi>j  0) 


Example:  Sup  4 

la  the  example,  the  switching  module  contains  two  transitions  t  j 
and  U-  Therefore, 

Inpms:  X={1.2,3,4). 

Resources: 

Rj  =  HQ,  associated  to  the  0-aiy  variable  C- 
R2  =  FU.  associated  to  the  variable:  s,  with  5*  {1,2}. 

Interactions: 

Intfl,  corresponding  to  transition  tj. 

Im #2,  corresponding  to  transition  t2. 

Relations.  For  any  input  x,  the  pattern  of  interactions  Imf?(ytx/; 
is; 

*KD=1 
*2)  =  i 
1(3)  =2 
K4)  =  2 

For  any  input  x,  the  required  resources  are: 

res(l,  1)  =  res(1, 2)  =  (Icj 
res(l,3)  =  rcs(l,4)a0 
res(2, 1)  =  {1] 
res(2, 2) » {2} 
res(2, 3)  =  { 1 } 
rcs(2,4)={2} 

The  operators  Opj  and  Op?  can  (hen  be  wniten  (without 
mentioning  the  quantifiers)  as  follows. 

Opfi  [(*  =*  1)  a  (s  **  1)]  v  |(x  =  2)  a  (s  =  2)}. 

Opj*  |(x  «  3)  a  (s  =*  l)j  v  [(x  »  4)  a  (s  «  2)J. 

The  operator:,  can  actually  be  aggregated  into  a  more  convenient 
form: 

Op|l  |l(X  »  1)  V  (X  =  2))  A  (s  =  *)]. 

Op:-  lii*  “  3)  V  (x = 4)j  A  (s  =  x-2)]. 

In  the  net  obtained  up  to  this  point  the  patterns  of  interactions, 
the  resources,  (he  source,  the  sink,  and  the  transitions  of  the 


405 


swiscb  arc  connected  together,  and  \hz  trznsitiocs  show  the 
operators  assigned  to  them.  The  patterns  of  isicacsoss, 
however.  are  soil  in  their  roost  aggregated  form.  aso  the 
ccsseooes  arc  cot  all  labeled  (fig.  8p  This  oct  is  not  yet  fully 
defined.  The  purpose  of  the  sou  module  w-fll  be  precisely  to 
make  tics  cct  fesefioaal  by  completing  its  annoemoo. 


Algorilhm  Implementation 

This  fifth  module  of  the  methodology  deals  with  the  labeling  of 
Ute  connectors,  with  the  definition  of  the  attributes  of  the  tokens 
which  can  be  found  at  different  places,  and  with  the  algorithm 
that  the  various  transitions  represent.  The  rules  of  firing  must 
also  be  established. 

Labeling  of  connectors:  The  connectors  f rom  the  source  to  the 
transitions  of  the  switch  are  labeled  x,  i.e.,  with  the  variable 
designating  the  class  of  the  inputs.  Those  from  the  input  nodes 
of  the  sink  to  the  sink  itself  are  labeled  C.  The  labels  of  the 
output  connectors  of  the  resource  place  R*  have  already  been 
given  in  Eq.  (3).  The  input  connectors  of  Rj.  arc  labeled 
accordingly. 

Each  pattern  of  interactions  Int#(y)  is  adopted  whenever  the 
incoming  class  of  input  x  is  such  that  y(x)  a  y.  When  x 
describes  the  set  of  classes  of  inputs  x,  the  number  of  times 
Int#(Y)  is  activated  is  equal  to  the  number  of  times  y(x) = y.  The 
connectors  which  arc  involved  in  the  representation  of  the 
organization  with  a  pattern  of  interaction  lnt#(y)  can  then  be 
labeled  with  a  variable  pj  whose  set  of  allowable  identities  is* 

ij«{i,2 . ri. 

These  labeling  rules  arc  the  most  general  that  can  be  presented, 
and  can  be  applied  to  any  case. 

Firing  rules:  The  firing  rules  are  actually  problem  dependent, 
and  can  be  revised  at  any  time.  However,  they  are  generally  the 
following: 

the  transitions  which  constitute  the  switch  arc  enabled  and 
fire  consecutively,  i  e.,  with  one  input  at  a  lime. 

the  transitions  which  are  part  of  the  subnets  representing  the 
possible  interactions  with  ordinary  Petri  Nets  are  enabled 
and  fire  in  the  same  consecutive  manner.  In  other  words,  if 


3  given  place  in  one  of  these  subnets  contains  more  than  one 
token,  in  only  output  transition  Coaly"  because  the  subnet 
is  an  event  graph)  is  enabled  by  more  than  one  token.  Bctit 
will  fire  them  ooly  one  by  one. 

'  the  transitions  uhicdi  arc  pan  of  the  subnets  representing  the 

possible  interactions  with  Predicate  Transition  Nets,  Le^ 
when  the  original  Petri  Net  has  been  folded,  can  allow 
simultaneous  firing;  depending  on  the  circumstances,  two 
tokens  in  the  same  place  can  enable  the  same  transition  at 
the  same  rime  and  leave  simultaneously  the  same  place. 

Depending  on  the  identity  of  the  individual  token  of  variable  p: 
which  enables  it,  a  particular  algorithm,  or  a  particular  switch,  is 
activated,  and  processes  the  input  that  the  token  represents. 
Depending  also  on  the  organization  that  the  net  models,  this 
transition  can \ery  well  consist  of  only  one  algorithm,  which  is 
always  activated  and  executed  when  the  transition  is  enabled  and 
fires,  regardless  of  the  identity  of  the  individual  token  which  has 
triggered  that  process.  The  rule  that  selects  the  algorithm  which 
will  process  the  token  that  enabled  the  transition  is  problem 
dependent,  and  as  such,  defined  for  each  particular  case. 

Example:  Step  5 

The  final  representation  of  the  example  is  given  in  Fig.  9.  Since 
the  organization  is  fairly  simple,  a  simplified  and 
self-explanatory  labeling  has  been  adopted. 


4.  EFFECTIVENESS  OF  A  TYPE  1  VARIABLE  DMO 

In  the  previous  section,  a  methodology  for  the  modeling  of 
VDMO’s  was  presented,  and  it  was  assumed  that  the  inputs 
were  partitioned  in  classes,  corresponding  to  specific  patterns  of 
interactions,  before  being  processed  by  the  organization  An 
example  of  a  three  member  variable  structure  organization  for 
which  this  assumption  is  relaxed  is  considered  in  this  section. 

The  organization  and  its  model 

We  consider  an  organization  composed  of  three  decisionmaking 
units,  the  Headquarters  (HQ)  and  two  Field  Units  (FU1  and 
FU2).  Its  mission  is  the  defense  of  a  given  area  against  aenal 
threats,  aircraft  or  missiles.  Each  incoming  threat  is  identified 
by  HQ,  and  its  location  determined  by  both  Field  Units  HQ 
communicates  then  the  identity  of  the  threat  to  the  FU's  who 
decide  to  fire  or  not  to  fire,  depending  on  that  information 
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DMO  s  ni:h  a  fixed  structure;  FDM 01  ard  FDM02 

Different  settings  for  the  interactions  between  the  DM's  arc 
possible.  In  the  first  case  (FDMOI),  the  HQ  and  the  FU's 
receive  simultaneously  the  input  and  HQ  sends  its  information 
on  the  identity  of  the  threat  to  each  of  the  FU's  at  the  same  time. 
They  each  fuse  their  assessement  of  the  situation  with  that 
infonnation,  and  give  a  response  to  the  threat  in  a  simultaneous 
way.  In  the  second  case  (FDM02),  only'FUl  receives 
information  from  HQ,  which  he  fuses  with  his  own  assessment 
of  the  situation  and  sends  to  FU2.  FU2  fuses  in  turn  this 
information  with  his  own  assessment  and  produces  the  final 
response  of  the  organization  (Figs.  10  and  1 1). 


Type  1 VDMO 

In  general  terms,  it  is  'egitimatc  to  suspect  that  FDMOI  would 
take  less  time  to  respond  than  FDM02,  since  the  two  Field  Units 
have  parallel  activities  in  the  first  case,  but  have  to  interact  in  the 
second.  However,  the  same  reason  may  result  in  the  response 
of  FDM02  being  more  accurate  than  the  one  of  FDMOI . 

An  organization  in  which  the  three  decisionmakers  would 
concurrently  and  simultaneously  assess  the  situation,  and  in 
which  Headquarters  would  decide  the  type  of  interactions  to  be 
adopted  between  the  FU’s  for  their  final  processing,  is  likely  to 
perform  better,  i  e.,  lower  processing  delay  and  higher  accuracy 
The  organization  which  would  be  obtained  that  way  would  be 
type- 1  variable,  and  the  Headquarters  in  that  case  would  play 
the  role  of  a  preprocessor.  The  inputs  arrive  and  are 
indistinguishable,  then  the  HQ  attaches  to  each  of  them  an 
attribute,  or  class,  which  determines  the  type  of  interactions  that 
are  best  suited  for  their  processing.  There  are,  therefore,  three 
candidates  for  that  air  defense  mission,  two  organizations  with  a 
fixed  structure  (FDMOI  and  FDM02),  and  a  variable  struct urc 
organization  (VDMO). 


PrTN  model  of  tkt  VDMO 

The  variable  organization  is  modeled  with  a  Predicate  Transition 
Net  using  the  methodology  developed  in  the  previous  section 
The  Situation  Assessment  stage  of  the  HQ  acts  as  a  source  of 
information  and  associates  an  attribute  u  to  the  incoming  token. 
What  results  is  an  hybrid  representation,  using  the  formalisms  of 
both  ordinary  Petri  Nets  and  Predicate  Transition  Nets.  The 
VDMO  is  shown  in  Fig.  12-  The  variable  controling  the 
variability  is  called  u,  whose  set  of  allowable  values  is  (0,1 } 
The  Situation  Assessment  stages  of  the  Field  Units  2ie  modeled 
with  the  conventional  representation.  After  an  input  has  been 
processed  in  these  stages,  the  FU’s  are  modeled  with  individual 
tokens  of  a  variable  x.  The  set  of  allowable  values  for  x  is  (1, 
2),  with  token  1  (resp.  2)  standing  for  FUI  (rcsp.  FU2). 

The  Inputs 

The  three  decisionmakers  are  geographically  dispersed.  They 
communicate  with  the  help  of  wired  links  or  radio.  The  threats 
are  characterized  by  their  radial  distance,  i  e.,  they  are  modeled 
as  occurences  on  a  line.  Their  position  on  this  line  is  measured 
by  a  variable  x,  x  €  10, 3J.  They  appear  one  at  a  time  and  they 
are  independent.  The  line  is  divided  in  three  sectors,  namely 
[0,11,  J!,2(,  and  [23).  Since  the  Field  Units  are  placed  close  to 
the  extreme  sectors,  they  perform  the  same  algorithm  that 
determines  the  position  of  th*  target  on  the  line,  but  wi*h 
different  accuracy,  depending  on  the  sector  in  which  the  target 
appears.  For  instance,  FU I  is  accurate  w  hen  a  threat  appears  in 
[0,11,  less  accurate  when  it  appears  in  ]1.2[,  and  even  less  when 
in  [2,3).  The  accuracy  of  FU2  is  analogous  to  FUl's. 
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Figure  12  Candidate  #3  VDMO. 


The  inputs  arc  instances  of  elements  x  of  an  alphabc*  X  A 
given  instance  is  modeled  by  the  pair  x  =  (z,  Name),  where  z  is 
a  real  in  [0,3]  and  Name  is  a  string  in  (00, 10, 01,  i  i  |  The 
name  of  the  input  represents  the  identity  of  the  threats.  They  can 
be  thought  as  being  types  of  aircraft,  or  types  of  behavior  The 
threats  whose  Name  is  00, 01,  or  10  represent  Foes,  and  have  to 
be  destroyed.  Only  1 1  is  Fnend. 

The  position  of  the  threat  on  the  line  is  denoted  by  z.  This  is  the 
actual  position,  but  the  Field  Units,  who  arc  in  charge  of 
determining  it,  only  achieve  their  own  measure  (z)  of  z.  In  other 
words,  each  of  them  has  an  interval  (of  uncertainty)  for  the  value 
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of  z.  The  accuracy  of  th.or  measure  decreases  with  remoteness. 
In  order  to  keep  the  computations  simple,  the  position  z  in  [0,3J 
is  discretized  such  that  only  30  different  positions  are  allowed, 

namely  1,  2 . 30.  Any  input  which  appears  actually  in 

[0.1*(i  -  1),  0.1*(i)[  is  called  z,,  where  i  is  an  integer  between  I 
and  30.  For  completeness,  the  last  interval  is  (2.9,  3.0}. 
Consequently,  the  alphabet  X  consists  of  elements 
x  »  (z,,  Namej),  with: 

Zj€  (1, 2. ..,30} 

Namej  e  {00, 01, 10, 1 1 },  for  j  =  1, ....  4. 


processing  delay  of  two  units  of  time  for  SA2(HQ)  anu  four 
units  of  time  for  SA1(HQ). 

Internal  Strategies 

The  set  of  alternative  algorithms  that  the  decisionmakers  possess 
leads  to  the  definition  of  their  internal  strategies.  The  variables 
Uj,  U2,  and  u3  are  first  defined  to  have  their  set  of  values  equal 
to  { 1, 2),  ana  to  correspond  to  the  settings  of  the  switch  of  the 
situation  assessement  stage  of  FU1,  FU2,  and  HQ,  respectively. 
The  variable  uj  for  instance  is  set  to: 


Strategies  of  the  DM’s  and  Cost  Matrix 

For  any  incoming  input  x\,  the  Field  Units  determine  the 
position  of  the  threat,  and  the  Headquarters  identifies  its  Name, 

Situation  Assessement 

Each  FU's  has  the  same  set  of  two  algorithms  in  the  SA  stage, 
called  SA1(FU)  and  SA2(FU).  SAl(FU)  is  more  accurate  than 
SA2(FU),  and,  as  a  result,  takes  more  time  to  produce  a 
response.  Each  algorithm  yields  a  measure  of  the  position  of  an 
input  x:  with  precision  S  represented  by  an  integer.  A  precision 
of  1  means  that  there  is  no  uncertainty  in  the  knowledge  of  z,, 
and  that  the  measure  of  its  position  (z,}  is  equal  to  z,.  The 
interval  of  uncertainty  is  reduced  to  {z,}.  A  precision  of  3 
means  that  the  measure  {z,}  can  be  at  any  one  of  hrec  different 
positions:  (z,  - 1,  z,,  zj  +  1  j. 

The  algorithms  used  in  the  Situation  Assessment  of  the  Field 
Units  are  characterized  by  the  precision  ihey  can  achieve.  In  this 
model,  precision  is  taken  as  a  funenon  of  the  sector  to  which  the 
threat  belongs,  the  precision  6  is  supposed  to  be  a  linear 
function  of  ti.e  remoteness,  at  least  ui  this  range  of  positions  of 
the  threat. 


uj  =  1  if  FU1  processes  its  input  with  the  algorithm  SAL 

Uj  =  2  if  FU1  processes  its  input  with  thealgorithm  SA2. 

The  variables  u2  and  u*  are  determined  accordingly.  Now  the 
internal  strategy  of  FUl,  D(FU1),  is  the  probability  distribution 
of  the  variable  uj,  as  indicated  in  the  following: 


D(FU1)  -  p(u|)  =  (p(u,  =  1),  p(u,  =  2)}. 
D(FU2)  =  p(U2)  =  (p(u2  =  1),  p(u2  =  2)}. 
D(HQ)  =  p(u3)  =  {p(u3  =  1),  p(u3  =  2)}. 


A  decisionmaker  uses  a  Pure  Strategy  when  he  always  processes 
the  incoming  input  with  the  same  algorithm  Otherwise,  he  uses 
a  Mixed  Strategy.  In  the  present  case,  each  DM  possesses  two 
pure  internal  strategies. 


Information  Fusion  stages 


The  time  delay  of  the  Information  Fusion  stages  is  a  function  of 
the  number  of  inputs  to  be  fused.  If  two  inputs  have  to  be 
fused,  the  processing  delay  is  one  unit  of  time  If  three  inputs 
have  to  be  fused,  the  delay  will  be  two  units  of  time.  All  otl  c 
algorithms  have  associated  a  delay  of  one. 


-  Algorithm  SA1(FU)  for  FUl : 

l£i£10  =>  3=1 

U  Si  £20  =*  5  =  3 

21  Si  £30  =*  5  =  5 

«■  Algorithm  SA2(FU)  for  FUl: 

i  Si  £  10  =*  5=3 

11  £i£20  =*  5=5 

21  S  i  S  30  =>  5=10 

The  precision  of  measurements  for  FU2  are  deduced  from  the 
above  by  setting  i'  -» (30  -  i).  The  values  of  5  are  quantized 
so  that  they  are  the  same  wherever  the  threat  appears  in  a  given 
sector.  Their  dependence  on  the  distance  has  been  set  to  account 
for  a  rapid  decrease  in  accuracy  when  the  distance  increases. 
The  delay  of  the  second  algorithm  h~>  been  set  arbitrarily  at  one 
unit  of  time.  At  this  point,  we  assume  that  if  one  obtains  a 
measurement  with  precision  6  but  spends  T  units  of  time  in  that 
operation,  then  one  will  require  more  than  2T  units  of  time  to 
obtain  a  precision  5/2.  Since  the  first  algorithm  is  twice  as 
accurate  as  the  second  one,  the  processing  delay  of  the  first  one 
is  set  to  three  units  of  time. 


When  the  two  Field  Units  fuse  their  measurements  of  the 
position  of  the  threats,  precision  is  increased,  if  these 
measurements  arc  consistent.  If  two  measurements  of  the  same 
input  withprccision  5i  and  52  arc  fused  into  a  measurement  with 
precision  5  =  Fu$(5j,  o^,  then  the  results  arc  as  follows: 


TABLE  1  Precision  of  Fused  Information. 

Fus(L-)  =  1  Fus(5,-5)  =  3 

Fus(3, 5)  =  2  Fu$(5, 10)  =  5 

Fu$(3, 5)  =  2  Fu$(10,  10)  =  10 

Fus(3, 10)  =  3 

Response  Selection  Stage  and  Cost  Matrix 

The  decisionmaker  in  each  Field  Unit  can  either  allocate  a  missile 
to  the  target,  or  do  nothing.  If  he  sends  a  missile  to  the  position 
where  he  has  measured  the  threat  to  be  located,  then  he  can 
ether  hit  the  target  or  miss  a,  depending  on  the  accuracy  of  his 
measure.  The  FU’s  response  is  denoted  by  y,  the  target 
coordinates,  y  can  take  the  values  x,  if  the  missile  is  sent  exactly 
where  the  target  is,  lx,  if  a  missile  is  sent  to  a  wrong  position, 
and  t  if  no  missile  is  sent. 


The  Headquarters  possesses  a  set  of  two  algorithms  in  its  SA 
stage.  The  first  one,  SAl(HQ),  identifies  the  name  of  the  threat 
by  reading  the  two  characters  of  the  string.  In  that  case,  the 
threat  is  completely  identified.  The  second  algorithm,  SA2(HQ>, 
only  reads  the  first  character  of  the  string  and  is  less  accurate 
than  the  first  one.  The  same  argument  as  above  leads  to  a 


The  ideal  response  for  a  Friend  (Name  11)  is  to  do  nothing, 
whereas  the  ideal  one  for  a  Foe  is  to  destroy  it  There  is, 
furthermore,  a  penalty  for  an  over-consumption  of  missiles 
The  cost  associated  with  any  discrepancy  between  the  ideal  and 
the  actual  responses  is  indicated  in  the  following  cost  matnx 
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TABLE  2  Cost  Matrix. 
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In  that  matrix,  the  left  column  corresponds  to  the  ideal  response 
of- the  organization.  The  top  row  labeled  Xj  indicates  the 
response  of  FUI,  whereas  the  one  labeled  x?  represents  the 
response  of  FU2.  The  costs  are  adjusted  to  reflect  subjectively 
the  ranking  of  the  actual  responses  of  the  organization.  For 
example,  the  idea!  response  for  a  Friend  inpu!  is  for  the  Field 
‘  Units  to  take  no  action,  i.e.,  xj  and  to  be  inactive  (t).  If  one 
missile  is  targets!  to  the  wrong  coordinates,  in  other  words  if 
xj  =  f,  and  x^  =  1  x,  (or  the  reverse),  then  the  cost  of  wasting 
one  missile  is  estimated  to  be  one.  The  cost  of  targetting 
accurately  a  Friend  is  three.  These  values  can  be  modified  to 
account  for  any  other  set  of  beliefs. 

The  probability  distribution  of  the  occurences  of  the  inputs  is 
assumed  to  be  uniform,  unless  otherwise  specified.  The 
probability  for  the  input  x  of  the  alphabet  X  of  having  its  Name 
equal  to  a  given  Namej  is  then  1/4,  whereas  the  probability  that 
this  input  has  a  position  equal  to  a  specific  z,  is  1/30.  We  have 
then: 

p(x  =  (z,.  Name.))®  1/120, 

for  all  z*  in  30}  and  all  Name,  in  {00, 01, 10, 11) 
Measures  of  Performance 

Measures  of  Performance  (MOPs)  are  quantities  which  describe 
the  system  properties.  The  MOP’S  are  functions  of  the  system 
parameters  and  of  the  organizational  strategy  adopted  by  the 
organization.  The  two  MOP's  considered  here  arc  Accuracy  and 
Timeliness . 

Accuracy,  denoted  by  J,  is  a  measure  of  the  degree  to  which  the 
actual  response  of  the  organization  to  a  given  input  matches  the 
ideal  response  for  that  same  input.  If  we  denote  by 

-  X  the  alphabet  of  inputs  x,:  X  ®  {xj,  X2* ....  xn), 

-  Y  the  alphabet  of  outputs  y,:  Y  =  {y|,  y%. yq), 

p(xfli  the  probability  of  occurence  of  the  input  xj,  with 
£p(xj)=l, 

*  y,j(Xj)  the  ideal  (or  desired)  response  to  x:, 

*  yjn(xj),  j  »  l,...,q,  the  response  that  the  DMO  actually 
produces, 

C(yd,  ya)  the  cost  of  the  discrepancy  between  the  ideal  and 
the  actual  responses, 

then  a  measure  of  Accuracy  of  the  DMO  is: 

1  *  Z  p<x,>  tj  CW-  y ./*,»  p(y./\> '  *,)  «> 

ml  j*I 

Timeliness,  denoted  as  T,  is  the  ability  to  respond  to  the  input 
with  a  time  delay  Td  which  is  within  the  allotted  time 
Pjnw»Tmaxl»  called  the  window  of  opportunity.  If  we  denote  by 


Td(Xj)  the  average  processing  delay  of  X;, 

In  the  characteristic  function  on  the  set  O, 

then  a  measure  of  Timeliness  of  the  DMO  is  the  expected  value 
of  the  processing  delay:  . 

<S) 

The  performance  of  the  organization  is  a  function  of  the  strategy 
of  the  organization  as  a  whole,  or  organizational  strategy,  which 
is  given  by  the  triplet: 

S  =  (D(FU1),  D(FU2),  D(HQ)}. 

Since  the  three  switches  which  arc  present  m  the  organization  are 
in  the  Situation  Assessment  stages,  the  internal  strategies  are 
not  formulated  with  probabilities  conditioned  by  the  inputs 
There  arc,  therefore,  eight  Pure  Organizational  Strategies,  which 
are  the  triplets  of  the  pure  internal  strategies  These  Pure 
Strategies  S,,  i  =  1,  .,  8,  can  be  defined  by  the  algorithms  the 
DM’s  are  using,  as  follows  (the  order  is  FUI,  FU2,  HQ). 

S,=*(SAl,SAl,SAn 
S2=»(SA1,SA2,  SAlj 
S3®  (SA2,  SA1.SA1) 

S4  =  (SA2,  SA2,  SA1) 

S5«(SA1,SA1,SA2) 

(SA1.SA2,  SA2) 

S7  =  (SA2,  SA1.SA2) 

S8»(SA2,SA2,SA2) 

The  application  of  Eqs.  (4)  and  (5)  gives  immediately  the  values 
for  Accuracy  J  and  Timeliness  T  for  FDMOl  and  FDM02,  for 
each  Pure  Strategy  S,,  The  results  are  shown  in  Table  3,  with  T 
in  units  of  time. 

The  type  1  VDMO  beeing  considered  adapts  the  interactions 
between  the  Field  Units  to  the  inputs  that  they  have  to  process 
We  consider  the  case  where  the  inputs  arc  distinguished  on  the 
basis  of  the  sectors  in  which  they  have  appeared.  HQ  is 
assumed  to  be  able  to  determine  the  sectors  of  occurence  of  the 
threat,  which  the  FU’s  either  cannot  do.  or  can  do  but  have  to 
wait  for  the  HQ's  command.  HQ,  therefore,  sets  the 
interactions  between  the  FU’s  to  be  as  in  FDMOl  when  the 
threat  occurs  in  the  extreme  sectors  10, 1J  and  (2, 3),  and  as  m 
FDM02  when  the  threat  is  in  )1, 2(„  In  the  former  case,  there  is 
no  real  need  for  the  Field  Units  to  interact  since  at  least  one  of 
them  has  an  accurate  measurement  of  the  position  of  the  threat. 
In  the  latter  case,  however,  the  precision  of  the  measurement  is 
increased  because  the  FU’s  fuse  their  information,  and,  in 
doing  $0,  reduce  the  interval  of  uncertainty  of  their  respective 
measurements. 

When  compared  to  FDMOl,  VDMO  is  likely  to  have  an 
improved  accuracy  of  response  when  the  threat  appears  in  Jl,2{. 
When  compared  to  FDM02,  VDMO  will  have  a  lower  response 
time  when  the  threat  appears  in  the  extreme  sectors.  The  results 
for  Accuracy  and  Timeliness  for  the  VDMO  are  shown  in 
Table  3,  for  the  eight  Pure  Strategies, 

A  behavioral  organizational  strategy  is  constructed  by 
considenng  the  probability  distributions  of  choosing  a  particular 
algorithm  at  each  switch  In  the  present  case,  such  a  strategy  is 
completely  defined  by  the  triplet  Iplulj,  pt.u2j,  p(u3jl  The 
resulting  strategy  space  for  the  organization  is  the  set  10,  Ip 
The  system  lou  for  the  two  organizations  with  a  fixed  stiuuute. 
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i.c  ,  FDM01  and  FDM02,  arc  depicted  in  Fig  13  They  are 
disjoint,  and  no  matterwhat  Organizational  Strategy's  used  m 
any  of  the  two  organizations,  FDM02  needs  more  time  to 
respond.  As  indicated  in  Fig.  13,  the  whole  locus  for  FDMOl  is 
to  the  left  of  the  line  T  =  7  units  of  time,  wnereas  the  one  for 
FDM02  is  to  the  nght  of  the  line  T  =  9  units  of  time. 


TABLE  3  Accuracy  and  .Timeliness  forthe  Pure  Strategies. 
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The  same  methodology  for  evaluating  the  MOPs  applies  to  the 
organization  with  a  variable  structure,  the  VDMO.  The  system 
locus  of- VDMO  is  shown  also  in  Fig.  13.  As  expected,  the 
variable  structure  organization  is,  on  the  average,  faster  to 
respond  than  the  fixed  structure  organization  in  which  the  Field 
Units  have  to  interact  (FDM02),  precisely  because  they  do  no* 
always  interact  in  VDMO.  VDMO  is  also,  on  the  average,  more 
accurate  than  FDMOl,  since  the  FU's  in  the  VDMO  interact  as 
needed  to  improve  their  measurements  of  the  position  of  the 
target. 

The  computation  of  the  performance  of  an  organization  for  any 
behavioral  strategy  and  the  representation  of  its  system  locus  are 
not  sufficient  to  allow  the  designer  to  select  the  best  organization 
among  a  set  of  candidates.  The  mission  the  organization  has  to 
fulfill  has  to  be  taken  into  account.  This  mission  is  described  in 
terms  of  a  pair  (T*\  J°)  of  constraints  on  performance.  A 
convenient  representation  of  the  Effectiveness  of  a  DMO  is  a 
three  dimensional  locus  (T°,  J°,  E(T°,  J0)),  called  diagram  of 
consistency.  In  such  a  locus,  E(T°,  J°)  is  the  percentage  of 
strategies  for  which  the  performance  of  the  DMO  (T,  J)  meets 
the  requirements  of  the  mission  (T  £  T°,  J  £  J°).  The 
effectiveness  measure  Efl^,  P)  takes  a  value  between  0  and  1, 
with  0  corresponding  to  no  strategy  at  all  satisfying  the  mission, 
and  1  meaning  that  all  admissible  strategies  lead  to  satisficing 
performance. 

The  diagrams  of  consistency  for  the  three  candidate 
organizational  structures  arc  depicted  in  Fig.  14  (for  FDMOl), 
Fig.  15  (for  FDM02)  and  Fig.  X6(for  VDMO).  In  these 
diagrams,  the  variables  X,  Y  and  Z  correspond  to  J,  T,  and  E, 
respectively.  The  figures  show  clearly  that  FDMOl  has  a  higher 
effectiveness  than  any  of  the  other  two  organizations  in  the 
region  of  stringent  constraints  on  Timeliness  but  not  on 
Accuracy.  Conversely,  FDM02  is  the  most  effective  when  the 
mission  requires  high  Accuracy. 


Figure  13  System  Loci  for  VDMO, 
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Figure  14-  Diagram  of  Consistency  forFDMOl, 


Since  the  Effectiveness  of  each  of  the  three  design  candidate* 
has  been  computed,  for  any  given  mission  defined  by  it* 
requirements  (T^,  J°),  the  organization  which  has  the  highest 
effectiveness  for  a  specific  mission  can  be  selected.  More  than 
one  organization  can,  of  course,  achieve  the  same  Effectiveness. 
Then  each  organization  has  associated  a  range  of  mission 
requirements  (T°,  J°)  in  the  MOP  space,  such  that  for  any 
mission  requirements  (T°,  J°)  within  that  subset,  that 
organization  will  have  higher  effectiveness  than  ail  the  other 
candidates.  This  defines  a  partitioning  of  the  requirements  space 
(T,  J)  in  areas  corresponding  to  each  organization,  or  set  of 
organizations,  if  the  maximum  effectiveness  is  obtained  for 
several  designs  for  the  same  mission  requirements. 


The  computation  of  the  measure  of  effectiveness  &  tor  each 
design  candidate  has  been  done  for  discrete  values  ot  TO  and  J° 
Thirty  three  values  for  the  Timeliness  requirement  T°,  ranging 
from  4.00  to  12.C0,  and  thirty  six  values  for  the  Accuracy 
requirement  JO,  ranging  from  0.50  to  4.00,  have  been  used 
This  resulting  grid  of  33  x  35  values  for  the  effectiveness  of 
each  candidate  was  then  used  to  determine  the  ranges  ot  mission 
requirements  for  which  each  candidate  is  the  most  elective  The 
precision  of  the  determination  of  these  ranges  is  ot  course  a 
function  of  the  size  of  the  gnd  This  explains,  tor  instance,  the 
occasional  piecewise  linear  bonier  between  zones. 


Such  a  partitioning  is  represented  in  Figure  IT.  There  are  seven 
distinct  areas.  The  first  area,  with  nc  . shading  pattern, 
corresponds  to  the  set  of  mission  requirements  for  which  all 
organizations  have  an  effectiveness  equal  to  0,  i.c.,  there  is  no 
organizational  strategy  that  can  meet  the  mission  requirements. 
The  area  labeled  FDMOl  is  the  one  in  which  FDMOl  is  the  most 
effective;  its  non-zero  measure  of  effectiveness  is  higher  or  equal 
to  the  measure  of  effectiveness  of  FDM02.  The  areas  labeled 
VDMO  and  FDM02  are  the  ones  for  which  VDMO  and  FDM02 
are  most  effective.  In  the  fifth  area,  which  is  labeled 
FDMOl+VDMO,  both  organizations  have  an  effectiveness  of  1, 
which  means  that  for  both  any  organizational  strategy  will  meet 
completely  the  requirements  of  the  mission.  There  is  no 
rationale  in  that  case  to  select  one  organization  over  the  other 
There  is  no  region  corresponding  to  FDM01+FDM02.  In  the 
region  (FDMOI+FDM02+VDMO),  all  three  designs  meet 
totally  the  requirements. 


5.  CONCLUSIONS 

In  the  previous  sections,  the  need  for  variable  structure 
organizations  has  been  described  and  the  concept  of  variability 
discussed.  A  methodology  for  modeling  variuole  structure 
decisionmaking  organizations  that  is  based  on  Predicate 
Transition  Nets  has  been  presented.  The  approach  was  then  used 
to  model  a  variable  structure  organization  and  then  analyze  it 
with  the  tools  that  have  been  developed  earlier  for  fixed  structure 
organizations.  It  has  been  shown  that  one  can  not  decide 
whether  a  VDMO  performs  better  than  an  organization  with  a 
fixed  structure,  unless  the  specific  mission  requirements  arc 
taken  into  wousideration.  Then  ranges  of  mission  requirements 
have  been  identified  for  which  specific  organizational  designs 
are  most  effective.  If  the  requirements  are  such  that  the  best 
design  is  the  one  with  variable  patterns  of  interactions,  then  the 
VDMO  should  be  considered.  If  they  are  not,  then  there  is  no 
need  to  introduce  variability,  since  a  VDMO  would  not  perform 
any  better.  A  fixed  organizational  structure  would  require  a 
simpler  G*  system  to  support  it. 

If  the  requirements  arc  met  both  by  a  variable  structure 
organization  and  an  organization  with  a  fixed  structure,  then 
other  criteria  may  bc  used  at  this  point,  such  as,  for  instance,  the 
robustness  of  a  design,  which  would  favor  a  fixed  structure 
DMO  since  it  is  less  sensitive  to  noise  or  jamming.  These 
criteria  have  not  been  addressed  in  this  paper,  but  would 
constitute  the  next  step  toward  the  modeling  of  more  realistic 
decisionmaking  organizations. 
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ORGANIZATION  THEORY  AND  C3 
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Our  approach  to  command  and  control 
assessment  draws  heavily  on  the  Carnegie 
School  of  organization  theory  as  developed 
in  the  classic  works  of  Simon,  Cyert,  and 
March.  This  approach  rests  on  a  key 
premise:  certain  fundamental  cognitive 

constraints  severely  limit  the  human  ca¬ 
pacity  for  rational  action.  Limits  on  the 
amount  of  information  that  can  be 
attended  to  force  people  to  respond  to.  only 
limited  aspects  of  their  environment.  And 
limits  on  the  ability  actively  to  manipulate 
conceptual  information  force  people  to  rely 
on  relatively  simple  mental  strategies  that 
frequently  violate  conventional  notions  of 
rational  inference  and  choice.  Organiza¬ 
tions  may  be  viewed  as  devices  for  over¬ 
coming  these  individual  cognitive  limits. 
Through  specialization,  individuals  acquire 
the  capacity  to  apply  relatively  complex 
cognitive  strategics  (based  on  very  effi¬ 
cient  information  coding  schemes)  to  nar¬ 
rowly  defined  task  environments.  Through 
division  of  labor,  substantial  cognitive 
resources  can  be  simultaneously  brought  to 
bear  on  many  tasks  or  information  sources 
at  a  time. 

Modern  warfare  represents  the  clash  of 
two,  rival  organizations,  each  bent  on  con¬ 
taining  or  destroying  the  other.  Adopting 
an  organizational  perspective  for 
evaluating  competing  military 
organizations  -  such  as  the  NATO  and 
Warsaw  Pact  organizations  —  generates  a 
different  set  of  questions  and  focuses 
attention  on  different  issues  than  the 
traditional  forms  of  force  balance 
calculations  and  threat  assessment.  In 
particular,  the  focus  shifts  from  relative 
firepower,  technological  properties  of 
weapons  systems,  and  numbers  of  men 
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and  equipment  to  the  organizational 
capabilities  of  military  units  and  to  the 
ways  in  which  the  various  components  of 
military  units  act  in  a  coordinated  way. 

What  can  the  complex  of  men  and 
equipment  do,  how  well,  how  quickly,  and 
under  what  conditions?  A  central  issue  in 
determining  the  organizational  capabilities 
of  a  large,  military  force  concerns  the 
aggregate  division  of  labor  in  the  force: 
what  are  the  component  units  and  what 
are  their  special  capabilities?  For  a  given 
division  of  labor,  how  do  the  component 
units  work  together  and  how  arc  they 
coordinated  so  as  to  perform  a  set  of  func¬ 
tions  beyond  the  capabilities  of  any  single 
unit? 

A  second  set  of  issues  is  the  natural  by 
product  of  organization  structure;  namely, 
formal  organizational  divisions  or 
"seams." 

Formal  organizational  boundaries  are 
important  in  that  they  usually  define  areas 
where  all  aspects  of  a  subunit's  operations, 
within  boundaries,"  are  organic  to  the 
subunit,  whereas  operations  involving 
other  subunits  -  "across  boundaries"  - 
involve  explicit  inter-unit  coordination  and 
planning.  Organizational  boundaries  -  the 
"seams"  in  the  organization  -  are  impor¬ 
tant  to  a  military  offense  because  they 
define  what  units  require  explicit  coordi¬ 
nation  from  a  command  point  of  view. 
Organizational  seams  are  important  to  a 
military  organization  in  a  defensive 
posture  because  they  represent  points 
where  the  disruption  of  explicit,  inter-unit 
communications  in  real  lime  will  do  more 
to  disrupt  overall  capabilities  than  the  dis¬ 
ruption  of  intra-unit  communications.  This 
is  simply  because  inter-unit  coordination 


raore  °jten  involves  explicit 
communication  and  coordination  and  intra- 
umt.  coordination  more  often  involves  tacit 
forms  of  coordination  in  addition  to,  but 
often  in,  place- of,  explicit  communication. 

Coordination  is  the  Achilles  heel  of  the 
organizational  strategy  of  overcoming  indi¬ 
vidual  cognitive  limits  through  specializa¬ 
tion  and  division  of  labor.  The  efforts  of 
numerous  individuals  and  separate  groups 
of  individuals  must  be  structured  to  form 
coherent  and  useful  patterns  of  activity. 
But  this  structuring  task  itself  can  easily 
become  so  complex  as  to  overwhelm  the 
cognitive  capacities  of  those  who  must  car¬ 
ry  it  out.  Indeed,  the  high  frequency  of 
“coordination  failures"  suggests  that  such 
problems  commonly  occur. 

The  military  command  and  control 
process  embraces  all  of  the  information 
processing  activities  associated  with  mon¬ 
itoring  the  environment  for  problems  and 
opportunities,  formulating  alternatives, 
deciding  between  alternatives,  issuing 
mission  orders  and  instructions  and 
monitorng  and  controlling  the  execution  of 
assigned  missions.  All  of  these  tasks 
involve  coordination  among  many  parts  of 
the  command  organization,  both  vertically 
within  the  chain  of  command,  and  hori¬ 
zontal  beyond  it  into  the  chain  of  command 
of  equivalent  or  parallel  organizations. 
Adjacent  army  groups,  corps,  divisions  are 
examples  of  this  latter  point.  The 
additional  coordination  requirement  for  air 
forces  to  support  ground  forces  through 
battlefield  air  interdiction  or  close  air 
support  missions  adds  another  layer  of 
complexity.  Air  forces  within  NATO  not 
only  have  their  own  command  structure, 
but  they  operate  with  radically  different 
equipment,  training,  doctrine,  require¬ 
ments  and  ethos  than  do  ground  forces. 

In  adopting  an  organizational  focus  for 
C31  research,  attention  is  immediately 
drawn  to  the  question  of  what  is  being 
coordinated  with  what  and  the  prominent 
role  that  the  formal  structure  of  the  orga¬ 
nization  plays.  An  organizational  approach 
to  C31  is  particularly  important  in  two 
different  types  of  situations:  i)  where  the 
functioning  of  an  organization  depends 
crucially  upon  explicit  coordination,  com¬ 
munication,  command  and  control,  across 
significant  organizational  boundaries,  and 


it)  where  the  functioning  of  a  subunit  of 
tpe  organization  is  automatic  or  involves 
the  execution  of  standard  operating  proce- 


currcm  organizational  structure  of 
NATO  evolved  from  political  agreements 
about  the  post  war  structure  of  Europe,  the 
formation  of  the  Atlantic  Alliance,  and  the 
sensitivities  of  individual  member  nations, 
while  relatively  stable  concerning  national 
!n  'he  command  structure  of 
NATO  military  forces,  the  Alliance  military 
structure  also  reflects  the  growing  impor¬ 
tance  and  military  strength  of  the  Federal 
Republic  of  Germany,  and  the  worldwide 
economic  and  military  strength  of  the 
United  States.  It  is  anything  but  conducive 
to  the  integration  of  the  multi-national 
forces  into  a  single,  well-coordinated  mili¬ 
tary  force. 

SACEUR  (Supreme  Allied  Commander 
Europe  is  an  U.S.  general  officer  who  is  also 
the  U.S.  Commander  in  Chief,  Europe,  in 
peacetime)  is  the  most  prominent  of  three 
distinct  major  commanders  in  NATO.  The 
Supreme  Allied  Commander  Atlantic 
(SACLANT)  and  Commander-in-Chief 
Channel  (CINC1IAN)  are  the  other  two 
major  commands.  There  are  six  separate 
commands  on  the  level  beneath  SACEUR  in 
the  NATO  hierarchy,  each  of  these  with  two 
or  three  separate  commands  beneath  it, 
and  each  filled  by  a  military  commander  of 
a  different  nationality. 

In  the  NATO  Central  Region,  that 
includes  the  geographic  territory  of 
Belgium,  the  Federal  Republic  of  Germany, 
Luxembourg,  and  the  Netherlands,  the  joint 
forces  commander  is  Commander-in-Chief 
Allied  Forces  Central  Europe  (CINCCENT). 
He  is  a  German  general  officer,  one  level 
below  SACEUR  in  the  NATO  structure.  His 
command  is  further  subdivided  into:  the 
Northern  Army  Group  (NORTHAG,  com¬ 
manded  by  a  British  general  officer  who  is 
also  Commander,  British  Army  of  the 
Rhine,  in  peacetime),  Allied  Air  Forces 
Central  Europe  (AAFCE,  with  a  US  com¬ 
mander  who  is  also  commander  of  U.S. 
Airforces,  Europe  in  peacetime),  and  the 
Central  Army  Group  (CENTAG,  also 


commanded  by  a  U.S.  general  officer  who 
serves  as  CINC  U.S.  Army,  Europe,  in 
peacetime).  AAFCE  has  within  it  the  sepa¬ 
rate  commands  of  Second  and  Fourth 
Allied  Tactical  Air  Forces  (TWO  and 
FOURATAF).  TWOATAF,  to  a  great  extent, 
reflet  the  operating  style  of  the  Royal. Air 
Force  although  its  headquarters  organiza¬ 
tion  reflects  the  multinational  character  of 
the  forces  (Belgique,  Netherlands,  German, 
U.S.  and  U.K.).  it  will  command  in  wartime. 
FOURATAF,  on  the  otherhand,  is  dominated 
by  the  Unites  States  Air  Force  and  reflects 
U.S.  organizational  and'  crating  style, 
attitudes  and  concepts  of  operations. 

This  highly  disintegrated  chain  of 
command  is  largely  a  product  of,  and  is 
further  exacerbated  by,  political  consider¬ 
ations  .  There  is  an  absolute  requirement 
within  NATO,  institutionalized  through 
political  reality  and  administrative  proce¬ 
dure,  to  preserve  a  degree  of  national 
sovereignty  in  military  affairs,  a  constraint 
that  does  not  impede  the  Warsaw  Treaty 
Organization.  An  additional,  potentially 
problematic  characteristic  of  the  NATO 
deployment  of  forces  in  Central  Europe  is 
the  division  of  the  East-West  border  into 
territorial  slices,  "layer  cake"  fashion,  with 
each  layer  defended  by  the  forces  of  one 
nation.  Thus,  at  minimum,  the  forces  of 
five  nations  (the  US,  West  Germany,  the 
Netherlands,  the  United  Kingdom  and  Bel¬ 
gium)  will  be  arrayed  along  the  front.  It  is 
possible  that  if  the  NATO  position  began  to 
deteriorate,  the  French  would  also  move 
forward  to  take  a  slice  of  their  own,  or  be 
employed  as  a  reserve  coming  in  on  top  of 
any  of  the  national  corps  sectors,  or  at  a 
corps  boundary. 

Even  from  this  superficial  description 
of  the  organizational  structure  at  echeions 
above  corp,  it  is  simple  to  conclude  that  the 
C3  and  coordination  requirements  for  for 
fighting  a  joint  and  combined  conventional 
war  with  a  multinational  alliance  in  Central 
Europe  are  enormous.  That  these  require¬ 
ments  be  met  is  also  of  the  utmost 
importance  as  more  and  more  emphasis  is 
placed  upon  the  importance  of 
conventional  defense  of  Europe  to  support 
deterrence.  C3  failures  make  cheap 
victories  possible,  as  the  fall  of  France  in 
1940  and  the  collapse  of  South  Vietnam 
armed  forces  in  1975  point  out. 


THECARNEG1E  SCHOOL  OF  ORGANIZATION 
JHEQRY 

The  analysis  of  command  and  control 
presented  here  is  based  on  the  tenets  of 
"organization  theory"  derived  from  an 
analysis  of  the  behavioral  limits  and  capa¬ 
bilities  of  individuals  and  of  organizations. 
Drawn  from  the  classic  writings  of  Richard 
Cyert,  Herbert  Simon,  and  James  March, 
the  "Carnegie  School"  of  organization 
theory  is  a  set  of  propositions,  inferences, 
and  hypotheses  drawn  from  research  in 
cognitive  psychology  and  human  behavior 
and  adapted  to  the  description,  analysis, 
and  measurement  of  behavioral  variance 
in  collections  of  individuals,  commonly 
known  as  organizations.  This  approach, 
well  known  in  its  application  to  problems 
of  business  and  industrial  management, 
has  been  applied  to  problems  of  command 
and  control  by  John  P.  Crccine,  Gregory 
Fischer,  Robert  Coulam  and  Michael 
Salomone  at  Carnegie  Mellon  University  in 
the  early  1980s,  and  most  recently  by  the 
authors  focusing  on  the  organizational 
seams  in  the  NATO  Central  Region  from 
theater  to  division  level. 

BOUNDED  RATIONALITY 

The  Carnegie  approach  rests  on  a  key 
premise:  certain  fundamental  cognitive 
constraints  severely  limit  the  human 
capacity  for  rational  action.  Limits  on  the 
amount  of  information  that  can  be 
attended  to  force  people  to  respond  to  only 
limited  aspects  of  their  environment.  1  And 
limits  on  the  ability  actively  to  manipulate 
conceptual  information  force  people  to  rely 
on  relatively  simple  mental  strategies  that 
frequently  violate  conventional  notions  of 
rational  inference  and  choice.2 

Organizations  may  be  viewed  as  de¬ 
vices  for  overcoming  individual  cognitive 
limits.  Through  specialization,  individuals 
acquire  the  capacity  to  apply  relatively 
complex  cognitive  strategies  to  narrowly 
defined  task  environments.^  Through  divi¬ 
sion  of  labor,  substantial  cognitive 
resources  can  be  simultaneously  brought  to 
bear  on  many  tasks  or  information  sources 
at  a  time  4 
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Central  to  this  perspective  oa  ccg2aa* 
tions  is,  the  concept  of  "boaeded 
raiiooality" ;  that  is,  tbs  idea  tba  the  li— K 
of  human  capacity  to  geaersre  alternatives, 
process  information  and  solve  problems 
constrain;  the  organizational  decision¬ 
making  process.  The  five  ssmmary  poiets 
which  follow  attempt  to  capture  the 
direction  of  Simon's  thinking  oo  this 
concept. 

First,  because  most  problems  which  as 
organization  faces  are  complex,  they  are 
factored,  or  split  into  qoari-independest 
parts  and  dealt  with  individually, 
usually  by  separate  units  of  an 
organization. 

Second,  optimization,  or  finding  the  best 
alternative,  is  replaced  by  satisficing. 
This  means  choosing  the  first  alterna¬ 
tive  which  meets  minimum  decision 
criteria,  that  is  acting  on  the  first  alter¬ 
native  that  is  "good  enough."  One  does 
not  look  for  every  needle  in  the 
haystack,  only  for  the  first  one  that  is 
sharp  enough. 

third,  because  satisficing  requires 
stopping  at  the  first  alternative  that  is 
good  enough,  the  order  in  which  organi¬ 
zations  develop  and  propose  alternative 
solutions  to  problems  is  a  critical  de¬ 
terminant  of  which  alternative  will  be 
chosen. 

Fourth,  organizations  seek  to  avoid 
uncertainty,  particularly  uncertain 
future  consequences  of  present  actions. 
Thus  decisions  which  maximize  short 
run  feedback  are  preferred. 

Fifth,  repertories  of  responses  or  rou- 
tines  ^  generally  define  the  range  of 
organizational  choice  in  recurring  or 
routine  situations.  Thus,  the 
organization  will  search  for  analogs  of 
the  familiar  when  confronted  with  the 
unfamiliar. 

Concentrating  on  the  bounded  character 
of  human  ration  Mty,  Cyert,  March  and  St- 
mon  focus  their  attention  on  the  conse¬ 
quences  for  the  decision  environment  of 
Jess  than  complete  information,  limited 
information  processing  capabilities,  uncer¬ 
tainty  avoidance,  sequential  search  proce¬ 
dures,  adherence  to  routine  and  satisficing 
as  an  alternative  selection  mechanism, 
thus,  organizational  structure  and  conven¬ 
tional  practice  become  initial  factors  in  the 


development  of  goals,  lie  formeOaroa  of 
expecufiecs  and  the  execcrioa  of  choice.5 

Aa  organization  caa  be  viewed  as  a 
complex  system  of  pans  each  with  spe¬ 
cialized  capabilities.  Wbre  aa  oigr*r»erim 
is  functioning  in  a  coherent  fashion,  it  is 
according  to  aa  implicit  or  explicit  plan. or 
Kra^gy  for  coordinating  the  behaviors  of 
the  various  organizational  parts.  The 
overall  division  of  labor  and  coordination 
samegy  for  an  organization  is  reflected  in 
the  structure  of  the  organization.  For  an 
organization,  its  structure  and  division  of 
labor  defines  what  has  to  be  coordinated 
with  what.  Once  the  boundaries  between 
various  subunits  are  identified  and  the 
functional  icier  dependencies  —  division  of 
labor  between  the  various  subunits  —  arc 
knowig  it  becomes  clear  where  the  key  co¬ 
ordination  points  are. 

THE  COORDINATION  PROBT  PM 

The  potential  accomplishments  of 
human  organizations  are  almost  limitless. 
In  practice,  however,  human  organizations 
must  overcome  a  fundamental  difficulty  — 
namely,  the  necessity  of  assuring  that  the 
pattern  of  activities  being  carried  out  by 
individuals  in  various  subunits  of  the 
organization  fit  together  in  a  relatively 
coherent  fashion  that  results  in  progress 
toward  the  organization's  fundamental 
objectives.  Achieving  such  coherence 
defines  what  is  termed  the  coordination 
problem.  But  this  stmeturing  task  itself  can 
easily  become  so  complex  as  to  overwhelm 
the  cognitive  capacities  of  those  who  must 
carry  it  out.5  Indeed,  the  high  frequency  of 
"coordination  failures"  suggests  that  such 
problems  commonly  occur. 

COORDINATION  STR  ATTftIFS 

There  are  four  basic  mechanisms  for 
achieving  coordination  in  human  organiza¬ 
tions. ^  Direct  supervision  is  the  most 
obvious.  Here,  a  supervisor  exercises  a 
degree  of  control  over  the  behavior  of 
subunit  members  by  allocating  resources 
to  subunits,  and  by  directly  int.uencing 
certain  details  of  the  subordinates' 
behavior.  Using  the  mutual  adjustment 
method,  two  or  more  actors  agree  to  share 
resources  and  to  confer  with  one  another 
concerning  decisions  that  affect  the  activi- 
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lies  of  those  isrohtd.  Standardization.  or 
i be  creation  of  standard  operating  pxocc- 
dares  (SOPs),  offers  a  Card  orefctato  for 
idsicriag  coordisrtioa.^  A  supervisor  era 
exercise  control  over  the  behavior  of 
subsoil  ambers  by  creating  standard 
procedures  governing  the  behavior  of 
subunit  oeabers  coder  specified  condi¬ 
tions.  The  supervisor  is  thus  able  10 
influence  behavior  even  in  situations  of 
which  be  is  unaware.  Moreover,  subunits 
coordinate  with  one  another  purely  on 
tbc  basis  of  shared  expectations.  No  direct 
communication  is  necessary  if  each  subunit 
can  anticipate  which  SOPs  otter  subunits 
will  implement  and  what  the  outcomes  will 
be.  Explicit  planning  is  another  way  to 
achieve  coordination.  It  is  equivalent  to 
direct  supervision  in  advance.  Achieving 
coordination  via  resource  allocation 
processes  or  the  creation  of  SOPs  requires 
significant  lead  times  to  accommodate  the 
planning  process.  Direct  supervision  and 
mutual  adjustment  rely  on  real-time  coor¬ 
dination,  which  is  far  more  difficult  and 
cosily  than  pre-planning. 

Whatever  the  means  chosen,  achieving 
coordination  is  costly.^  Human  and 
physical  resources  are  directly  consumed 
by  the  activities  of  planning,  monitoring, 
and- communicating.  Also,  different  mecha¬ 
nisms  for  achieving  coordination  produce 
unintended  side  effects  that  arc  costly  to 
the  organization.  Direct  supervision 
processes,  for  instance,  place  a  heavy 
information-processing  burden  on  those  in 
supervisory  roles,  and  as  a  consequence, 
information  bottlenecks  and  delays  are 
likely.  Also,  because  supervisors  cannot 
possibly  access  all  of  the  information  avail¬ 
able  to  their  subordinates,  this  mode  of 
achieving  coordination  will  generally  fail  to 
exploit  detailed  information  concerning 
local  circumstances.^ 0  Mutual  adjustment 
processes,  if  carried  to  extremes,  can  result 
in  extraordinarily  high  rates  of  information 
transmission  with  every  actor  communi¬ 
cating  with  every  other  actor.  The  resulting 
state  of  information  overload  can  result  in 
delays  or  total  paralysis  of  the  organiza¬ 
tion.  Finally,  coordination  achieved  via 
standing  procedures  can  result  in  exces¬ 
sively  rigid  behavior,  particularly  in  the 
face  of  circumstances  not  anticipated  when 
the  SOPs  were  formulated. 


STRATEGIES  FOR  MMTflSO  COORDINATION 
POSTS 

In  light  of  the  coordination  costs  men¬ 
tioned  above,  organizations  invariably 
devise  sttategies  for  limiting  the  degree  of 
coordination  attempted.!!  The  strategies 
they  may  employ  include  the  following; 

Reliance  on  nearly  decomposable  task 
structures.  A  task  structure  is  strictly 
decomposable  if  each  subtask  can  be 
carried  out  without  regard  for  bow 
other  subtasks  are  performed.  1-  A  task 
structure  is  nearly  decomposable  if,  in 
the  short  run,  subtasks  can  be  per¬ 
formed  without  regard  for  how  others 
are  being  performed,  and  in  the  long 
ruq,  depend  only  on  a  few  aggregate 
characteristics  of  how  other  tasks  are 
being  performed.! 3  While  a  degree  of 
monitoring,  re-planning  and  adjustment 
is  required  in  nearly  decomposable  task 
structures,  the  amount  of  information 
that  must  be  gathered  and  transmitted 
is  much  smaller  than  in  highly  interde¬ 
pendent  task  structures. 

Ignoring  interdependencies.  When 
interdependencies  do  arise,  one  crude 
strategy  for  reducing  coordination  costs 
is  simply  to  ignore  the  interdepen¬ 
dence.!  4 

Ignoring  interdependencies  except  in 
extreme  cases.  A  slightly  less  extreme 
strategy  for  limiting  coordination  costs 
is  to  ignore  interdependencies  in  all  but 
extreme  cases.! 5  a  supervisor  might 
monitor  for  extreme  cases  of  negative 
interaction  between  subunits  or  the 
subordinate  units  themselves  might 
agree  to  inform  one  another  when  their 
behavior  falls  outside  of  agreed  upon 
norms.  In  a  standing  procedure  mode, 
SOPs  themselves  might  specify  condi¬ 
tions  under  which  supervisors  and 
subunits  will  transmit  information  con¬ 
cerning  circumstances  that  fall  outside 
the  bounds  of  the  anticipated  or 
acceptable. 

Creating  buffer  stocks  of  slack 
resources.  Many  coordination  problems 
arise  when  one  subunit  requests 
resources  or  assistance  that  arc  to  be 
provided  by  another  subunit  Absent 
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detailed  coordination  between  these 
suboaits,  there  is  a  distinct  likelihood 
that  short -term  shortages  will  result  in 
delays  in  filling  such  requests.  One 
crude  solution  to  this  problem  is  to  hold 
large  buffer  stocks  of  slack  resources  to 
be  used  for  meeting  such  demands.1^ 
Reliance  on  flexible ,  general  purpose  re¬ 
sources  within  subunits.  To  the  extent 
that  subunits  possess  flexible,  general 
purpose  resources,  they  are  less  likely 
to  require  assistance  from  other  sub- 
unit s,  thus  less  likely  to  need  to  coordi¬ 
nate  with  them.!? 

Reliance  on  standardization  as  the  least- 
cost  means  for  achieving  coordination. 
Implementation  of  SOPs  is  a  very 
inexpensive  means  for  achieving  coor¬ 
dination.  To  the  extent  that  behavior  is 
coordinated  via  mutual  expectations 
rather  than  actual  communication,  coor¬ 
dination  can  be  almost  cost  free,  apart 
from  the  loss  of  flexibility  inherent  in 
standardization.!  8 

Whatever  the  merits  of  the  above 
strategies  for  limiting  coordination  costs, 
they  are  not  without  costs  of  their  own. 
The  planning  processes  involved  in 
creating  a  decomposable  task  structure  are 
not  cost-free.  The  costs  of  ignoring  inter¬ 
dependencies  between  subunit  activities 
arc  obvious.  At  the  extreme,  ignoring 
interdependence  may  result  in  situations 
in  which  subunits  carry  out  their  tasks  in 
manners  that  are  directly  at  cross 
purposes.  For  example,  the  tragic  Apollo  1 
fire  that  killed  three  astronauts  was 
facilitated  by  coordination  failures 
between  design  groups.  One  chose  a  100% 
oxygen  environment  for  the  capsule  while 
another  chose  to  use  materials  that  were 
inflammable  in  most  environments,  but 
highly  flammable,  virtually  explosive,  in 
fact,  in  the  100%  oxygen  atmosphere  of  the 
capsule.!  9 

The  costs  of  ignoring  all  but  exceptional 
cases  of  interdependence  are  similar  to 
those  of  ignoring  interdependence  alto¬ 
gether,  though  if  the  exceptional  cases  are 
well  chosen,  the  resulting  costs  may  be 
considerably  smaller  in  magnitude.  Main¬ 
taining  stocks  of  slack  resources  is  costly  in 
that  the  human  and  capital  resources  held 
in  reserve  arc  essentially  wasted  until  they 


are  utilized,  and  there  may  be  inventory 
costs  associated  with  bolding  capital 
resources.  Relying  on  flexible,  general  pur¬ 
pose  resources  is  also  costly  because  such 
resources  are  likely  to  be  more  expensive 
to  procure  and  maintain  than  specialized 
resources,2**  3nd,  because  of  their  com¬ 
plexity  are  likely  to  suffer  from  poor 
reliability.  The  recent  difficulties 
associated  with  procuring  multi-purpose 
fighter  aircraft  are  instructive  in  this 
regard.2 ! 

Finally,  despite  the  advantages  of  re¬ 
lying  on  standing  procedures,  this  strategy 
for  simplifying  coordination  processes  may 
result  in  excessively  rigid  behavior,  espe¬ 
cially  in  the  face  of  an  uncertain  and 
rapidly  changing  environment 22  Attempts 
to  overcome  this  shortcoming  by  devising 
finely-tuned  SOPs,  sensitive  to  changing 
environmental  conditions,  will  result  in 
substantial  planning  costs.  And  if  the  re¬ 
sulting  SOPs  are  loo  complex,  they  are 
likely  to  be  poorly  implemented.  The  basic 
message  here  is  to  keep  it  simple.  This 
strategy,  however,  runs  the  risk  of  nor 
planning  for  a  sufficient  range  of 
contingencies.  Once  again,  the  key  in 
organizational  design  is  to  strike  a  balance 
between  competing  goods. 

HIE  mPIES.  OF.H1ERARCHY 


^signers  oi  organizational  decision  and 
control  systems  are  faced  with  a  difficult 
trade-off  between  coordination  costs  and 
the  costs  of  attempting  to  limit  coordina¬ 
tion.^  Almost  invariably,  organizations 
resolve  this  design  dilemma  by  developing 
hierarchical  task  and  control  structures.2^ 
Hierarchical  control  systems  are  particu¬ 
larly  advantageous  when  the  task 
structure  is  decomposable,  or  nearly  so. 
Hierarchical  control  systems  require  less 
communication  than  other  types  of  control 
systems.  If  communication  is  strictly 
hierarchical,  each  actor  communicates  with 
only  one  superior  and  a  small  number  of 
subordinates.  Furthermore,  the  complexity 
of  a  hierarchical  organization  is  nearly 
constant  across  all  levels  as  far  as  the 
individual  actor  is  concerned,  which  is 
advantageous  since  the  ability  to  think 
about  more  than  one  complex  task  at  once 
is  not  likely  to  vary  significantly  among 
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individuals  at  different  levels  in  the 
hierarchy.  Nearly  decomposable 
hierarchical  systems,  composed  of  'stable 
subsystems,  have  an  inherent  evolutionary 
advantage  since  a  change  in  one 
component  will  require  little  or  no 
adjustment  in  the  others,  and  damage  to 
one  component  can  be  repaired  without 
any  alteration  of  the  others.  In  short,  hier¬ 
archy  substantially  simplifies  planning  and 
control  processes,  and  it  promotes  survival 
in  the  face  of  a  changing  or  hostile  envi¬ 
ronment.  Whatever  the  balance  struck 
between  the  costs  of  coordination  and  the 
costs  of  limiting  coordination,  the  optimal 
solution  is  likely  to  possess  many  at¬ 
tributes  of  a  nearly  decomposable  hierar¬ 
chy. 

CENTR  A  LIZ  ATI  ON  AND  DECENTRALIZA¬ 
TION:  TRADE-OFFS  AND  MIXED  ORGANI¬ 
ZATIONAL  STRATEGIES 

Discussions  of  what  constitutes  a  good 
decision  structure  or  process  also 
frequently  revolve  around  the  issue  of  cen¬ 
tralization  of  control.  The  degree  of 
centralization  is  conceptually  defined  in 
terms  of  the  number  of  alternatives 
available  to  subordinates  that  satisfy  the 
basic  resource  constraints  imposed  by  the 
superior,  and  that  are  compatible  with  the 
goals  and  instructions  established  by  the 
superior.25  The  greater  the  number  of 
alternatives  available,  the  less  the  degree 
of  centralization. 

Most  control  systems  are  centralized  in 
some  respects  and  decentralized  in  others. 
The  US  Army's  mission  planning  proce¬ 
dures,  for  example,  involve  centralized 
specification  of  mission  objectives  and 
resources,  but  decentralized  planning  and 
execution  of  mission  details.  The  degree  of 
centralization  may  also  vary  by  task.  Nu¬ 
clear  weapons  maintained  by  the  US  Army 
operate  under  much  tighter  control  than  do 
conventional  weapons  under  Army  control. 

Higher  level  control  may  be  of  two 
sorts.26  The  higher  authority  may  physi¬ 
cally  constrain  the  options  available  to 
subordinates  by  means  of  resource  alloca¬ 
tion  decisions.  Or,  the  higher  authority  may 
influence  the  actual  decisions  of  subordi¬ 
nates  by  transmitting  to  them  goals,  task 
instructions,  or  information  about  the 
internal  and  external  environment  of  the 


organization.  If  effective,  the  second 
approach  is  likely  to  be  more  flexible  and 
precise  than  the  first.  Invariably,  the 
actual  method  of  control  will  involve  some 
combination  of  the  two. 

The  primary  advantage  of  centraliza¬ 
tion  is  the  increased  potential  for  coordi¬ 
nating  subunit  activities.  The  liabilities  of 
direct  supervision  include  delay  and  the 
failure  to  fully  exploit  local  information 
and  expertise.  The  centralization  issue  can 
also  be  framed  in  terms  of  organization 
based  on  mission  versus  organization 
based  on  function. 

FUNCTION  VERSUS  MISSION  DECOMPOSI- 
TION 

An  organizational  hierarchy  can  be 
structured  in  many  ways.  One  critical 
choice  is  whether  to  decompose  by  func¬ 
tion  or  by  mission.  Functional  decomposi¬ 
tion  is  decomposition  in  terms  of  area  of 
specialization.  Immediately  beneath  the 
top  level  commander  are  specialties,  then 
at  the  next  level,  subspecialties,  and  so 
forth.  The  US  Army  can  be  thought  of  as 
being  structured  in  terms  of  major  spe¬ 
cialty  areas  such  as  infantry,  armor, 
artillery  and  so  forth.  These  specialties  can 
be  further  divided  into  subspecialties;  for 
instance,  airborne  infantry,  air  mobile 
infantry,  mechanized  infantry  and  light  in¬ 
fantry. 

Mission  decomposition  is  decomposition 
in  terms  of  task  or  purpose.  Thus,  the 
overall  commander  sits  above  a  group  of 
major  mission  commanders  who  in  turn 
oversee  a  set  of  submission  commanders, 
and  on  down  the  line.  The  armed  forces  of 
the  US  can  be  thought  of  in  terms  of  a 
number  of  missions:  strategic  nuclear  de¬ 
terrence  and  retaliation;  continental  air 
defense  of  the  US;  defense  of  Europe 
against  Soviet  attack,  to  name  a  few.  Each 
of  these  major  missions  can  be  repeatedly 
subdivided,  of  course,  in  terms  of  increas¬ 
ingly  specific  tasks. 

In  practice,  most  organizations  use  a 
mixture  of  organization  by  mission  and  or¬ 
ganization  by  function.  The  most  common 
pattern  is  to  organize  by  mission  at  the  top 
of  the  hierarchy  and  oy  function  nearer 
the  bottom.  In  any  organization  that  em¬ 
ploys  a  mixture  of  mission  and  functional 
decomposition,  the  central  design  question 
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IS  at  what  level  the  decomposition  should 
proceed  in  terms  of  missions  ard  at  what 
level  according  to  specialty  and  function.  A 
second  critical  question  is  how  the  speT 
cialty  subunits  can  be  brought  into  the 
service  of  the  mission-oriented  subunits. 
There  is,  of  course,  no  unique  answer  to 
either  question.  Differences  of  place  and 
circumstance  dominate. 

The  primary  advantage  of  functional 
decomposition  is  that  it  permits  the  organi¬ 
zation  to  exploit  the  economies  of  scale  in 
herent  in  high  degrees  of  specialization. 
The  major  liability  of  functionally-orga¬ 
nized  units  is  that  there  are  very  few 
missions  that  they  can  perform  by 
themselves.  To  perform  a  novel  mission, 
using  functionally-organized  subunits,  a 
higher  level  decisionmaker  must  provide 
overall  coordination  and  control  between 
the  units  involved  in  the  process,  or  SOPs 
may  substitute  if  the  task  is  a  routine 
one.27  Organizations  that  are  functionally 
structured  from  top  to  bottom  are  likely  to 
incur  heavy  coordination  costs  whatever 
the  means  employed  to  achieve  that 
coordination.  Because  of  the  need  for 
coordination,  functionally  structured 
organizations  tend  toward  inflexibility  and 
inability  to  adapt-  to  rapidly  changing 
situations.  6 


The  primary  alternative  to  functional 
decomposition  is  to  organize  by  mission  at 
the  top,  and  by  function  nearer  the  bottom 
of  the  hierarchy.  An  obvious  cost  of  this 
approach  is  that  it  reduces  the  opportunity 
for  exploiting  economics  of  scale,  since  an 
organization  cannot  afford  to  include 
highly  trained  specialists  or  exotic  technol¬ 
ogy  in  every  major  operational  subunit.28 
Mission  decomposition  has  other  potential 
drawbacks  as  well.  Mission-oriented  sub- 
groups  may  become  parochial  in  outlook, 
overestimating  the  value  o'f  their  mission 
relative  to  other  organizational  missions.29 
Finally,  to  the  extent  that  mission-based 
decomposition  results  in  a  highly  deccn- 
trauzed  command  structure,  the  resulting 
ambiguity  and  requirements  for  unstruc¬ 
tured  problem-solving  by  lower  level 
personnel  may  result  in  degraded  morale 

ZJST™*  j.f.  ,hc  ,ask  requirements 
exceed  the  capabilities  of  the  individuals 
invo  ved.  But  mission  decomposition  can 
substantially  reduce  coordination  require¬ 


ments  (provided  that,  the  set  of  missions 
involved  is  decomposable  or  neatly  so). 
Higher-level  decisionmakers  need  only  to 
assign  tasks  and  allocate  resources.  Details 
of  execution  can  be  left  to  the  discretion  of 
mission  and  submission  commands,  per¬ 
mitting  maximum  exploitation  of  local 
information.  It  is  clear,  then  that. notions  of 
centralization  and  decentralization  are 
closely  linked  to  whether  an  organization  is 
structured  in  terms  of  mission  or  function. 
Mission-based  decomposition  encourages 
decentralization,  provided  that  the 
missions  are  relatively  independent. 
Function-based  decomposition  requires 
higher  degrees  of  coordination  between 
subunits,  and  hence  tends  to  result  in  a 
highly  centralized  command  structure. 

QRGAN17.AT[QNAI.<tPAM<f 

The  various  coordination  strategies 
discussed  in  the  preceding  section  are 
meant  to  coordinate  organizations,  or  parts 
o  organizations,  despite  structural, 
functional  institutional,  or  national 
divisions  between  them.  These  "seams" 
between  organizations  can  be  either  minor 
or  major  impediments  to  attempts  at 
coordination.  Coordination  within  one  unit 
of  an  organization  is  "organic,"  is  often 
.arsed,  of,c"  involves  tacit  rather  than 
explicit  coordination  procedures  and  is 
generally  easier  to  accomplish  for  an 
organization.  People  within  a  subunit  know 
each  other,  know  what  to  expect,  have  a 
better  ability  to  anticipate  behavior,  and 
oftem  rely  on  implicit  coordination. 
Coordination  across  subunit  boundaries  is 
often  done  explicitly  and  generally 
involves  real  coordination  costs  or  de¬ 
tailed  plans.  It  tends  to  be  rehearsed  less 
frequently  than  coordinated  activities 
within  subunit  boundaries  and  is  generally 
much  more  difficult  for  an  organization. 

Assuming  that  different  subunits  of  an 
organization  must  act  together,  coordinat- 

ing  the  activities  of  heterogeneous  units  _ 

for  example,  a  ground  unit  and  an  air 
wmg—  is  more  difficult  than  coordinating 
two  similar  units  —  two  adjacent  US  bat¬ 
talions,  for  example.  Coordination  between 
similar  units  is  inherently  easier  because 
each  unit  has  a  "conceptual  model"  for  the 
behavior  of  their  counterparts,  in  essence, 
They  behave  just  like  we  would.". 
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Illustrative  of  this  approach  is  the  pro¬ 
vision  of  fire  support,  which  C3n  be 
provided  from  the  ground  by  artillery  that 
is  organic  to  the' ground  forces,  or  from  the 
air  by  air  forces  which  exist  in  the  U.S. 
armed  forces  as  a  different  branch  of 
service.  The  differences  in  artillery  versus 
air  support  are  representative  of  the 
differences  between  major  and  minor 
organizational  seams.  Artillery,  is 
indigenous  to  the  ground  forces.  Artillery 
officers  have  the  same  basic  and  doctrinal 
training  as  the  forces  they  support;  their 
command  structure  is  completely 
integrated  with  that  of  the  ground 
commanders,  and  their  communications 
equipment  pan  easily  access  the  main 
communications  network.  Tactical  air 
support,  in  contrast,  is  provided  by  an 
external  organization,  namely  the  Air 
Force.  Air  Force  officers  come  from  a  dif¬ 
ferent  systems  of  military  education  and 
background  and,  their  attitudes  and  pref¬ 
erences  reflect  different  incentives  and 
belief  systems.  The  command  structures 
and  planning  cycles  differ  radically  be¬ 
tween  the  two  organizations,  and  they 
have  divergent  views  on  allocation  of 
resources  among  missions  and  acquisition 
of  types  of  airframes  and  ordnance  to 
suooort  these  mission  Driorities. 

The  difficulties  in  coordinating  the  air 
and  ground  wars  further  illustrate  the  co¬ 
ordination  problem  within  NATO.  The  Air 
Force  and  the  Army  take  fundamentally 
different  positions  on  what  form  air  sup¬ 
port  for  ground  forces  should  take.  The  Air 
Force  believes  that  it  cannot  effectively 
support  battlefield  air  interdiction  and 
close  air  support  along  the  forward  edge 
of  the  battle  area  until  it  has  established 
air  superiority  .  The  Army  wants  to  see 
more  direct  applications  of  airpower  in 
support  of  the  troops.  In  addition  to  these 
philosophical  differences,  there  are 
methodological  ones.  The  Army  and  Air 
Force  operate  on  entirely  different  plan¬ 
ning  cycles,  with  different  time  lines.  The 
differences  in  time  lines  and  planning  hori¬ 
zons  can  have  a  significant  and  adverse 
effect  on  the  interactions  between  the  two 
services.  For  example,  the  ground  com¬ 
mander’s  plans  may  be  severely  disrupted 
or  even  cancelled  if  his  specific  requests 
for  air  support  or  reconnaissance  cannot  be 
fulfilled  within  the  time  frame  required. 


Seams  in  an  organization  m3y  be  either 
"horizontal"  or  "vertical"  in  orientation.  The 
seams  between  two  units  on  the  same  level 
of  a  hierarchy  are  considered  to  be  hori¬ 
zontal;  seams  between  actors  at  different 
levels  are  considered  vertical.  The  "height" 
of  the  seams,  measured  as  the  degree  of 
difficulty  in  overcoming  them,  may  also 
vary.  The  coordination  of  two  infantry 
battalions  in  the  same  regiment,  for  in¬ 
stance,  may  be  substantially  easier  than 
the  .coordination  of  two  battalions  in  dif¬ 
ferent  divisions.  The  most  insurmountable 
seams,  perhaps,  appear  across  multi-na¬ 
tional  boundaries.  To  illustrate  this  point, 
note  that  British  aviators  in  TWOATAF  op¬ 
erate  under  different  assumptions  and 
doctrine  than  their  United  States  counter¬ 
parts  in  FOURATAF.  British  air  forces  as¬ 
sume  that  during  wartime,  they  will  be  op¬ 
erating  for  some  time  when  they  are  out  of 
contact  with  higher  command  levels.  Their 
training  reflects  this  assumption.  In  con¬ 
trast,  U.S.  procedures  assume  a  high  degree 
of  contact  with  flight  controllers  through¬ 
out  a  mission  and  that  squadron  coordina¬ 
tion  will  be  accomplished  through  realtime 
communication  links. 

In  addition,  the  different  national  mil¬ 
itary  organizations  in  NATO,  the  national 
corps,  have  nationally  provided  and 
therefore  different  intelligence  and  logisti¬ 
cal  support  systems  on  which  they  will 
rely  during  wartime,  while  operating  un¬ 
der  the  NATO  command.  These  national 
forces  use  different  communications 
systems  and  weaponry,  and  have  different 
levels  of  readiness.  It  is  clear  that  the 
seams  between  the  elements  of  the  NATO 
multi-national  force  are  inherently 
"higher’’  than  the  seams  that  separate  dif¬ 
ferent  units  of  the  Bundcswchr. 

CQQRP1NATING-THE  OFFENSE  VERSUS  CO¬ 
ORDINATING  THE  DEFENSE 

The  kind  of  coordination  required  gen¬ 
erally  varies  with  the  task  or  function  that 
the  organization  is  trying  to  perform.  For 
example,  in  coordinating  the  activities  of 
various  military  units  in  an  offensive  oper¬ 
ation,  coordination  itself  is  a  command 
task.  In  a  wartime  situation  involving  two 
large,  competing  military  organizations,  the 
environment  is  likely  to  be  uncertain  and 
rapidly  changing.  Coordinating  military  or- 
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ganizations  having  highly  specialized  func¬ 
tions  and  -equipment  in  a.-  complex,  hostile 
environment  is  inherently  easier  if 
achieved  through  pre-planning  than  if  the 
complex  of  deployment,  logistical,  strategic 
and  tactical  decisions,  mission  ^assignments 
and  force-tasking  has  to  be  done  in  real- 
time,  on  the  fly."  Real-time  coordination 
requires  accurate  real-time  intelligence, 
assessment  of  a  fluid  battlefield  environ¬ 
ment,  reliable  and  timely  communications, 
and  competent  and  continuous  exercise  of 
command. 

The  responsible  military  commander 
generally  has  a  plan,  reflected  in  the 
orders  given  to  the  various  ■components  of 
the  offense.  Especially  if  the  military  orga¬ 
nization  on  the  offense  is  able  to  control 
the  pace  of  battle,  coordination  is  accom¬ 
plished  simply  by  following,  the  direction 
of  the  overall  .military  commander  or 
simply  by  following  the  offensive  plan. 
Coordination  is  generally  done  through 
pre-planning  or  the  sending  of  simple, 
easily  understood  orders. 

In  contrast,  coordination  of  military 
units  involved  in  defensive  operations 
generally  cannot  rely  on  elaborate  pre- 
planning  in  order  to  accomplish  their  task, 
unless  they  can  predict  with  sufficient 
confidence,  the  exact  location,  size  and 
timing  of  the  enemy  attack.  Explicit  forms 
of  communication  arc  generally  required, 
and  if  the  communications  between  vari¬ 
ous  units  can  be  disrupted,  delayed,  or  if 
the  link  can  be  destroyed,  the  capability  of 
the  defensive  military  organization  to  op- 
crate  in  a  coordinated  capacity  is  severely 
diminished,  if  not  eliminated.  Coordination 
by  explicit  communication  plays  a  much 
larger  role  in  a  defensive  organization  than 
an  offensive  one  because  defensive  mili- 
tary  operations  are  reactive,  by  definition. 

The  essence  of  Soviet  military  doctrine 
is  to  control  the  pace  of  battle  through 
offensive  operations  that  rely  on  pre-plan- 
mng  as  the  coordination  strategy.  By 
creating  an  environment  that  the  defense 
has  to  adapt  and  react  to,  the  Soviets  hope 
to  compound  the  coordination  problem  for 
their  enemy  By  keeping  the  pace  of  their 
offense  rapid,  the  Soviets  seem  to  be  trying 
to  force  the  defense  to  rely  exclusively  on 
real-time  coordination  strategies  that  are 
inherently  more  costly  and  difficult. 


flVE  COM- 


MANDAmnWni  . ^ 

<J,Vddi“?n  10  lhe  aforementioned  con- 
commanT  'a  assessi"S  effectiveness  of 
Rscher  hnda"o  ,C0Wr01’  Crecine*  c°ulam, 
theo^v  based  °ne  ,heir  organization 
JfTn?'6  j  d  assessmen>  of  NATO  com¬ 
mand  and  control  in  the  Central  Region 
have  defined  six  essential  properties  o{  a 
command  and  control  system.30 

certainlv  °f  eS“n,ial  Properties  could 
certainly  be  expanded,  but  research  has 
indicated  that  these  six  characteristics 
bound  the  irreducible  minimum  require¬ 
ments  for  effective  command  and  comroi 
The  properties  were  placed  in  two  groups 

character C0"ii?‘?d  of  “Performance 
characteristics  which  included1  ill 

processing  capacity,  [2J  reaction  time,  3 

?he  y'  a.','d  141  coor<iinalio"  capability 
he  second  group  consists  of  the 
continuity  of  command"  characteristics  of 
PJ  physical  survivability,  and  T61 
robustness  against  attrition.  ‘ 

...  CV-P-  10  Proce^ing  capacity,  re¬ 
search  shows  that  a  C3  system  should  have 
as  much  cognitive,  computational,  and 
communications  capacity  as  possible.  This 
requirement  is  affected  not  only  by  num¬ 
bers  of  men  and  levels  of  equipment  and 
technological  sophistication,  but  also  by 
levels  of  training  and  rehearsal,  communi- 
eat.ons  d.scjplinc,  well  developed  routines 
and  standard  operating  procedures.  Noting 
that  organizations  cannot  do  what  they  do 
not  rehearse,  the  procedural  becomes  at 
least  as  important  as  the  technical.  For  ex¬ 
ample,  a  courier  on  a  motorcycle  or  in  a 
jeep  may  be  a.  much  more  effective 
communications  device  than  a  high  speed 
communications  link  which  can  transmit 
great  volumes  of  information  to  corps 
headquarters  at  such  speed  that  the 
printers  and  displays  which  pull  it  off  the 
wire  there  are  backed  up  for  twelve  hours 
with  incoming  messages. 

^C°n^  cri,icaI  performance 
attribute  identified  in  the  study  was 
reaction  time.  Defined  as  the  amount  of 
time  that  elapses  between  the  onset  of  a 
change  in  the  environment  and  the 
initiation  of  a  response.  Reaction  time  is  a 
function  of  rehearsal  and  procedure, 
processing  capacity  and  processing  load, 
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and  centralization  or  decentralization  of 
the  organization  with  respect  to  both 
structure  and  decision  locus.  The  greater 
the  ratio  of  processing  capacity  to 
processing  load  the  faster  the  reaction  time 
and,  perhaps  less  obviously,  the  more 
decentralized  a  C2  system,  the  greater  its 
ability  to  respond  rapidly  to  changes  in 
local  conditions  that  affect  only  one  or  a 
few  subunits,-1 1 

The  third  property  is  flexibility,  e,g„ 
the  capacity  to  adapt  to  rapidly  changing 
conditions.  Like  the  two  performance  at¬ 
tributes  discussed  above,  a  central  key  to 
flexibility  lies  in  training  and  rehearsal. 
According  to  Crecine,  et.  a!.: 

Flexibility  is  enhanced  by  the  develop¬ 
ment  and  rehearsal  of  both  tactical  and 
C3  SOPs  that  cover  a  broad  range  of  sce¬ 
narios.  This  speculation  rests  on  the 
assumption  that  the  effectiveness  of 
SOPs  is  inherently  scenario  dependent. 
Confronted  by  unforeseen  contingencies, 
the  command  system  will  be  forced 
either  to  engage  in  time  consuming 
improvisation  or  to  rely  on  SOPs  that 
are  inappropriate  to  the  conditions  of 
battle.^  2 

Coordination  capacity  is  the  fourth 
critical  performance  characteristic  of  ef¬ 
fective  command  and  control  identified  by 
Crecine,  Coulam,  Fischer,  and  Salomone. 
Coordination  capacity  is  determined  by  a 
mix  of  hierarchical  and  structural  variables 
and  procedures.  The  authors  note,  for 
example,  that  in  the  field,  "C3  systems 
differ  in  their  ability  to  plan  and  conduct 
'combined  arms’  operations  in  which 
different  types  of  forces  —  infantry,  tanks, 
artillery,  aircraft  — -  work  in  conjunction 
with  one  another.  At  a  higher  level,  say  the 
whole  European  Theater,  different  C3 
systems  will  differ  in  their  ability  to 
coordinate  battles  in  different  sectors,  or  to 
reallocate  forces  and  supplies  from  one 
major  sector  to  anothcr."33 

The  two  continuity  characteristics 
identified  in  the  study,  survivability  and 
robustness  against  attrition  were  found  to 
be  influenced  and  enhanced  not  only  by 
physical  means,  such  as  hardening,  but  also 
by  procedural  actions,  such  as  comunica- 
tions  disciplines  that  minimize  the  use  of 
radios  that  can  easily  be  detected  by  ene¬ 
my  forces.  Again  procedures,  SOPs  and 


organizational  capabilities  enhanced  by 
realistic  rehearsal  can  be  effective 
substitutes  for  direct  real-time 
communication  if  the  objective  is  to  avoid 
detection  and  possible  destruction.  Tacit 
communication,  shared  expectations, 
perceptions  and  beliefs  can  enhance 
survivability  under  conditions  where 
intense  hostile  action  is  directed  at  first 
locating  and  then  destroying  headquarters 
and  C3  systems.  Mobility,  the  separation  of 
command  posts  from  transmission 
facilities,  masking,  hiding  of  facilities  and 
deception  are  other  means  to  enhance 
survivability.  But  as  Crecine,  et.al.  point 
out:  "No  matter  how  great  the  efforts  to 
enhance  C  3  survivability,  a  concerted 
attack  on  a  C3  system  is  bound  to  be  par¬ 
tially  successful.  Some  communications 
links  will  be  jammed,  and  some  compo¬ 
nents  of  the  system  will  be  destroyed.  Any 
truly  survivable  system  must  be  able  to 
continue  to  perform  critical  functions 
despite  damage  or  attrition  of  C3  system 
components.  Thus,  the  importance  of  the 
second  property  of  continuity  of  command, 
robustness,  is  mainly  a  matter  of  organiza¬ 
tional  structure  and  procedures."^ 4 

Redundancy  in  human  and  physical  C3 
assets,  and  procedures  for  devolution  of 
command,  are  essential  if  a  damaged  or 
degraded  C 3  system  is  to  reconstitute  itself 
or  degrade  gracefully.  Since  C3  failures 
make  cheap  victories  possible,  under  con¬ 
ditions  of  massive  damage  to  a  command 
and  control  system,  the  "system  must  be 
robust  in  the  sense  of  being  able  to  recon¬ 
stitute  itself  to  lorm  an  effective  fighting 
force  from  those  C3  elements  and  fighting 
units  that  have  survived. "35  This  capabil¬ 
ity  will  be  enhanced  by  structures  and 
procedures  that  permit  surviving  units  to 
fight  on  their  own  while  the  command 
structure  reconstitutes  itself.  The  study 
concludes  that  the  many  layers  of  com¬ 
mand  that  exist  in  the  NATO  command 
and  its  constituent  national  corps  and 
below  "create  a  substantial  potential  for  re¬ 
constituting  at  many  levels,  if  the 
survivors  can  operate  alone  in  the  short 
run."36  This  need  to  be  able  to  function  in¬ 
dependently  for  short  periods  of  time 
mandates  a  nearly  decomposable  task 
structure  that  allows  subunits  to  operate 
constructively  on  their  own.  Robustness  is 
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also  enhanced  by  realistic  exercise  of  oper¬ 
ations  under  conditions  of  degraded 
communications  and  the  -physical  loss  of 
headquarters  or  other  command  facilities. 
It  is  in  realistic  training  that  NATO  may 
have  one  of  its  greatest  inadequacies.^  7 

They  conclude  that  although  there  are 
measurable  performance  attributes  associ¬ 
ated  with  the  functioning  of  a  command 
and  control  system  along  the  six  dimen¬ 
sions  (listed  above,  .the  effectiveness  of  a 
system  of'  command  and  control  can  only 
be.  evaluated  in  the  broader  context  of  a 
specific  scenario.  The  interplay  of  the  bat¬ 
tle  scenario  and  the  operational  concepts 
employed  by  each  side  will  be  a  prime 
determinant  of  the  appropriateness  and 
effectiveness  of  the  respective  command 
and  control  concepts,  systems  and  capabil¬ 
ities  of  the  combatants.  For  example,  with 
respect  to  opposing  military  forces,  they 
conclude  that:  "...the  capacity  for  central¬ 
ized  coordination  is  less  important  to  a 
military  force  that  relics  on  independent 
action  undertaken  by  isolated  defensive 
units  than  to  one  that  plans  to  establish 
and  hold  an  unbroken  line  of  defensive 
forces."  39  This  tenet  concerning  scenario, 
operational  concept  and  command  and 
control  structure  and  process  is  a  condition 
of  the  interaction  of  organization  and  task 
environment.  It  is  not  only  an  aspect  of 
military  organization  and  command  and 
control,  but  is  germane  to  any  organization 
and  task  environment. 

Two  themes  clearly  emerged  from  the 
study.  The  first  is  that  actual  rehearsal  un¬ 
der  realistic  conditions  provides  the  surest 
basis  for  effective  action.  Rehearsal  serves 
to  enhance  the  degree  to  which  coordina¬ 
tion  can  be  achieved  through  reliance  on 
shared  knowledge  and  expectations.  Sim¬ 
plicity  is  the  second  hallmark  of  effective 
action.  Alternatives  that  create  minimal 
coordination  requirements  are  most  likely 
to  succeed.  To  the-  extent  that  direct  means 
of  coordination  are  essential,  they  should 
be  based  on  coordination  SOPs  that  are 
themselves  simple  and  well-practiced. 
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When  one  examines-  the  composition  of 
combat  forces  making  up  NATO  and  the 
WTO,  it  is  clear  that  NATO  consists  of  a- 
multi-national  force  whereas  the,  Soviet 
military  organization  dominates  all 
planning  for  combat  missions  and  combat 
forces  in  the  WTO.  NATO  will  have  a 
minimum  of  five  nationalities  holding 
sections  of  the  front  line  and  the  Central 
Region;  the  Americans,  West  Germans, 
British,  Belgians,  dnd  the  Dutch. 

The  multi-national  character  of  NATO 
combat  forces  creates  in  itself  some  rather 
obvious  command,  communication  and  co¬ 
ordination  problems  that  are  different  than 
those  faced  by  the  all-Soviet  WTO  combat 
force.  Although  there  is  a  degree  of 
cuttural  and  linguistic  diversity  within  the 
Soviet  military,  this  is  a  fundamentally 
different  problem  for  the  Soviets  than,  for 
example,  the  coordination  of  adjacent  US 
and  West  German  forces  or  UK  and  Belgian 
forces. .  The  Soviet  forces  arc  dominated 
and  unified  by  the  Russian  language.  Even 
among  non-Russian  Soviet  officers,  the 
lancuage  of  their  training  is  Russian. 

Another  gross  difference  apparent 
between  NATO  and  the  WTO  is  the  degree 
of  centralization  in  the  command  structure. 
The  WTO  tends  to  be  more  centralized  than 
NATO,  with  key  strategic  and  tactical  deci¬ 
sions  being  taken  one  or  two  levels  in  the 
hierarchy  above  that  of  NATO.  In 
addition,  it  is  clear  that  the  NATO 
command  structure  places  far  greater 
reliance  on  real-time  communication  as  a 
way  of  coordinating  the  behavior  of  the 
various  units  making  up  the  overall  NATO 
force.  In  contrast,  the  Soviet/WTO 
organization  tends  to  rely  much  more  on 
detailed  preplanning  as  a  way  of 
coordinating  various  units.  This  reflects 
partly  the  relative  capabilities  of  the  two 
sides,  partly  cultural  as  well  as 
socio/political  preferences,  and  partly 
different  strategic  concepts  and  approaches 
to  conventional  warfare.  NATO  quite 
clearly  sees  itself  primarily  as  fighting  a 
defensive  war  and  finding  itself  in 
situations  where  elaborate  pre-planning  is 
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of  marginal  utility  because-  of  the 
reactionary  nature  of  the  defense. 

Another  clear  difference  between  NATO 
and  WTO  command  structures  lies  in  the 
way  in  which  the  air/land  battle  is  coordi¬ 
nated.  In  NATO,  the  coordination  takes 
place  through  parallel  command  structures, 
one  for  the  allied  air  forces,  and  one  for  the 
ground  forces.  The  primary  level  of  inte¬ 
gration  for  air  and  ground  commands  fs  at 
the  army  group  level.  In  the  WTO  both  air 
units  and  ground  support  units  are  organic 
to  the  ground  forces,  and  utilize  the  same 
command  structure.  Soviet  ground  com¬ 
manders  at  the  division  and  army  level 
each  "own"  appropriate  air  forces,  whereas 
their  counterparts  in  NATO  may  directly 
command  ground  forces  but  the  associated 
air  forces  are  "owned"  by  another  com¬ 
mand  structure  and  necessary  air  support 
must  be  requested  from  the  parallel 
structure. 

Finally,  if  one  looks  at  the  echelons 
above  corps  in  NATO  one  observes  an 
overlapping  and  "messy"  command  struc¬ 
ture  with  respect  to  intelligence,  logistics, 
air/land  battle  coordination,  and  troop 
deployment/redeployment  decisions.  The 
echelons  above  corps  in  the  Soviet  military 
exhibit  a  much  "cleaner"  structure  for 
assignment  of  responsibilities  and  chain  of 
command.  Much  of  the  "messiness"  of  the 
NATO  command  structure  in  the  echelons 
above  corps  are  due  to  the  multi-national 
nature  of  the  NATO  alliance  and  combat 
force  and  the  difficulties  of  mixing 
different  national  forces  in  a  single 
command  structure. 


ACKNOWLEDGEMENTS 

Research  that  made  this  paper  possible  was  sponsored  by 
Mr; 'Andrew  Marshall,  Director  of  Net  Assessment,  Office  of 
the  Secretary  of  Defense,  and  Dr.  Swart  Johnson;  Director, 
Command  and  Control  Research  ■  Program,  Institute  for 
National  Strategic  Studies,  National  Defense  University. 
The  authors  are  grateful  to  them  for  their  support  and 
encouragement.  The  authors  also  wish  to  thank  research 
assistant  Ms,  Lisa  McAnany  for  her  assistance  in  the 
preparation  of  this  manuscript. 

REFERENCES 

l Norman,  DA,  Memory  and  Attention,  2nd  edition,  New 
York’  John  Wiley,  1976. 

2Sie»n,  H.A,  The  Sciences  of  the  Artificial,  2nd  edition, 
Cambridge.  The  MIT  Press,  1981;  Kahaeman.  D,  Slovic. 
P,  and  Tversky,  A.,  Judgement  Under  Uncertainty 
Heuristics  and  Biases,  Cambridge;  Cambridge  University 
Press,  1982;  Tversky,  A.  and  Kahoeman,  D,  The  Framiog 
of  Decisions  and  the  Psychology  of  Choice,”  Science,  No 
211,  1981, 

3 Chase,  W,G,  and  Simon.  H.A ,  “Perceptions  in  Chess” 
Cognitive  Psychology,  197}, 

4March,  J.G,  and  Simon  H  A ,  Organisations.  New  York: 
John  Wiley,  1958. 

3 See  Cyert.  RJd.  and  March.  J.G,  A  Behavioral  Theory  of 
the  Firm,  Englewood  Cliffs.  NJ:  Prentiee*Hall,  1963, 
Simon,  H.A .  Models  of  Man ,  New  York;  John  Wiley. 
1957.  For  an  example  of  this  schema  applied  to  the 
problems  of  the  president  as  chief  executive  officer  in 
cnscs,  see  Paul  Y.  Hammond  and  Michael  D.  Salomone. 
Constraints  and  Boundary  Conditions  Affecting  C3I 
Survivability,  Manna  del  Ray.  The  Analytical  Assessments 
Corporation,  1981, 

^ March  and  Simon,  Organisations.  195$. 

7Minttberg.  H,  The  Structure  cf  Organizations,  Englewood 
Chffs.  NJ:  Prentice-Hall.  1979,  Malone.  T.W..  Organising 
Information  Processing  Systems.  Working  Paper.  Palo  Alto 
Research  Center.  XEROX,  1982. 

$  Emery.  J  C .  Organisational  Planning  and  Control,  New 
York:  MacMillan,  1969. 

^March  and  Simon.  Organisations,  1958;  Emery, 
Organizational  Planning  and  Control,  1969;  and  Malone, 
Organising  Information  Precsssing  Systems,  1982. 

10March  and  Simon,  Organltations ,  1958. 

1 1  Emery,  Organizational  Planning  and  Control,  1969, 

l^Simon,  The  Sciences  of  the  Artificial,  198K 

13lbid. 

M  Emery,  Organizational  Planning  and  Control,  1969, 
lslbid. 


42b 


lfCyert  lad  March.  A  Behavioral  Theory  of  the  Firm, 
1963. 

* 7  Emery,  Organizational  Planning  and  Control,  1969. 

l^Mirch  and  Simon.  Organizations,  J958. 

19TfcU  it  ooc  of  the  more  tragic  tod  striking  example!  of 
the  dingers  of  optimizing  wrthsa  narrow  boundaries. 

2®£mery,  Organizational  Planning  and  Control,  1969, 

21riUows,  National  Defense,  New  York;  Riadom  Hoose, 
I9SJ;  Couhra,  R .  Illusions  of  Choice:  The  F-lll  and  the 
Problems  of  Weapons  Acquisition  Reform,  Princeton: 
Princeton  University  Press,  1977. 

22 Emery,  Organizational  Planning  and  Control,  1969. 

2Jlbid. 

24Simon.  The  Sciences  of  the  Artificial,  1951,  iod  Emery, 
Organizational  Planning  and  Control,  1969, 

25Eoery,  Organizational  Planning  and  Control,  1969, 

2<’Ibid. 


27WiliUmson.  0  E.  and  Ouchi.  W.G„  *Thc  Mirkets  »nd 
Hlervchies  Program  of  Research/  la  A 11.  Va&Jcven  tad 
W.F.  Joyce  (eds ),  Perspectives  on  Organizational  Design 
and  Behavior,  New  York:  John  Wiley,  1951, 

2*The  practice  of  holding  specialty  resource*  aside  »  be 
temporarily  attached  to  mission  subunits  it  an  effective 
strategy  for  overcoming  (his  problem.  The  main  cost  of 
this  strategy  is  that  It  increases  the  degree  of  involvement 
by  the  higher  level  commander.  Sec  Emery.  1969  and 
Simon,  1981. 

25Ii  is  not  clear,  however,  that  fanctionally  structured 
organizations  should  bo  any  less  prone  to  subunits 
parochialism.  Simon.  Administrative  Behavior,  1976. 

30CooUra.  Crecine,  Fischer,  Salomone.  Problems  of 
Command  and  Control  in  a  Major  European  War,  Marine  del 
Ray:  The  Analytical  Assessments  Corporation  In 
conjunction  with  Carnegie  Melton  University,  1953,  pp, 
67-73.  (hereafter  referred  to  at  Crecine.  etal);  and  Coulam 
and  Fuc her,  *An  Organizational  Theory  Approach  to  the 
Assessment  of  Military  Command  and  Control 
Capabilities,"  in  R.  Coulam  and  R.  Smith,  (eds).  Advances 
in  Information  Processing  In  Organizations,  Volume  II, 
Greenwich,  CT:  JA1  Press,  1955. 

3,Cmioe.  etal,  p.  47, 

32Crc«ine,  etal,  pp,  72-73, 

33lb«l,  p.  72. 

3 4 Crecine.  etal,  p  50. 

35lbid ,  p,  74, 


36lbid .  p,  75. 
37Ibid,  p,  51. 
3SIbid ,  pp.  75-76. 


427 


PLANNING  WITH  UNCERTAIN  AND  CONFUCITNG  INFORMATION 

Daniel  Serfaty 
Elliot  E.  Entm 
Robert R.  Tenney 

ALPHATECH,  Inc. 

Ill  Middlesex  Turnpike 
Burlington,  Massachusetts  01803*4901 


ABSTRACT 

A  fundamental  function  of  commanders  in  a  headquar¬ 
ters  involves  the  sequential  processing  and  integration  of 
information  from  multiple  sources.  An  experiment  was 
designed  to  test  hypotheses  related  to  the  way  experienced 
commanders  process  information  from  different  sources, 
update  currently  held  beliefs  in  the  light  of  new  and  con¬ 
flicting  information,  and  plan  the  realignment  of  troops  to 
face  possible  enemy  attacks.  The  experimental  simulation 
was  conducted  in  the  context  of  the  Headquarters  Evaluation 
Assessment  Tool  (HEAT)  project.  Three  army  officers 
received  sixteen  experimental  trials  In  a  randomized  order. 
Each  trial  presented  an  initial  intelligence  message  surmis¬ 
ing  the  enemy’s  attack  direction  and  information  reliabil¬ 
ity,  a  map  displaying  the  tactical  situation  show 
Information  that  cither  confirm  or  disconfirm  the  notions 
expressed  in  the  intelligence  message,  and  two  subsequent 
intelligence  updates  that  adjusted  the  enemy  positions 
depicted  on  the  map.  The  update  information  could  confirm 
or  disconfirm  the  initial  attack  direction  estimate.  Find¬ 
ings  showed  a  strong  recency  effect  in  all  experimental 
conditions  due  to  the  relative  order  of  positive  and  negative 
evidence.  Information  received  last  had  the  strongest 
impact  on  the  commander’s  attack  direction  estimates.  It 
was  also  found  that  the  commander’s  confidence  level  in  the 
reliability  of  his  information  sources  was  a  function  of  the 
consistency  of  the  source.  The  commander’s  planning 
behavior  followed  a  pattern  different  from  the  fluctuation  of 
their  beliefs.  A  primacy-like  effect  was  observed  in  the 
commander’s  planning  process:  most  of  the  troop  move¬ 
ments  and  reassignment  were  done  in  the  initial  stage. 
Lastly,  two  models  for  the  revision  of  beliefs  were  devel¬ 
oped  and  validated:  both  the  normative-descriptive 
Bayesian  model  and  the  contrast-inertia  descriptive  model 
predicted  the  commanders  attack  direction  estimates  as  well 
as  the  strength  of  their  beliefs  in  the  estimate.  The  empiri¬ 
cal  evidence  provided  additional  support  to  a  "rolling"  plan 
theory.  It  strengthened  the  assumption  that  commanders 
modify  their  estimates  and  plans  in  a  continuous,  evolving, 
and  dynamic  fashion  rather  than  in  a  discrete,  epochal, 
cyclc-to*cycle  manner. 

L  INTRODUCTION 

The  last  ten  years  have  witnessed  the  appearance  of 
several  paradigms  to  describe  Command  and  Control  (C2) 
processes.  These  include  Lawson’s  Process  Model  (1,  2], 
Wohl’s  SHOR  (Situation,  Hypothesis,  Options,  Response) 


paradigm  (3,  4),  and  the  HEAT  (Headquarters  Effectiveness 
Assessment  Tool)  Adaptive  Control  paradigm  (5J;  these 
models  arc  depicted  in  Figure  1.  All  three  models  view  the 
decisionmaking  process  as  a  cycle  comprising  an  assess¬ 
ment  of  the  situation,  a  comparison  of  the  current  situation 
to  the  situation  desired  by  the  decisionmakers,  and  a 
selection  of  an  option  (or  options)  to  maintain  or  achieve 
the  desired  situation. 

An  outstanding  issue  is  whether  the  planning  cycle  is 
best  viewed  as  an  evolutionary  process,  supporting  the 
"rolling  plan"  concept  suggested  by  Cushman  [6],  or  as  a 
sequence  of  independent  processes.  The  latter  point  of 
view  implies  that  the  -  'esse $  carried  out  at  each  planning 
cycle  can  be  understood  (and  analyzed)  without  regard  to 
those  carried  out  in  planning  cycles  that  came  before  or 
after.  This  point  of  view  docs  not  imply  that 
decisionmakers  have  no  memory  of  the  past,  only  that  they 
do  not  actively  reach  decisions  at  one  cycle  to  foster  the 
decisionmaking  process  at  a  later  cycle.  Conversely,  the 
"rolling  plan"  point  of  view  implies  that  the  understanding 
of  the  situation  assessment  process  requires  consideration 
of  potential  future  the  perceptions  and  decisions  It  also 
implies  that  understanding  of  the  option  selection  process 
requires  a  consideration  of  plans  and  decisions  that 
decisionmakers  anticipate  they  may  make  in  the  future 
This  point  of  view  stresses  learning  in  order  to  reduce 
uncertainty  as  an  important  characteristic  of  the 
decisionmaking  and  planning  process.  Lawson  12]  and 
Wohl  (7J  propose  rate  _  of_  change  of  uncertainty  as  an 
indicator  of  effectiveness  for  C2  systems.  Indeed,  probing 
and  hedging  strategies  selected  specifically  to  allow 
decisionmakers  to  learn  more  about  their  environment 
before  selecting  a  course  of  action,  can  be  understood  only 
from  the  perspective  of  decisionmaking  and  planning  as  an 
evolutionary  process. 

While  the  Process  and  SHOR  models  proposed  by  Law- 
son  and  Wohl,  respectively,  view  the  planning  and  deci¬ 
sionmaking  cycle  as  an  evolutionary  method,  the  current 
HEAT  Adaptive  Control  paradigm  decidedly  views  this  cycle 
as  a  succession  of  independent  processes.  This  conclusion 
is  evident  in  the  omission  of  measures  for  correlating 
observations  from  one  planning  cycle  to  the  next  in  the 
current  set  of  HEAT  measures.  This  omission  suggests  a 
weakness  in  the  current  HEAT  should  the  rolling  plan  con¬ 
cept  prevail.  The  current  HEAT  methodology  cannot  reveal 
how  decisionmakers  learn  about  their  environment,  select 
options  to  facilitate  learning  (e  g ,  probing),  use  learning 
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C,  HEAT  Adaptive  Control  Paradigm. 

Figure  1.  Three  Models  Describing  the  Command  and 
Control  Processes 
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sys‘e“s  9P!**Uy  involves  an  element  of  active 
learning  wherein  information-seeking  strategies  fee 
iha|b|h»t  Srni  *1 Icc,cd  by  decisionmakers  in  anticipation 
hat  they  will  better  understand  their  system  and  use  this 
understanding  to  advantage  in  Xullllfi  decisions.  Active 
learning  is  sound  only  if  the  commander  places  a  value  on 
information  that  will  be  available  to  him  in  the  future-  i° 

tile 'future*10  mfeo*'  /  ‘hC  '0mmander  Sivcs  no  weight  to 
teamtl.  a  ??'CmCnl  10  aClive  lean™8  IS  Passive 

earning  where  decisionmakers  leara  about  their  rnteS 

S,t  bThd?  r  st-,ea  °p,i°°s 

Ih.  :arn,ns-)  The  implications  of  active  learning  are 
*  !  *rt!!ee.m5k'l!S  ?nd  Planning  is  an  evolutionary  proc- 
m,ade  Ihe  pasl  m  ,hc  means  for  making 
decisions. in  the  future.  Active  learning  is  an  element  of  aU 

romnnmt  .  1*  “^  cntcrl’rises'  aDd  is  in  evidence  when  a 
MM^rKnowl^f  r  rd"Cl  surveillance  and  reconnais- 
rille  I,  ,Kntnvl?df  of  lhe  eountry  is  to  a  general  what  a 
s„ ' V.?  j^Fentryman,"  (8)).  We  expect  that  option 
"  cbvi‘‘f!  'he  Generate  Alternative  Courses 
of  Action.  Predict,  and  Decide  processes)  in  the  HEAT 

oternwveralC!uceh° -'d  T**?  a  F10^'”10"  of  decisions 
over  several  successive  planning  cycles. 

HYPOTHESIS  If 

Our  second  hypothesis  states  that  process  measures  are 
in°fmtt'dnl0|i!hC  confidcnce  ,ha'  commanders  place  in  the 
t  found  ^n  p7rrM,'‘Ve'v  ArSumen's  for  this  hypothesis 
Confmi  Es““a';on  theory  and  in  Stochastic  Optimal 
Eon  HioildZ  .Es'lma!'°n,  theory  tells  us  that  mforma- 
is“°,ld  be  8J'C“  a  weight  that  is  inversely  propor- 
ro  .11,  -^'  C0D.fid'“«  or  certainty  that  can  be  attributed 
to  that  information.  Stochastic  Optimal  Control  theory 
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tells  us  that  the  optimal  control  of  a  stochastic  system  is 
achieved  through  a  control  policy  that  is  conditioned  on 
the  uncertainty  surrounding  the  state  of  the  system  at' any 
time, (9).  For  example,  optimal  control  policies  for  arbi¬ 
trary  finite-state  Markov,  processes  are 'functions  of  the 
state  probability  distribution  at  any,  dime.  Our  argument 
docs  not  presume'  that  humans  are  optimal  estimators  or 
optima!  controllers,  but‘  that  they  are  sufficiently  rational 
to  exhibit  important  characteristics  found  in  optimal  esti¬ 
mators  and  optima!  controllers. 

HYPOTHESIS  HI 

Our  third  hypothesis  states  that  decisionmakers  are 
sensitive  to  ihe' order  of  presentation  of  information  that 
confirms  or  disconfirms  prior  beliefs  when- they  assess  a 
situation.  The  argument  for  this  hypothesis  is  based  on 
several  models  that ’have  been  proposed- in  cognitive 
science  to  describe  human  decisionmaking.  We  now 
consider  briefly  these  models. 

It  is  generally  acknowledged  that  decisionmakers  do 
not  learn  nearly  as  much  from  newly  acquired  information 
as  the  information  .warrants  (10-12).  Tolcott,  et  al.  (13) 
note  that  decisionmakers  usually  place  undue  confidence  in 
the  ^correctness  of  prior  decisions  and  assessments  (deci¬ 
sions  and/or  assessments  hereafter  referred  to  as  ’posi¬ 
tions'),  supporting  the  idea  that  people  do  not  readily  leam 
from  experience.  Decisionmakers  tend  to  anchor  to  prior 
beliefs  by  inadequately  adjusting  their  position  upon 
consideration  of  new  information.  Citing  the  earlier  work 
of  Wason  (14)  and  Einhorn  (15),  Tolcott,  et  al,  point  out 
that  decisionmakers  tend  to  seek  information  that  confirms 
their  pnor  position,  and  ignore  evidence  that  disconfirms 
their  position.  Lopes  (16)  and  Tolcott,  et  al,  attribute  this 
cognitive  bias  to  a  process  where*  a  prior  position  is 
established,  and  new  information  is  selectively  used  to 
adjust  the  position.  This  process  produces  a  final  position 
that  lies  somewhere  between  the  prior  position  and  the 
position  that  would  be  obtained  only,  on  the  basis  of  the 
new  information.  Tolcott,  et  al,  also  offer  the  hypothesis 
that  newly  acquired  information  is  not  necessarily 
combined  with  old  information,  but  is  combined  with 
judgments  based  oa  the  old  information. 

Einhorn  and  Hogarth  ( 17 )< offer  a  different  view  of  the 
picture.  Like  Lopes  and  Tolcott,  et  al,  they  note  that 
1)  people  judge  new  information  in  the  context  of  their 
prior  beliefs,  and  2)  information  received  by  a  decision- 
maker  may  support  or  refute  his  prior  belief.  However, 
their  own  research  indicates  that  people  tend  to  place 
greater  emphasis  on  newer  information  than  on  prior 
information.  They  propose  a  theory  of  information  inte¬ 
gration  that  is  based  on  three  general  principles  describing 
how  people  process  information.  They  hypothesise  that: 

•  Information  is  updated  and  beliefs  changed  through  a 
sequential  anchoring  and  adjustment  process. 

•  A  decisionmaker  classifies  incoming  information  as 
.either  supporting  or  refuting  the  currently  held  position. 

•  The  weight  assigned  to  new  information  is  dependent  on 
the  confidence  maintained  by  the  decisionm?’:cr  in  the 
anchor. 


Einhorn  and  Hogarth  "have  developed -a  number  of 
mathematical  models  of  situation  assessment  and  decision- 
making  based  on  these  principles.  These  models  capture 
both  “the  anchoring  and  adjustment  process,  as  well  as  the 
process  decisionmakers  employ  for  dealing  with  confirming 
and  disconfirming  evidence.  Section  V  will  focus  on  the 
validation  of  these  models  using  the  experimental  data 
collected  in  this  study. 

DL  EXPERIMENTAL  METHOD 
EXPERIMENT  OVERVIEW 

Information  integration  and  planning  processes  are 
studied  in  the  context  of  a  table-top  exercise.  The  protocol 
is  an  elaboration  of  two  pencil-and-papcr-  games,  one 
employed  by  Entin,  et  al,  (18)  and  one  described  by 
Tolcott,  et  al,  (13).  As  a.  background  to  the  exercise, 
commanders  are- told  that  the  relations  between  the  Soviet 
Union  and  the  United  States  have  greatly  deteriorated  and 
that  a  clash  of  forces  in  several  parts  of  the  world  is 
imminent.  Tne  subjects  are  asked  to  assume  command  of 
the  52nd  Mechanized  Infantry  Division,  stationed  either  m 
the  Fulda  Gap,  West  Germany  or  near  the  DMZ  in  Korea 
Their  primary  duty  is  to  consider  all  the  available 
intelligence  information  and  predict  the  enemy's  most 
likely  main  avenue  of  attack.  Based  on  this  estimate  of 
enemy  intent,  they  are  to  construct  a  plan  allocating  and 
reassigning  resources  to  best  thwart  the  attack. 

The  experiment  passes  through  four  phases. 

First,  the  commander  receives  an  intelligence  brief 
describing  the  intelligence  analysts'  best  estimate  of  the 
enemy's  avenue  of  attack.  This  estimate  is  purportedly 
based  on  information  that  is  from  two  to  ten  days  old. 
Following  a  brief  time  to  consider  the  message,  the 
commander  is  asked  to  give  his  own  estimate  of  the  attack 
avenue  and  his  confidence  in  the  information  supplied. 

Second,  the  commander  is  shown  a  map  (Fig.  2)  of  the 
Fulda  Gap  (or  the  Korean  DMZ  area)  area  depicting  the 
deployment  of  their  troops  and  the  best  estimate  of  the 
enemy's  positions  and  strengths.  The  commander  is  told 
that  Orange  troop  information  displayed  on  the  map  is 
between  12-16  hours  old.  After  a  short  time  to  review  the 
situation  map  and  his  own  force  list,  the  commander  is 
asked  to  give  a  second  vstimatc  of  the  enemy's  most  likely 
attack  approach  and  his  confidence  in  the  information 
provided  to  date.  Following  these  assessments,  the 
commander  has  approximately  20  minutes  to  develop  a 
plan  sting  troop  positions  and  deploying  reserve  units 
(eg.,  aa  calvary  and  assault  helicopter  units)  to  face  the 
enemy's  attack. 

Third,  the  commander  receives  the  first  of  two  intelli¬ 
gence  updates  of  the  Orange  force  dispositions.  The  update 
may  show  change  to  Orange  force  locations  or  may 
show  some  adjustments,  corrections,  additions,  or  deletions 
to  Orange  dispositions.  The  commander  is  told  that  this 
information  is  six  to  eight  houi.  old.  Given  this  new 
information,  the  commander  has  an  opportunity  to  revise 
his  attack  approach  estimate,  confidence  assessment,  and 
plan. 
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Fourth,  the  commander  is  given  the  second  intelli¬ 
gence  update  of  the  Orange  force  dispositions.  Once  again, 
the  information  contained  in  the  update  may  depict  some 
alteration  to  Orange's  force  deployments,  or  show  no 
change.  The  commander  is  told  that  this  information  is 
one  to  four  hours  old.  The  commander  is  then  allowed  one 
last  time  to  revise  his  attack  estimate,  confidence  assess¬ 
ment,  ard  resource  allocation  plan. 

The  experiment  structure  allows  the  manipulation  of 
three  independent  variables.  The  first  independent  variable 
is  enemy  avenue  of  attack,  which  refers  to  the  enemy's 
most  likely  origin  of  attack  (e  g..  North  or  South)  predicted 
by  the  intelligence  lysts  in  the  (first)  intelligence 


report.  The  second  independent  variable  is  represented  by 
the  reliability  (high  or  low)  attributed  by  the  intelligence 
analysts  to  the  information  presented  in  the  intelligence 
brief.  The  third  independent  variable  is  the  order  of 
presentation  of  the  briefings  to  the  commander.  Order 
determines  whether  the  information  depicted  os  the 
situation  map  (the  position  of  Orange  forces)  and  each 
intelligence  update  confirms  or  contradicts  the  attack 
approach  estimate  given  in  the  first  intelligence  report. 

SUBJECTS 

One  captain  and  two  majors  from  the  Army's  101  st 
Airborne  Division,  Ft.  Campbell,  Kentucky,  served  as 
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ssSgsa l  A3  6:ei5ssb!£kE:12  5tneJjciw. 
ca — aa3s5  as  fie  pJrccm  krd,  c2  Ce  rw  mijros  fad 

SSTci  £S  i'JwJ-.iC)'  CmZZSmL 

INDEFEND^TVARUELES 

The  cqcbxt  .-.a.:ipclar.rd  three  gsfrpr-drrs  n=> 
tK  l)eeemr  itssc  cf  ir-rcV;  2)^a»5a  seuroe 
K^iSr,  cd  3)23fem=r5 ba  yrtraan  cir.  We  sw 
icslccintn. 

P-r — r  Arrr?  cf  AryV —  defined  as  the  crteEyare 
ta^rja1  pcrdsfeo  of  lie  enemy's  2=2=3  avenue  cf  rxlr 
Tics  ns  yacad  t)  cfiiiHib  a  psodr  pwr  pesifiea 
c  lie  meads  of  Cr  djera  cf  ccem/s  ?r=rx  igs&cL 
Icfersatica  23  ri=  form  cf  as  cteHigeece  fcnrf  to 
sjCaaSa^  i-rW  *s  yield  23  estimate  cf  lie  ^sad> 
(ccrfj  Tc»  sea  ta  tie  Frfda  Gt?  ja=rb  and  easx 
versus  west  t3  Cr  Kcccac-DMZ  scenario)  tie  c=sr  «ocM 
BkJjt  we  to  Isrxh  a  rorioc  arrack. 

Trfcmtiy;  Source  Rc^ab^it*-  —  ifeeJ  as  tie 
confidence  ci  reliability  tic  istelfigeccc  analysts 
(papcredlj)  artrib ste  to  lie  source  cf  tie  esemy 
deployment  iufcnnatica  prtmdei  to  tie  subverts.  Theories 
fro  =1  cojauve  sticccc  suggest  liat  bdiridult  «iji 
informatics  by  its  perceived  reliability  [17].  [19].  Ties, 
information  perceived  as  relatively  high  in  reliability 
should  hire  a  larger  impact  on  aa  nJiridriTi  estiea:  of 
enemy  position  tan  information  perceived  as  lower  in 
rcHability.  lie  intelligence  messages  provided  ta  lie  low 
reliability  condition  were  gives  a  low  to  moderate 
confidence  evaluation  by  lie  intelligence  analyse.  Tie 
intelligence  messages  provided  in  tie  high  reliability 
condition  were  given  a  moderate  to  high  confidence 
evaluation. 

£\cry  written  intelligence  brief  shown  to  a  subject 
contained  two  parts;  tic  first  delineating  a  particelar 
arcane  of  enemy  attack  surmised  by  tie  intelligence  ana¬ 
lyst  ,  and  tie  second  indicating  tie  analysis'  confidence  or 
reliability  in  tie  information  used  in  their  estimation. 

Two  different  north  (or  cast)  and  two  different  south  (or 
west)  av cnees  of  approach  were  crossed  with  two  different 
low  reliability  and  two  different  high  reliability  confidence 
levels  to  produce  the  sixteen  intelligence  messages  for  each 
scenario  required  for  the  experiment. 

Order —  After  reviewing  the  initial  intelligence  mes¬ 
sage,  each  subject  received  three  information  messages 
sequenced  in  time.  The  information  in  these  messages 
either  confirmed  or  disconfirmed  information  regarding  the 
enemy’s  intended  avenue  of  attack  given  in  the  initial 
intelligence  message.  Order  was  thus  defined  as  the 
sequence  of  confirmatory  and  contradictory  evidence  pre¬ 
sented  in  the  three  information  messages.  The  manipula¬ 
tion  of  this  vanablc  provided  tfu.  means  necessary  to  lest 
for  the  contrast  effect  predicted  by  the  accretion  and  dis¬ 
count  models  of  Einhom  and  Hogarth  [17].  There  are  eight 
(23)  possible  permutations  of  ordering  within  the  three 
information  messages  provided  to  the  commanders  follow¬ 
ing  the  initial  intelligence  message.  Two  of  these  permu¬ 
tations  are  ’all  confirming*  and  ’all  discontinuing’,  and 
yield  no  data  to  confirm  or  refute  the  contrast  effect  pre¬ 


dated  by  the  FmVr?  and  la ogarth  model  Tins  model  a_» 
perdams  thn  the  ccuarag  effect  «i3  be  rtidhtlj  weak  if 
c-;:firrr'-g  sfccmaiSsa  a2er mtes  witis  disccufirrrug  mfer- 
snrfca  (Lm.  cmC»diKonr2a<ceto  and  diKtefea- 
cccfendisncfee).  In  short,.  fcer  orderings  were  net 
csed.  The  efsenria  presented  in  the  three  gfeematisa 
messages  provided  the  wnmairn  (referred  to  as  SmSa 
Map,  Update  One,  ami  Update  Two,  respectively)  was 
CKtips.lrr.fd  across  te  sequences  as  shown  in  Table  J. 


TABLE  2.  SEQUENCES  OF  INCOMING  EVIDENCE 


L ml 

SricaticoMap 

Update  One 

Update  Two 

1 

Confirm 

Confirm 

Discccfirm 

2 

Confirm 

Discccfirm 

Discccfirm 

3 

Disaffirm 

Confirm 

Confirm 

4 

Dutesfea 

Discccfirm 

Confirm 

SCENARIOS 


The  experimental  trials  were  nested  within  two 
scenarios.  These  scenarios  were  csed  to  control  for 
learning  effects  and  to  insure  that  results  were  not  scenario 
specific.  Eight  cf  the  experimental  trials  depicted  force 
laydowns  ia  and  around  the  Fulda  Gap,  West  Germany, 
while  the  remaining  eight  trials  showed  force  laydowns  ai 
the  border  between  North  and  South  Korea  where  the  Irnjm- 
Gang  River  crosses  the  demilitarized  zone  (DMZ).  In  boa 
scenarios,  initial  Blue  troop  positions  were  held  constant 
(and  subjects  were  informed  cf  this  fact),  but  Orange 
positions  varied  wia  experimental  condition.  For  half  the 
trials.  Orange  laydowns  depicted  a  discernible  northern  bus 
for  the  Fulda  G2?  scenarios  and  an  eastern  bias  fer  the 
Korean  scenarios.  That  is.  a  large  concentration  of  Orange 
forces  in  the  Fulda  Gap  scenario  appeared  in  the  northern 
sector  to  give  the  impression  that  the  enemy  was  preparing 
to  attack  using  the  northern  corridor.  Similarly,  Orange 
laydowns  in  the  remaining  Fulda  Gap  and  Korean  scenarios 
depicted  disccmable  southern  2nd  western  biases, 
respectively.  Figure  2  illustrates  a  schematic  of  the  Fulda 
Gap  Situation  Map  depicting  a  northern  bias. 

DEPENDENT  VARIABLES 

Three  dependent  variables  were  assessed  after  the 
initial  intelligence  message  and  after  each  of  (he  three 
information  messages  for  each  trial: 

•  prediction  of  the  avenue  of  the  enemy's  attack 
0-e,  North  versus  South  for  the  Fulda  Gap  scenario  or 
East  versus  West  for  the  Korean  scenario); 

•  estimation  of  the  probability  tim  the  specified  attack 
approach  would  be  used; 

•  confidence  in  the  information  received  at  (hat  point. 

Following  the  introduction  of  the  Situation  Map 
showing  Blue  and  Orange  laydowns  (i.c.,  the  first 
information  message),  the  subjects  were  w_*cd  to  develop  a 
plan  for  allocating  (or  reallocating)  their  resources  to  best 
counter  (he  suspected  avenue  of  (he  enemy  s  attack.  After 
each  of  the  updates  that  followed  (i.e.,  information 
messages  two  and  three),  the  subjects  were  giv  □  the 
opportunity  to  revise  their  plan  (o  accommodate  changes  «r» 
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lhdz  ate  of  fbz  cszsfs  mtesied  zv ernes  of  attack. 
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Farr  *S£Zx seal  depended  measures  were  derived  ton 
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•  dte  creier  of  ceils  gjvee  criers  to  pare  to  a  nr* 
politics; 


We  esc  the  fcl Jawing  gyrico: 


«  -  0.  1. 2,  3 
x-  1,2.3 

Q  : 


steles  ia  sxtealbn  assessment  process 

slages  ia  planning  process  (so  planning 
aSsttgeO) 

ebjertive  confidence  a  the  incoming 
cfcsa&3  [5c] 


-  tee  camber  of  unite  ghee  criers  reassigning  them  to  a 
new  ntocrjiy; 

*  the  number  of  feme  orders  to  move  cr  reassign  ceils 
(iaclsdieg  co edirienal  orders  such  as:  "if  lie  enemy 
amacks  ten  toe  south,  fee  1-5  mechanized  infancy  bat- 
taljba  will  be  moved  to  seeb-asd-seeb  a  pos?xs;')  and 

•  Ibc  amber  of  ceils  reassigned  cr  moved  to  a  Division 
or  to  a  ceaml  position.  This  measure  was  used  to 
assess  Bice's  hedging  tendencies. 

EXPERIMENTALDESIGN' 

Tbe  experiment  design  called  for  a  2  (Enemy  Avesee  of 
ABack)  x  2  (Information  Soerce  Reliability)  x  4  (Order) 
factorial  design.  Each  of  the  two  scenarios  were  csed  for 
half  of  toe  experimental  conditions;  pairing  of  scenarios 
and  conditions  was  random.  Each  subject  was  randomly 
assigned  to  all  of  the  treatexat  conditions. 

IV.  EXPERDIENTAL  RESULTS 
OVERVIEW:  THE  DECISION  PROCESS 

This  section  describes  results  obtained  ia  the 
experiment.  Then  resells  are  interpreted  to  identify 
behavior  trends  and  lest  oer  three  experimental  hypotheses. 
The  decisionmakicg  processes  of  the  subjects-commanders 
in  Figure  3  arc  ssemariaed  ia  this  experiment. 
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Figure  3.  Commanders'  Decision  Processes. 
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central  area  (division  command  or  central 
region) 


Tbe  decision  process  in  question  is  made  of  two  sepa¬ 
rate  bet  interacting  processes.  First  is  the  sitoation 
assessment  process,  ia  which  the  commandos  combine,  in 
a  seqcential  manner,  incoming  information  or  evidence 
(e.g.,  map)  with  previously  held  beliefs  to  prodcce  an 
updated  hypothesis  as  to  the  likely  enemy  avecae  of  attack. 
Second  is  the  seqcential  planning  process  in  which  toe 
commander  uses  knowledge  of  his  troops'  positions  and  his 
current  beliefs  to  mike  decisions  concerning  toe  reselling 
hypothetical  movement  of  his  troops  to  best  defend  2ga:nst 
toe  possible  enemy  attack.  Note  that  no  actual  movement 
of  troops  occurs,  this  is  oa-papcr-planning  only.  We  con¬ 
clude  that  these  decisions  arc  made  in  a  non-reactive  hostile 
environment.  Consequently  we  assume  a  "separation  prin¬ 
ciple"  between  the  two  processes.  The  dual  process  of 
situation  assessment  and  planning  pertains  to  the 
"UNDERSTAND"  and  "DECIDE"  nodes  in  the  HEAT 
hexagon  paradigm. 

The  results  presented  in  this  section  describe  toe  step- 
by-step  evolution  of  all  the  variables  previously  described. 

SITUATION  ASSESSMENT  RESULTS 


At  each  stage  in  toe  situation  assessment  process,  toe 
commanders  were  asked  to  provide  a  hypothesis  w«.h 
respect  to  toe  enemy  avenue  of  attack,  a  probabilistic 
assessment  of  that  hypothesis  (strength  of  bclieQ  and  a 
confidence  in  toe  evidence  t*ey  arc  presented  with.  To 
simplify  toe  data  presentation,  all  probabilities  refer  to  toe 
initial  hypothesis.  Note  that  since  toe  hypothesis  is  a 
binary  one,  i.e.,  North  or  South,  a  0.7  probability  of  a 
northern  attack  is  equivalent  to  a  0.3  probability  of  a 
southern  one.  Table  2  represents  an  aggregate  of  toe 
probability  data  averaged  across  subjects,  for  each 
information  sequence  (order  condition).  Table  3  represents 
the  average  confidence  data.  For  clarity  of  purpose,  results 
of  Tables  2  and  3  are  plotted  in  Figs.  4-7.  These  graphs 
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TABLE!  AVERAGE  PROBABILITY  (STRENGTHS  OF 
EEUEFS  IN'  CURRENT  mTOTirESIS) 


Average  probabilities  and  s^sdard  errors 


75.S  1  82.9 


52.5  25.8 


Order 

PO 

CCD 

68.3 

(16.9) 

CDD 

65.4 

(18.9) 

DOC 

70.8 

(21-3) 

TW* 

(T(L  *7 

1AA. 

OD./ 

(26.7) 

Probability  that  an  enemy  attack  will  occur  from  the 
initially  assumed  direction. 

TABLE!  AVERAGE  CONFIDENCE  LEVELS 


Avenge  confidence  levels*  and  standard  errors 


C3 


Order 

CO 

Cl 

CCD 

65.8 

(13.5) 

72.5 

06.5) 

CDD 

.  62.5 
05.3) 

72.9 

(20.1) 

DCC 

69.6 

(13.0) 

62.0 

(13.5) 

DDC 

59.6 

(16.1) 

57.5 

(16.9) 

69.2  67.9 

(17.3)  (18.1) 


Confidence  level  in  estimated  probability  of  attack  as 
assessed  by  the  subjects. 


Figure  5.  Situation  Assessment  Results  (Probability  and 
Confidence)  for  Sequence  CDD. 


Figure  6.  Situation  Assessment  Results  (Probability  and 
Confidence)  for  Sequence  DCC. 


Figure  4.  Situation  Assessment  Results  (Probability  and 
Confidence)  for  Sequence  CCD. 


Figure  7.  Situation  Assessment  Resu.ts  (Probability  and 
Confidence)  for  Sequence  DDC. 


Figure  8.  Change  io  confidence  level  as  a  function  of  the 
consistency  of  the  source. 

summarise  all  the  input,  probability  a ad  confidence  data  for 
each  order  conditions  and  provide  useful  insight  into  the 
dynamics  of  the  commanders'  information  integration  and 
belief  updating  processes. 

Key  observations  can  be  made  from  the  data  presented 
so  far.  They  indicate  some  essential  trends  in  decision¬ 
making  behavior.  Most  were  advanced  in  osr  experimental 
hypotheses,  but  some  surprised  the  experimenters  never¬ 
theless.  The  probability  results  arc  all  significant  at  the 
P<  0.05  level. 

Observation.!:  Commanders,  without  exception,  appear  to 
behave  rationally  at  each  stage  of  the  situation  assessment 
process. 

A  quick  look  at  the  graphs  will  convince  the  reader 
that  the  subjects  ream  to  the  new  information  by  updating 
their  beliefs  in  the  direction  of  the  incoming  evidence.  It 
does  not  necessarily  mean  that  they  change  their  current 
hypothesis.  For  example,  in  the  CDD  case,  the  first  piece 
of  evidence  confirmed  the  initial  hypothesis  and  brought  up 
the  probability  from  65.4%  to  80 A%.  The  first  disconfir- 
matory  evidence  lowered  the  strength  of  the  belief  in  the 
initial  hypothesis  to  52J%,  but  not  quite  enough  to  make 
the  commanders'  switch  to  the  opposite  hypothesis.  The 
subjects  needed  a  second  piece  of  disconfirmatory  evidence 
to  lower  their  probability  assessment  to  25.8%,  thereby 
adopting  the  opposite  hypothesis  as  their  final  belief. 

These  results  although  predictable  are  intuitively 
appealing.  We  are  dealing  with  experienced  commanders 
who  understand  the  value  of  information  and  know  how  to 
integrate  it  with  their  current  belief.  But  do  they  weigh 
correctly  this  new  information  with  their  current  belief? 
The  next  observation  attempts  to  answer  this  question. 

Observation  2:  The  sequence  in  which  the  new  evidence  is 
presented  makes  a  difference. 

The  order  effect  is  omnipresent  in  the  data.  For 
instance,  let  us  compare  sequences  CDD  in  Fig.  5  and  DDC 
in  Fig.  7  They  both  contain  two  pieces  of  disconfirma 
lory  evidence  and  one  piece  of  confirmatory  evidence. 
However  the  fioal  average  probabilities  (strength  of  belief) 


are  drastically  different:  p3  «  25.8%  for  CDD  versus  p3  - 
57.1%  for  DDC.  These  cumbers  cot  oc!y  reflect  a  quanti¬ 
tative  difference  but  also  represent  an  opposite  final 
hypothesis  as  to  the  likely  avenue  of  enemy  attack.  This 
result  is  remarkable  in  that  it  shows  clear  evidence  of  the 
phenomenon  of  recency.  It  validates  the  hypothesis 
advanced  by  Hinhora  and  Hogarth  as  to  the  presence  of 
recency  effect  in  2ny  mixed  evidence  sequential  information 
integration  process.  One  should  note  that  sz eh  effects  arc 
cot  predicted  by  classical  Bayesian  decision  theory.  Sec¬ 
tion  5  will  be  devoted  to  a  more  elaborate  discussion  on 
the  subject  of  modeling.  Out  third  experimental  hypothesis 
was  validated  by  the  finding  of  a  strong  order  effect 
(p  <  0.01).  It  Supports  our  conjecture  that  in  addition  to 
the  quantity  and  quality  of  information  entering  a  headquar¬ 
ters,  the  order  in  which  this  information  is  presented  has  a 
key  effect  on  .the  judgment  quality  of  the  decisionmakers 
involved. 

Observation  3:  The  commanders  confidence  level  in  the 
incoming  evidence  tend  to  increase  slightly  over  time 
regardless  of  their  initial  and  subsequent  judgments. 

Although  not  statistically  significant,  this  long-term 
growth  trend  has  been  shown  in  other  studies  (see  {131  for 
example)  involving  sequential  information  processing  in  a 
command  and  control  environment. 

Observation  4.  The  confidence  level  in  the  reliability  of 
information  sources  is  a  function  of  the  consistency  of  the 
source. 

This  is  a  short  term  trend  pertaining  to  the  confidence 
levels  behavior  over  time.  As  shown  in  Fig.  8, 
commanders  will  upgrade  their  confidence  levels  in  an 
incoming  information  source  when  the  source  provides  two 
subsequent  pieces  of  evidence  pointing  m  the  same 
direction  and  downgrade  their  confidence  levels  when  the 
sources  provides  two  subsequent  pieces  of  evidence  printing 
to  opposite  directions. 

This  finding  supports  our  first  experimental 
hypothesis  stating  that  measures  taken  in  subsequent 
planning  cycles  are  interdependent.  Confidence  measures 
are  a  case  in  point.  A  one-cycle  backtracking  is  neccssaiy 
to  be  able  to  predict  the  level  of  confidence  iq  information 
source  expressed  by  the  commanders  in  the  present  cycle. 

Observation  5:  The  commanders'  confidence  in  (heir 
information  sources  is  remarkably  stable. 

The  previous  finding,  although  statistically  signifi¬ 
cant,  seems  to  hide  the  fact  that  fluctuations  in  confidence 
levels  are  rather  weak.  A  10%  variation  seems  to  represent 
an  upper  bound.  Why  is  that?  It  appears  that  an  across- 
conditions,  across-subjects  confidence  level  average  is 
66.9%.  with  a  standard  deviation  of  only  6.1%.  Almost 
independently  oi  the  reliability  of  the  source  or  the 
strength  of  the  current  belief,  subjects  seem  to  assign  an 
approximate  67%  confidence  level  in  the  incoming  infor¬ 
mation.  In  other  words,  for  a  binary  hypothesis  testing 
process,  subjects  assign  a  subjective  likelihood  ratio  of 
about  2.1  that  the  incoming  information  is  true.  As  sur¬ 
prising  as  it  may  be,  this  result  is  supported  by  previous 
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studies  of  sequential  information  processing  (Lopes,  19S1; 
Ward,19S3).  Wc  will  use  this  rafio  as  a  baseline  parameter 
in  the  modeling  effort  described  in  the  next  section- 

Otxervarion  6:  Strength  of  belief  is  weakly  related  to  the 
confidence  in  the  incoming  information. 

We  tested  a  more  restrictive  version  of  ocr  second 
hypothesis:  process  measures  (i.e.  probability  or  strength 
of  beliefs)  are  related  to  the  commander's  level  of  confi¬ 
dence,  in  his  information  sources.  This  hypothesis  can 
only  be  confirmed  at  the  initial  confidence  level.  A  rela¬ 
tively  low  confidence  level  (55.2%)  produced  a  relatively 
low  average  probability  (61.2%)  and  a  relatively  high  con¬ 
fidence  level  (73.6%)  induced  a  higher  average  probability 
(74.4%).  In  subsequent  stages  this  initial  effect  seems  to 
fade  away.  This  is  due  to  a  strong  recency  effect  and  to  the 
relative  stability  (67.7%  ±  6.1%)  of  the  confidence  leveL 
A  more  rigorous  explanation  will  be  given  io  the  next 
section. 

PLANNING  RESULTS 

This  subsection  focuses  on  the  experimental  findings 
obtained  in  observing  the  planning  portion  of  the  com¬ 
mander's  dccisionmakiog  process.  The  planning  decisions 
in  this  experiment  arc  defined  as  the  commitment  of  BLUE 
units  to  face  a  potential  attack  from  the  enemy  forces. 
This  commitment  can  take  the  form  of  a  geographical  unit 
movement,  a  unit  reassignment  to  a  different  geographical 
command  (without  actual  physical  motion),  or  commitment 
for  future  actions.  Recall  that  in  this  paper-and-pencil 
experiment,  all  planning  decisions  occur  at  the  pre- 
engagement  stage  and  therefore  arc  not  implemented  in  the 
field. 

The  main  difficulty  for  the  analyst  was  to  find  a  way  to 
quantify  the  written  protocols  the  commanders  produced  at 
each  planning  stage.  These  were  sometimes  long  and  elab¬ 
orate  fragmentation  orders  (FRAGOS) —  orders  that  did  not 
follow  specific,  easily  analyzable  formats.  They  were  nev¬ 
ertheless  done  in  good  faith,  with  real  professionalism  and 
are  at  present  being  used  by  the  authors  for  future  analysis. 
Table  4  shows  two  examples  of  such  written  protocols  for 
different  planoing  sequences. 

To  be  able  to  have  a  basis  for  data  analysis,  wc  decided 
to  assign  a  weight  to  each  type  of  unit  commitment. 

-  1  point  for  actual  movement  of  one  unit 

-  0.25  point  for  a  reassignment  of  one  unit  to  a 

different  command 

-  0.25  point  for  a  future  commitment  of  one  unit 

The  data  were  then  tabulated  for  each  subject  and  each 
experimental  condition  and  three  scores  were  produced  at 


each  stage: 

-  AH  : 

weighted  number  of  units  committed  in  the 
direction  of  the  currently  held  hypothesis. 

-AH  . 

weighted  number  of  units  committed  in  the 
direction  of  the  opposite  hypothesis. 

-  AN  : 

weighted  number  of  units  committed  in  the 
direction  of  the  neutral  direction  (central 
command  or  division  command). 

TABLE 4.  EXAMPLES  OF  WRITTEN  PROTOCOL 
Example  A: 

Frago  #15-2 

•Intelligence  has  shewn  the  units  in  the  west  to  bo- 
less  than  initially  reported.  Several  large  units  located  in 
•the-joast  now.  Task  organizations  no  change. 

Continue  to  plan  for  main  effort  In  the  eastern  sector 
now.  4-7  and  3-7  wiB  attack  to  2d  Bde  on  order. 

2-4  CAY.  move  to  (onward  positions  to  support  the  2d  Bde. 
Expect  aB  %  missions  to  be  executed  on  next  Frago. 

I  am  waiting  for  one  final  La!  surv,  before  the  Tina! 
decision  is  made  on  attachment 
Cdr  2d  Bde. 

1  expect  ycu  to  hold  the  ground  above  the  MOL  and  net 
need  any  further  reinforcement” 

Example  B: 

Frago  #11-2 

'Intelligence  has  been  unable  to  confirm  the  presence 
of  units  in  the  southern  sector  and  has  confirmed  the 
presence  of  units  in  northern  sector.  Therefore,  we  v/nl 
assume  that  the  effort  will  move  in  the  north.  Task 
Organization  changes  as  fellows: 

2-7  Atk  HeJo  OS  to  1st  Bde  in  2  hours 

1*4  CAV  stays  under  division  Control 

2-4  CAV  still  under  division  control.  Move  to  1st  Bde 
sector  and  (ink  up  unit  1-4  CAV. 

4-7  Asslt  Hel  Bn  move  to  positions  where  you  can  be 
quickly  committed  with  1st  Bee. 

%DS  to  1st  Bde. 

Although  Intel  appears  to  be  finishing  up  the  last 
InSurv,  we  nave  been  fooled  before.  Be  prepared  to  shift 
emphasis  back  to  the  north  if  that  does  occur  (Remain 
Flexible!  - _ 


The  following  two  observations  were  derived  from 
empirical  findings  associated  with  the  planning  process: 

Observation  _7.  Commanders  tend  lo  concentrate  their 
planning  activity  m  the  initial  planning  stage,  with  little 
changes  in  the  subsequent  stages  even  in  light  of 
conflicting  new  evidence. 

If  we  measure  the  total  amount  of  unit  movement  and 
assignment  at  each  stage  irrespective  of  the  direction  of  the 
troop  commitment,  we  can  construct  a  table  (Table  5) 
representing  the  total  quantity  of  activity  at  each  stage  for 
different  sequences  of  incoming  evidence.  The  pattern  is 
quite  significant  (p  <  0.02).  most  of  the  planning  activity 
is  concentrated  in  the  first  stage. 


TABLES.  AVERAGE  NUMBER  OF  BLUE  UNITS  MOVED 
OR  REASSIGNED  AT  EACH  STEP  OF  THE 
PLANNING  PROCESS 


\.  Step 

OrdcrN 

I 

2 

3 

CCD 

5  9 

0.5 

1.6 

CDD 

4  5 

0.5 

1.4 

DCC 

4.8 

1.9 

1.0 

DDC 

4.6 

0.2 

1  6 

Mean 

5  0 

0.8 

1.4 
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This  seems  to  represent  a  primacy-oriented  planning 
behavior  different  from  the  one  observed  in  the  situation 
assessment  part  where  recency  was  the  central  factor.  It 
seems  that  the  experienced  commanders  are  quite  willing  to 
modify  their  opinions  or  beliefs,  sometimes  drastically,  in 
the  light  of  new  evidence  but  are  reluctant  to  move  from 
the  position  they  anchored  in  the  initial  stage  {13J.  Their 
elaborate  mental  model  of  the  battle  field  probablyjacludcs 
the  high  cost  of  moving  troops  around  as  opposed  to  the 
relatively  low  cost  changing  a  belief  in  a  hypothesis.  In 
other  words,  they  recognize  that  the  dynamics  of  action  is 
different  from  the  dynamics  of  information.  This  very 
interesting  hypothesis  should  be  further  tested  in  realistic 
headquarters  environments. 

Observation  8:  Commanders  do  not  commit  themselves  to 
a  single  hypothesis  but  rather  hedge  against  future 
uncertainties. 

One  can  observe  that  most  (82%) .of  the  commitment 
of  units  follow  one  pattern:  a  movement  or  reassignment 
of  units  from  the  neutral  area  (central  or  division  command) 
towards  the  two  likely  avenues  of  enemy,  attack,  with  most 
of  the  units  assigned  to  the  most  likely,  avenue  of  attack. 
Figure  9  illustrates  this  finding. 


Figure  9.  Representative  Decomposition  of  a 
Commander’s  Planning  Decision. 


SUMMARY  OF  RESULTS 

Our  main  findings  demonstrate  that  even  in  the 
simplest  C2  environment,  situation  assessment  and 
planning  arc  dynamic  processes.  As  indicated  by  Fig.  3, 
dependent  variables  of  one  cycle  become  the  independent 
variables  of  the  next  and  the  derived  measures  are  closely 
interrelated.  Our  experimental  findings  indicate  that  the 
order  of  the  new  incoming  information  has  a  strong  effect 
on  both  processes.  This  order  effect  produces  a  rccency- 
type  behavior  for  the  situation  assessment  process  (with  a 
higher  sensitivity  to  negative  evidence)  and  a  primary-type 
behavior  for  the  planning  process.  It  was  determined  that 
the  commander’s  confidence  level  in  ,the  incoming 
information  is  an  essential  variable  in  this  decision 
process.  Moreover,  a  surprising  observation  is  that  this 
confidence  level  tends  to  stabilize  around  the  value  of  67% 
(equivalent  to  a  likelihood  ratio  of  2:1  for  incoming 


evidence)  regardless  of  the  context  of  the  information.  The 
next  section  will  build  on  these  findings  to  develop  models 
of  the  situation  assessment  process. 

V.  MODELING  RESULTS 
MODELING  FRAMEWORK 

This  section  focuses '  on .  the  situation  assessment 
process.  We  propose  three  candidate  models  to  explain  and 
predict  the  subjects'  sequential  belief  updating  process.  We 
chose  to  model  this  aspect  of  the  commanders'  decision 
process  for  the  following  reasons.  First,  as  explained  m 
Section  4,  the  data  collected  for  the  planning  behavior  was 
quite  difficult  to  quantify  and,  at  this  time,  no  simple, 
quantifiable  models  exist  to  describe  dynamic  planning 
processes.  Comprehensive  models  would  have  to  take  into 
account  complex  Lanchester-type  equations  to  quantify 
variations  in  tactical  effectiveness  due  to  the  relative 
movement  of  military  units.  This  approach  is  obviously 
beyond  the  scope  of  this  study.  On  the  other  hand,  the 
situation  assessment/judgment  data  is  more  amenable  to 
quantitative  modeling.  Moreover,  the  sequential  updating 
of  beliefs  is  an  essential  component  of  the  commander’s 
decisions.  The  process  by  which  new  evidence  from 
multiple  sources  is  integrated  with  current  hypotheses  and 
belief  has  been  the  focus  of  various  recent  studies  m 
applied  behavioral  psychology  ({13),  {17J,  {20)).  The 
ability  of  a  commander  to  generate  and  compare  alternate 
hypotheses  concerning  enemy  actions  is  a  central  clement 
in  the  HEAT  hexagon  (■'understand'*  node)  and  the  SHOR 
paradigm  ("H"  for  hypothesis  generation  and  evaluation). 
See  Figs.  IB  and  1C  for  details. 

The  results  pertaining  to  the  situation  assessment 
process  described  in  section  4  indicate  rather  complex 
phenomena.  For  example,  the  drastic  effect  that  the  order 
of  incoming  evidence  had  on  the  direction-of-altack 
assessment  must  be  accounted  for  in  a  realistic  model.  Wc 
propose  three  models:  a  descriptive  anchoring-and- 
adjustment  model  developed  by  Einhora  and  Hogarth,  called 
the  contrast-inertia  model,  a  normative  Bayesian  model, 
and  a  normative-descriptive  modified  Bayesian  model. 

DESCRIPTIVE  CONTRAST-INERTIA  MODEL 

This  model,  a  variation  on  Einhorn  and  Hogarth's 
con'xast-inertia  model,  is  based  on  three  principles 
concerning  the  way  information  is  processed.  It  assumes 
an  anchoring-and-adjustmenl  process,  the  evaluation  of  a 
single  hypothesis  (or  an  exclusive  binary  hypothesis,  e.g., 
North-South)  in  the  light  of  confirmatory  (positive)  or 
disconfirmatory  (negative)  evidence  and  the  existence  of  a 
conflict  between  forces  of  adaptation  and  inertia.  From 
Einhom  and  Hogarth,  1987. 

"Adaptation  is  modeled  by  assuming  a  contrast  effect 
between  the  level  of  current  opinion  and  the  nature  of 
evidence.  Specifically,  the  larger  current  opinion,  the  more 
it  is  discounted  by  negative  evidence  and  the  less  it  is 
increased  by  positive  evidence.  Inertia  is  assumed  to  take 
two  forms.  One  is  a  level  of  constant  inertia  that  reflects 
attitudes  toward  negative  and  positive  evidence.  The  other 
is  the  tendency  for  inertia  to  increase  across  time." 


437 


Wc  use  the  following  notation: 

Pi  :  probability  (degree,  of  belie!)  at  stage  i 

that  the  attack  will  come  from  the 
initially  assumed  direction 

Pi-I  ‘  probability  (degree  of  belie!)  at  stage  i-1 

that  the  attack  will  come  from  the 
initially  assumed  direction 

p0  ;  initial  degree  of  belief  in  the  initial 

hypothesis 

a  ■  sensitivity  to  disconfinn3tory  evidence 

1 

P  :  sensitivity  to  confirmatory  evidence 

o^.p^i 

Cj  :  subjective  confidence  in  the  i^1  piece  of 

evidence 

The  general  form  of  the  model  is  therefore: 

Pi  -  function  (pj-i»  a  or  P,  Cj )  (1) 

Two  forms  of  the  model  distinguish  the  processes  for 
dealing  with  disconflrmatory  and  confirmatory  evidence. 
Evidence  is  subject  to  contrast  effects  in  that  its  impact 
reflects  prior  position.  Specifically,  the  model  supports 
the  hypothesis  that  negative  evidence  will  be  discounted 
more  when  the  preceding  degree  of  belief  is  large,  whereas 
positive  evidence  will  lead  to  greater  upward  revision  of 
belief  when  the  degree  of  belief  is  small.  The  same  nega- 
live  evidence  will  induce  greater  discounting  when  prior 
opinion  is  high  as  opposed  to  low,  and  the  same  positive 
evidence  will  have  more  impact  on  belief  when  prior  opin¬ 
ion  is  low  as  opposed  to  high.  These  contrast  effects  can 
be  modeled  by  setting  the  adjustment  weights  for  negative 
and  positive  evidence  proportional  to,  respectively,  the 
prior  degree  of  belief  and  its  complement.  Thus, 

Pi  ■  PM  ■  ct*  Cj  *  pj.i  if  the  ft  piece  of  evidence  is 
disconfirmatory  (2) 

and 


Pi  ■  Pm  +  P*  C,  (1-Pi-i)  >f  the  ith  piece  of  evidence  is 
confirmatory  (3) 

The  force  toward  inertia  can  be  captured  in  the  above 
formulation  by  considering  the  meaning  of  the  constants  of 
proportionality,  a  and  p.  We  define  a  and  P  to  represent 
sensitivity  toward  negative  and  positive  evidence,  respec¬ 
tively.  Small  values  of  a  and  p  imply  low  sensitivity  to 
new  information;  large  values  of  a  and  p  imply  high 
sensitivity,  a  and  p  model  the  force  toward  inertia  by 
providing  a  mechanism  for  dampening  the  contrast  effect. 


The  contrast-inertia  model  provides  an  elegant 
mechanism  to  predict  the  order  effects  evident  in  the 
experimental  data.  Why  did  information  processed  last  in  a 
mixed  sequence  of  information  updates  (e.g.,  CDC)  have 
more  effect  on -final  opinion  than  information  encountered 
earlier?  The  answer  can  be  easily  proven  io  a  mathematical 
manner  by  "exercising  the  Eqs.  2  and  3.  The  model  always 
predicts- recency  effects  in  the  sequential  evaluation  of 
mixed  evidence,  a  fact  that  was  observed  in  all  our  data 
gathering  trials. 

In  terms  of  overall  performance  the  model  predicted  the 
human  data  for  all  four  sequences  very  well.  For  reasons 
explained  earlier  we  assumed  an  average  Cj  of  0.67.  The 
best  value's  for  the  sensitivity,  coefficients  a  and  p  were 
chosen  to  be  0.48  and  0.38  respectively.  Note  that  the 
sensitivity  to  negative  evidence,  a,  is -larger  than  the 
sensitivity  to  positive  evidence  p.  For  this  set  of  values, 
the  model's  predictions  of  updated  probabilities  stayed 
withio  11.2%  of  the  subject's  average.  This  is  a 
remarkable  fit  if  one  takes  into  account  the  relatively  large 
inter-subject  variability  (20.4%).  As  an  example,  Fig.  10 
shows  the  contrast-inertia  model's  predictions  as  compared 
to  the  subjects'  data  and  the  Bayesian  model  for  the  ODD 
sequence  of  incoming  evidence. 


Figure  10.  Models  -  Data  Comparison  for  the  CDD 
Sequence. 


NORMATIVE  BAYESIAN  MODEL 

The  Bayesian  framework  is  a  normative  model  for  the 
processes  of  sequential  inferences,  hypothesis  updating  or 
revision  of  beliefs.  It  provides  a  means  to  combine  new 
information  with  an  existing  hypothesis  and  produces  the 
resulting  hypothesis  in  an  optimal  fashion.  The  literature 
is  full  of  examples  showing  that  humans  are  not  truly 
"Bayesian*  and  are  affected  by  various  limitations  and 
biases  that  prevent  them  to  integrate  information  m  an 
optimal  fashion  ((15),  (16)).  Nevertheless,  Bayesian 
models  provide  a  frame  of  reference  for  comparing  actual 
iiuman  decisions  with  optimal  behavior.  According  to 
Bayes  theorem: 


p(H /  inf] - Fy-..nr  lMv  _ 

p(infj/  H}*  p(H)  +  p(mfj/  H)  •  p(H) 
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where 

H:  initial -hypothesis  (abclief)  (e  g.  Northern  attack) 

H ;  opposite  hypothesis  (e.g.  Southern  attack) 

Since  we  arc  dealing  with  mutually  exclusive  binary 
hypotheses: 

p  (H)  «  1  -  p  (H)  (5) 

p(H)  «  probability  that  hypothesis  H  is  true 

before  receiving  the  1th  piece  of  evidence 
(prior  strength  of  belief); 

■  PM 

p(H/infp  «  probability  that  hypothesis  H  is  true 
after  receiving  the  1th  piece  of  evidence 
(posterior  strength  of  belief); 


-  P, 


Therefore  we  can  write  Eq.  4  in  its  simplified  binary  form: 


Figure  11.  Bayesian  Updating  of  Beliefs. 


Pi 


PM 

PM  LRi4|l-p,.ij 


<«> 


Where  LRj  is  the  likelihood  ratio  of  the  incoming  i1*1  piece 
of  evidence: 


U*i 


rKi/H) 


0) 


From  Eq.  6,  one  notices  that  the  Bayesian 
formulation,  unlike  the  previous  contrast-inertia  model  docs 
not  allow  for  recency  factors  that  could  produce  order 
effects.  The  Bayes  formula  is  a  batch  processor.  At  the 
end  of  a  sequence  of  mixed  evidence,  only  the  amount  and 
quality  of  information  that  went  in  is  important,  not  the 
order.  A  graphical  way  to  represent  Eq.  6  is  shown  in 
Fig.  11.  For  example,  one  should  upgrade  a  prior 
probability  of  0.6  to  a  posterior  probability  of  0.75  if  a 
piece  of  evidence  confirming  the  hypothesis  by  a  ratio  of 
2:1  is  received. 

How  well  did  the  Bayesian  model  predict  the  subjects' 
data?  For  reasons  mentioned  before  and  for  comparability 
with  the  contrast-inertia  model,  we  fixed  the  likelihood 
ratio  to  2:1  for  confirming  evidence  and  1:2  for  dis- 
confirming  evidence.  This  reflects  the  empirical  confidence 
level  of  0.67  found  in  section  4.  The  Bayesian  predictions 
were,  in  average,  within  25%  of  the  subjects'  averaged  data 
(as  compared  to  11.2%  for  the  contrast-inertia  model).  The 
Bayesian  model  showed  a  "reluctance''  to  downgrade 
probabilities  in  the  presence  of  negative  evidence,  while 
the  subjects  and  the  contrast-inertia  model  were  over¬ 
sensitive  to  it.  Fig.  10  showed  an  example  of  the 
performance  of  the  Bayesian  model.  The  next  subsection 


subsection  will  show  how  to  improve  this  prediction 
performance  by  modifying  the  Bayesian  model. 

NORNUnVE-DESCRAWE  MODEL 

This  modeling  approach  follows  principles  described 
in  119)  and  is  referred  to  as  normative-descriptive.  To 
begin,  a  normative  model  is  developed,  which  in  this  case 
is  a  purely  sequential  Bayesian  scheme,  to  optimally 
determine  the  probabilities  (pj).  The  normative  model 
makes  these  determinations  based  on  evidence  derived  from 
the  decision  environment  (intelligence  messages,  maps, 
etc.).  Following  the  formal  delineation  of  the  normative 
scheme,  qualitative  descriptive  factors  deduced  from  the 
statistical  analyses  of  the  subjects'  strength  of  belief  data 
arc  introduced  into  the  normative  formulation.  The  addition 
of  these  descriptive  elements  is  designed  to  conupt  the 
normative  model  so  it  becomes  more  descriptive  of  the 
human  subjects'  data.  The  addition  of  the  psychologically 
relevant  descriptive  factors  to  the  normative  formulation 
brings  about  the  normative-descriptive  model.  The 
parameters  of  this  normative-descriptive  model  are  tuned 
until  the  best  possible  fit  between  the  model's  output  and 
the  subjects'  data  is  achieved.  The  development  of  a 
normative-descriptive  model  (if  it  can  be  achieved)  offers 
several  advantages.  Such  a  model  yields  a  predictive  tool 
of  the  subjects'  decisionmaking.  One  of  the  most 
interesting  and  important  advantages  provided  by  the 
normative-descriptive  model  is  the  insight  it  provides  of 
the  subjects'  decision  processes. 

In  our  experiment,  the  most  salient  descriptive  feature 
is  the  recency  factor  that  produced  an  order  effect  m  the 
sequential  version  of  probability.  This  recency  factor  is  in 
part  due  to  the  asymmetry  m  the  subjects'  reaction  to 
positive  and  negative  evidence.  Subjects  tended  to  react  to 
negative  evidence  more  drastically  and  to  positive  evidence 
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less  drastically  than  the  normative  Bayesian  model 
predicted  they  should  (see  Fig.  10). 

Let  us  modify  the  Bayesian  formula  to  reflect, this 
phenomenon  Equation  6  can  be  rewritten  as  the  "odds" 
version  of  Bayesian  theorem; 


Pi  Pi-i 

1-Pi  ■  1-Pm 


■  LR; 


(8) 


Following  Edwards  ct  al  [10],  a  normative-descriptive 
version  of  Eq.  8  is: 


1-Pi  l-p;.i  ' 


Where 


0  <  y  <  1  for  positive  evidence  (LR^l) 
Y  >  I  for  negative  evidence  (LRjcl) 


process?  We  believe  the  present  effort  has  shown  that  the 
answer  to  this  question  is  positive.  Three  HEAT-related 
hypotheses  were  tested  in  this  study. 

The  first  hypothesis  was  confirmed.  Process  measures 
such  as; strength  of  beliefs  or  troop  activity  were  found  to 
be  strongly -interdependent  from  cycle  to  cycle.  Empirical 
evidence  as  well  as  predictive  modeling  shewed  how  the 
very  nature  of  C2  decisions  is' dynamic.  For  example  the 
strength  of  one’s  current  belief  that  one’s  hypothesis  is  true 
is  a  function  of  past  beliefs,  new  evidence  and  the  history 
of  the  information  source  providing  this  evidence. 

The  second  hypothesis  was  only  partially  confirmed 
for  some  instances  of  the  situation  assessment  process. 
Although  all  the  models  tested  predicted  that  the 
commanders  estimate  of  the  situation  should  depend  on  his 
confidence  on  the  information  sources,  we  were  not  able  to 
show  a  clear  dependency  with  their  understanding  of  the 
battle.  More  research  will  have  to  be  done  in  that  direction 
by  investigating  the  planning  activity  as  a  function  of  a 
commander's  current  beliefs  and  his/her  confidence  in  the 
understanding  of  the  battle.  Preliminary  empirical  data, 
shown  in  Fig.  12  indicated  that  this  function  may  be  a 
complex  one. 


This  manipulation  reduces  the  effect  of  positive 
evidence  while  enhancing  the  effect  of  negative  evidence, 
thus  reflecting  human-like  behavior.  The  values  of  y  ■  0.9 
for  positive  evidence  and  Y"  1-3  for  negative  evidence 
achieved  the  best  data-matching  scores.  The  resulting 
normative-descriptive  model  predicted  the  data  with  an 
average  error  of  only  13.1%,  comparable  with  the  contrast* 
inertia  model  performance.  Note  that  both  models  present 
on  asymetry  of  the  subjects  sensitivity  towards  negative 
evidence. 

SUMMARY 

Different  models  were  developed  to  predict  and  explain 
the  situation  assessment  data  gathered  in  the  experiment. 
The  descriptive  contrast-inertia  and  the  norraative- 
desenptive  modified  Bayesian  models  predicted  the  data 
remarkably  well.  Both  models  included  in  an  explicit 
fashion  descriptive  elements  that  could  explain  the  recency 
phenomena  and  the  resulting  order  effects  due  to  an 
asymmetry  in  the  perception  of  confirmatory  and 
discon finnatory  evidence. 

VL  CONCLUSIONS  AND  RECOMMENDATIONS 

Thfc  study  started  with  the  premise  that  some  basic 
characteristics  of  a  headquarters  planning  process  could  be 
replicated  in  a  focused  experiment.  By  using  a  static  (paper 
and  pencil)  task  environment  rather  than  a  dynamic 
wargaming  computer-based  scenario,  a  small  sample  of 
single  experienced  commanders  rather  than  hierarchies  of 
commanders  and  their  subordinates,  and  model-based  exper¬ 
imental  methods  rather  than  exclusively  empirical  evalua¬ 
tion,  we  were  hoping  to  be  able  to  draw  conclusions  and 
formulate  hypotheses  for  future  iargcr-scaie  experiments  and 
exercises.  In  other  words  we  were  asking  the  question, 
could  such  focused  cost-effective  mim-cxpcnmcnts  be  used 
as  ’’rapid  prototypes”  to  gain  insight  into  the  HEAT  cycle 


Figure  12.  An  Example  of  the  Potential  Complex  Rela¬ 
tionship  Between  Situation  Assessment  and 
Planning  Processes. 


The  third  and  final  hypothesis  was  strongly  confirmed 
The  order  in  which  information  was  presented  to  the  com¬ 
manders  had  a  very  significant  effect  on  their  situation 
assessment  behavior  (recency-oriented)  and  their  planning 
behavior  (primacy-oriented).  Two  contract-inertia  descrip¬ 
tive  model  and  a  modified  Bayesian  normative-descriptive 
model  were  able  to  predict  the  commander's  situation 
assessment  behavior  remarkably  well. 

In  conclusion,  the  first  and  third  hypothesis  provided 
strong  support  to  our  proposed  view  of  the  headquarters 
planning  process  as  "rolling”.  The  rolling  plan  concept 
introduced  in  Section  1  helps  put  the  headquarters'  decision 
processes  in  a  dyoamic  perspective,  where  equivalent 
attention  is  being  given  not  only  to  the  amount  and  quality 
of  the  incoming  evidence  but  also  to  the  sequencing  of  that 
evidence.  Training  commanders,  for  a  more  balanced  way 
of  integrating  this  information,  may  produce  more  effective 
command  and  control  planning  decisions 
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Dimensional  analysis  is  a  method  used  in  the  design  and 
analysts  of  experiments  in  the  physical  and  engineering 
sciences.  When  a  functional  relation  between  variables  is 
hypothesized,  dimensional  analysis  can  be  used  to  check  the 
completeness  of  the  relation  and  to  reduce  the  number  of 
experimental  variables.  The  approach  is  extended  to  include 
dimensions  pertinent  to  experiments  containing  cognitive  aspects 
so  that  u  can  be  used  in  the  design  of  multi-person  experiments. 
The  proposed  extension  is  demonstrated  by  applying  it  to  a 
single  decisionmaker  experiment  already  completed.  New 
results  from  that  experiment  arc  described. 


INTRODUCTION 

In  the  last  few  years,  a  mathematical  theory  for  the  analysis  and 
design  of  organizations  supported  by  Command,  Control,  and 
Communications  tC3)  systems  has  been  developed  based  on  the 
model  of  interacting  human  decisionmakers  (DMs)  with 
bounded  rationality  11),  12J.  While  this  model  was  motivated  by 
empirical  evidence  from  a  variety  of  experiments,  and  by  the 
concept  of  bounded  rationality  J3],  mere  were  no  direct 
experimental  data  to  support  it.  An  experimental  program  has 
been  undertaken  to  test  the  theory  and  obtain  values  for  the 
model  parameters  (41 . 

One  of  the  major  difficulties  in  developing  a  model-driven 
experimental  program  is  the  specification  of  the  large  number  of 
parameters  that  have  to  be  specified  and  varied.  The  resulting 
problem  has  two  aspects:  (a)  The  parameterization  of  the 
experimental  conditions  leads  to  a  very  large  number  of  trials,  a 
Situation  that  is  not  really  feasible  when  human  subjects  are  to  be 
used,  and  (b)  Not  all  experimental  variables  can  be  set  at  the 
values  required  by  the  experimental  design  because  of  the  lack  of 
direct  controls  on  the  cognitive  variables. 

Consequently,  some  ordetly  procedure  is  needed  that  will  allow 
the  reduction  of  the  number  of  experimental  variables  and,  more 
importantly,  that  will  lead  to  variables  that  arc  easier  to 
manipulate.  Such  an  approach,  called  dimensional  analysis,  ha> 
been  in  use  in  the  physical  and  engineering  sciences  (5),  16j. 


♦This  work  was  carried  out  at  the  MIT  Laboratory  for 
Information  and  Decision  Systems  with  support  by  the  Office  of 
Naval  Research  under  contract  No.  N00014-84-K-0519  (NR 
649  003). 


The  purpose  of  this  paper  is  to  extend  the  approach  to  problems 
that  have  cognitive  aspects  so  that  it  can  be  used  for  the  design 
and  analysis  of  experiments.  The  class  of  problems  we  arc 
interested  in  are  those  that  relate  organizational  structure  directly 
to  performance,  as  measured  by  accurac)  and  timeliness,  and, 
more  indirectly,  to  cognitive  workload. 

A  special  class  of  organizations  will  be  considered  a  team  of 
well-trained  decisionmakers  executing  repetitively  a  set  of 
well-defined  cognitive  tasks  under  severe  lime  pressure,  The 
cognitive  limitations  of  deusionmakcis  imposes  a  constraint  on 
the  organizational  performance.  Performance,  in  this  case,  is 
assumed  to  depend  mauily  on  the  time  available  to  perform  a 
task  and  on  the  cognitive  workload  associated  with  the  task. 
When  the  time  available  to  perform  a  task  Is  very  short  (time 
pressure  is  very  high),  decisionmakers  are  likely  to  make 
mistakes  so  that  performance  will  degrade. 

This  class  of  organizations  is  a  reasonable  model  for  tactical 
distributed  decisionmaking  such  as  that  in  the  Command 
Information  Center  (C1C>  of  a  battle  group,  a  team  ul  well 
named  individuals  receive  information  fiom  a  variety  ol  sources, 
process  the  infoimation  to  develop  the  situation  assessment, 
generate  courses  of  action  (COAj,  select  a  COA,  and  produce 
the  set  of  commands  oi  ordeis  that  will  implement  the  chosen 
COA, 

Dimensional  analysis  will  be  introduced  buefiy  in  the  next 
section.  The  approach  is  then  extended  to  include  cognitive 
variables  and  a  completed  experiment  will  be  used  as  an  example 
to  demonstrate  the  approach  Then,  the  application  of 
dimensional  analysis  to  the  design  of  expeumcnis  loi  the 
analysis  and  evaluation  of  distributed  tactical  decisionmaking 
organizations  will  be  described. 


DIMENSIONAL  ANALYSIS 

Dimensional  analysis  is  a  method  for  reducing  the  numbei  and 
complexity  of  experimental  variables  which  affect  a  given 
physical  phenomenon.  A  detailed  introduction  to  dimensional 
analysis  can  be  found  in  15],  [6J, 

Dimensions  and  linns .  A  dimension  is  the  measure  which 
expresses  a  physical  variable  qualitatively.  A  unit  is  a  paiticulai 
way  to  express  a  physical  quantity,  that  is,  to  relate  a  number  to 
a  d.mension.  The  dimension  of  a  physical  variable  exists 
independently  of  the  units  in  which  it  is  measured  For 
example,  length  is  a  dimension  associated  to  physical  quantities 
such  as  distance,  height,  depth,  etc  ,  while  foot,  meter,  are 
different  units  for  expressing  length 
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Fundamental  Dimensions.  Fundamental  dimensions  are  the 
basic  dimensions  which  characterizes  all  variables  iria  physical 
system  For  example,  length,  mass,  and  time  are  fundamental 
dimensions  in  mechanical  systems.  /Vdimension  such  as  length 
per  rime  is  a  secondary  or  denved  dimension. 

Dimensionally  independent  variables.  If  the  dimension  of  a 
physical  variable  cannot  be  expressed  by  the  dimensions  of 
others  in  the  same  equation,  this  dimension  is  independent.  For 
example,  distance,  velocity  and  time  are  three  physical  quantities 
which  are  not  dimensionally  independent  because  the 
dimensions  of  any  two  variables  can  form  the  dimension  of  the 
third.  They  are,  however,  pair-wise  dimensionally  independent. 

The  foundation  of  dimensional  analysis  is  the  Principle  of 
Dimensional  Homogeneity,  which  states  that  if  an  equation 
truly  describes  a  physical  phenomenon,  it  must  be  dimensionally 
homogeneous,  i  e.,  each  of  its  additive  terms  should  have  the 
same  dimension. 

For  example,  consider  a  moving  vehicle  with  initial  velocity  v0 
and  constant  acceleration  a.  During  time  t,  the  distance  traveled 
s  can  be  described  by  the  following  equation; 

$av0t  +  at2/2  (l) 

where  s  has  dimension  of  length,  v0  has  dimension  of  length  per 
unit  time,  t  has  dimension  of  time,  a  has  dimension  of  length  per 
unit  time  per  unit  rime,  and  the  constant  1/2  is  a  pure  number 
which  lias  no  dimension.  Expressing  the  terms  of  this’equation 
dimensionally,  we  obtain; 

fs]»L 

M-LT^T-L 

(at2/2)«LT*r2»L 

This  shows  all  additive  terms  have  dimension  of  length, 
therefore,  Eq.  1  is  dimensionally  homogeneous. 

The  basic  theorem  of  dimensional  analysis  is  the  x  theorem,  also 
called  Buckingham’s  theorem, 

t*  theorem:  If  a  physical  process  is  described  by  a 
dimensionally  homogeneous  relation  involving  n  dimensional 
variables,  such  as 

xj  «  f(  X2.  X3,..„  xn )  (2) 

then  there  exists  an  equivalent  relation  involving  (n-k) 
dimensionless  variables,  such  as 


*1  a  H  *2.  *3 .  *n-k )  <3) 

where  k  is  usually  equal  to,  but  never  greater  than,  the  number 
of  fundamental  dimensions  involved  in  the  x’s. 


Each  of  the  x’s  in  Eq.  3  is  formed  by  combining  (k+1)  x's  to 
form  dimensionless  variables.  Comparing  Eqs.  2  and  3,  it  is 
clear  that  the  number  of  independent  variables  is  reduced  by  k, 
where  k  is  the  maximum  number  of  dimensionally  independent 
variables  in  the  relation  The  proof  of  the  x  theorem  can  be 
found  in  15}. 

The  it  theorem  provides  a  more  efficient  way  to  organize  and 


manage  the  variables  m  a  specific  problem  and  guarantees  a 
reduction  of  the  number  of  independent  variables  in  a  relation 
Dimensionless  variables,  also  called  dimensionless  groups,  arc 
formed  by  grouping  primary  variables  with  each  one  of  the 
secondary  variables.  The  procedure  for  applying  dimensional 
analysis  will  be  described  now  through  an  example: 

Step  1  Write  a  dimensional  expression. 

Let  the  dependent  physical  variable  be  denoted  by  q  and  the  set 
of  independent  variables  on  which  q  depends  be  represented  by 
w,  x,  y,  and  z.  Since  all  the  variables  represent  physical 
quantities,  the  have  appropriate  dimensions. 

Then,  a  dimensional  expression  can  be  written  as 

qof(w,  x,y,  z)  (4) 

There  are  five  dimensional  variables  in  Eq,  4,  that  is,  n  =  5. 

Step  2  Determine  the  number  of  dimensionless  groups. 

To  illustrate  this  step,  a  physical  system  and  real  physical 
quantities  have  to  be  assumed.  Assume  q  is  energy,  w  is  ume,  x 
is  a  mass,  y  is  acceleration,  and  z  is  distance  in  some  mechanical 
system.  One  set  of  fundamental  dimensions  of  a  mechanical 
system  are  mass  (M),  length  (L),  and  time  (T),  i.e„  there  are 
three  dimensionally  independent  variables,  k  »  3.  The 
dimensions  of  the  vauablcs  in  Eq.  4  are  shown  in  Tablet, 


TABLE  1  Dimensions  of  variables  in  Eq.  4 


Variable 

Dimension 

Notation 

energy 

q:  force  x  length 

Iq)  =  MI.2T-2 

time 

w:  time 

lw)  o  T, 

mass 

x:  mass 

M  »  Mi 

acceleration  y:  length pertime 

lyl  -  l-T-2; 

distance 

per  *5^ 

z;  length 

M  -  L 

Since  n  »  5  from  Step  1.  there  arc. 


n-k**5.3n2, 

so  that  three  primary  variables  should  be  selected  and  two 
dimensionless  groups  can  be  constructed. 

Step  3  Construct  dimensionless  groups. 

While  the  choice  of  primary  variables  is  essentially  arbitrary, 
consideration  should  be  given  tha,  the  dimensionless  groups  be 
meaningful.  If  w,  x,  y  arc  chosen  as  the  three  (k  «  3)  primary 
variables,  two  dimensionless  groups  are  constructed  on  the  basis 
of  the  remaining  variables  q  and  z.  The  first  dimensionless 
group  it\  is  formed  by  the  combination  of  q,  w,  x,  and  y 
Using  the  power-product  method,  xj  can  be  determined  by  the 
following  procedure.  Write  Xj  as 

xj  =qawb*cyd 

where  a,  b,  t,  and  d  are  constants  which  make  the  right  hand 
side  of  the  equation  dimensionless  so  that  the  equation  is 
dimensionally  homogeneous.  In  terms  of  dimensions  of  q,  w, 
x,  and  y,  we  have 


(MO  L«  1«]  =  [ML2r2|a(TJb(Ml<:(LT-2jd 
-  Ma+C  L2a-f^  T“2a+^*2d 

By  the  Principle  of  Dimensional  Homogeneity,  the  following  set 
of  simultaneous  algebraic  equations  must  be  satisfied. 

ForM:  a  +  c=0 

ForL:  -2a+b-2d  =  0 

ForT:  2a  +  d~0 

There  are  three  equations  but  four  unknowns.  The  solution  is 
not  unique.  In  general,  it  is  convenient  for  the  secondary 
variables,  in  this  example  q  and  ,z,  to  appear  in  the  first  potfer, 
that  is,  a  is  set  equal  to  unity.  Thus,  by  solving  the  set  of 
algebraic  equations,  wc  obtain: 

a*  2,  b  =  -2, 
c « *1,  do -2. 

then 

»  q  /  (w2xy2). 

Similarly, 

*2*  zw2/y. 

The  dimensionless  form  of  Eq.  4  is 
q  /  (w2xy2)  a  zwtyy ), 
or  in  terms  of  the  dimensionless  groups, 

*1  01  ^(*2)  ($) 

Tliis  is  the  result  obtained  by  the  application  of  dimensional 
analysis.  The  function  ¥  is  unknown  and  needs  to  be 
determined  by  experiments.  The  dimensional  analysis  reduces 
Equation  4,  which  has  four  (4)  independent  dimensional 
variables,  to  Equation  5  which  has  only  one  independent 
dimensionless  variable.  The  complexity  of  the  equation  is 
reduced  dramatically.  Furthermore,  in  designing  an  experiment, 
it  is  only  necessary  to  specify  a  sequence  or  values  for  the 
independent  variable  n these  values  can  be  achieved  by  many 
combinations  of  w,  y,  and  z. 


APPLICATION  OF  DIMENSIONAL  ANALYSIS  TO 
PROBLEMS  IN  COMMAND  AND  CONTROL 


To  apply  dimensional  analysis  to  decisionmaking  organizations, 
the  fundamental  dimensions  of  the  variables  that  describe  their 
behavior  must  be  determined.  A  system  of  three  dimensions  is 
shown  in  Table  2  that  is  considered  adequate  for  modeling 
cognitive  workload  and  bounded  rationality.  An  experiment 
conducted  in  1987  {41  is  used  to  demonstrate  the  application  ol 
dimensional  analysis  to  Command  and  Control  problems  The 
purpose  of  the  single-person  experiment  was  to  investigate  the 
bounded  rationality  constraint.  The  experimental  task  was  to 
select  the  smallest  ratio  from  a  sequence  of  comparisons  of  ratios 
consisting  of  two  two-digit  integers.  Two  ratios  were  presented 
to  a  subject  at  each  time.  The  subject  needed  to  decide  the 
smaller  one  and  compare  it  with  the  next  incoming  ratio  until  all 
ratios  were  compared  and  the  smallest  one  was  found.  The 
controlled  variable  (or  manipulated  variable)  was  the  amount  of 


time  allowed  to  perform  the  task.  The  measured  variable  was  the 
accuracy  of  the  response,  i  e.,  whether  the  core/ :  ratio  was 
selected. 


TABLE  2.  DIMENSIONS  FOR  C2  PROBLEMS 


Dimension 

Symbol 

Units 

Time 

T 

sec 

Information 

(uncertainty) 

I 

bit 

Alphabet 

S 

symbol 

The  controlled  variables  were  the  number  of  comparisons  in  a 
sequence,  denoted  by  N,  and  the  allotted  time  to  do  the  task, 
denoted  by  Tw.  For  each  value  of  N,  where  N  could  take  the 
value  of  3  or  6, Tw  took  twelve  values  with  constant  increment  in 
the  following  way: 

Tw  «  {  2.25, 3, 3.75 . 10.5  )  for  N  =  3; 

Tw*  (  4.50,6,7.50 . 20.1  }  forN«6. 

The  performance  was  considered  to  be  accurate  or  correct  if  the 
sequence  of  comparisons  was  completed  and  if  the  smallest  ratio 
selected  was  correct.  The  details  of  the  experiment  can  be  found 
in  {4). 

The  hypothesis  is  that  there  exists  a  maximum  processing  rate 
for  human  decision  makers.  When  the  allotted  time  is 
decreased,  there  will  be  a  time  beyond  which  the  time  spent 
doing  the  task  will  have  to  be  reduced  if  the  execution  of  the 
task  is  to  be  completed.  This  will  result  in  an  increase  in  the 
information  processing  rate  F,  if  the  workload  is  kept  constant 
However,  the  bounded  rationality  constraint  limits  the  increase 
of  F  to  a  maximum  value  Fmav  When  the  allotted  time  for  a 
particular  task  becomes  so  small  that  the  processing  rate  reaches 
Fmaxt  further  decrease  of  the  allotted  time  will  cause 
performance  to  degrade.  The  performance  drops  cither  because 
all  comparisons  were  not  made  or  because  errors  were  made..  It 
was  hypothesized  that  the  bounded  rationality  constraint  Fnm  IS 
constant  for  each  individual  DM,  but  vanes  from  individual  to 
individual.  The  bounded  rationality  constraint  can  be  expressed 
as 

WQ/V  <6> 

where  Tw*  is  the  minimum  allotted  tune  before  performance 
degrades  significantly.  G  and  Tw*  vary  for  different  tasks,  but 
is  constant  for  a  decision  maker,  no  matter  what  kind  of 
tasks  he  does  Therefore,  signifl  an  degradation  ot  performance 
indicates  that  the  allotted  time  approaches  Tw*.  Observation  ol 
this  degradation  during  the  expenment  allows  the  determination 
of  the  time  threshold  and,  therefore,  the  maximum  processing 
rate,  provided  the  workload  associated  with  a  specific  task  can 
be  estimated  or  calculated  {4}. 

The  retroactive  application  of  dimensional  analysis  to  this 
expenment  will  be  shown  step  by  step. 


M-S 

Pi3-T 

Ky-i 


Step  1  Were  a  fcaflorl  apsmi 

b  the  apexra.  a^sy,  IcfsiiraoB?  ffocog^gd 
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X:  iseteofca^a^acKijKi 
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H:  cxrriayof5^tea.^Ktai=rrffie 
raries  so  be  carjsrrd  a  a  C&fc 

Tbea^iiefeagaaocJexprrspoetS 

J  =  f(T^X.H)  0) 


First,  dimcnskreal  analysis  check*  whether  His  fcsczxxal 
relation  could  describe  tie  relation  bewrta  J  zed  cxber 
variables.  Tbc  (F-ocrowas  of  the  -variaKes  in  Eq.  7  are  tie 
following: 


IT.l-T. 

JH3  *1 

Tiesgesgs3gesAercf«£asasaiC2^s3S^egde3Bi3safe»g 
±rce.  7bsdoe.ktseaa3^&%.  T5e.&ec=icef 
('b’ajcrigtptgsg 

a-k*6*3*3L 

There  wi3  he  fee  fesaecJai  pw^s  sa  fie  gygrtffgg 


&tp3  3 


The  seace^  cf  prissy  rzris^  is  arterry  »  i«5  as  6ey  aee 
&s=sic^saS9»isa.  bt&OK.T^K.rdiIsc 
sefccsed  »  tie  jssscy  vriabfesL  Using  tie  awr-rccdba 
e£dxdl^*}rtfo£d»k 

r,*dA- 

Sl-T/T* 


rrj=T 

INI  =S 
[HJ  =1 

Since  the  dimenrioa  of  J  r*  S.  the  right  hand  sxle  of  £q.  7  has  to 
be  of  the  same  dimension  regardless  of  wfc2t  :1c  f vsaxKisJ 
relation  f  is.  However,  all  three  fptosgd  dimensions  are 
represemed  by  Lie  dure  independent  variate*.  There  is  no  way 
to  combine  these  variables  to  obtain  a  tena  of  draessaoa  S  c&iy. 
Therefore,  according  to  Principle  of  Dimensional  Hocnogenrixy. 
this  functiona*  relation  is  doi  a  ccerect  expression  of  the  relation 
under  the  xn*'v  ligation. 


2nd 

Styx,  we  esa  me  Equation  S  in  x  &aezsmlcti  fora 


T/T..  GJH) 

<9) 

or.  bissmTiicA 

*1 

(10) 

There  are  two  approaches  to  obtain  the  correct  xebtioa.  The  first 
isto  delete  Tw  and!!  from  the  relation.  This  is  not  acceptable 
because  the  allotted  tune  is  a  critical  factor  Ln  this  experiment. 
The  other  approach  is  to  add  some  variables  or  dimensional 
constants  to  satisfy  the  requirement  for  dimensional 
homogeneity.  Dimensional  constants  ax  physical  constant  such 
as  gravity,  the  universal  gas  constant,  and  so  on.  No  such 
dimensional  constant  has  been  identified  in  C~  system  as  jrt. 
therefore,  some  variables  which  have  dimensions  of  rime  -'d 
information  should  be  added  to  the  relation.  Moreover. -jie 
additional  variables  have  to  be  relevant  to  the  measurement  of 
accuracy.  Consideration  of  the  nature  of  the  tasks  subjects 
performed  and  the  data  collected  led  to  the  observation  that  the 
entire  allotted  time  period  was  not  used  to  process  information. 
This  consideration  led  to  a  new  variable,  the  actual  processing 
time,  Tf.  Cognitive  workload,  denoted  by  Ga,  is  another 
significant  variable  affecting  accuracy.  Therefore.  tut>  variables 
are  introduced  to  Eq.  7.  The  equation  describing  accuracy 
becomes 


InEq.  lO.riisthcperetnregecfcocirctdcciSM^XjxreScKes 
that  portico  of  the  time  window  used  to  process  snfamstion  aad 
make  derisions,  and  Xj  represent  the  ratio  of  actual  workload 
and  input  unccnainp*.  Equation  10  represents  a  model  driven 
experiment  b  which  Z\,  Siaad  Zj  arc  the  experimental 

variables  to  be  measured  or  coctiolled.  The  function  $  needs  to 
be  tSrternunod  experimentally. 

Comparing  Equations  8  and  10,  one  finds  that  the  number  of 
independent  variables  is  reduced  from  six  to  three.  This 
redaction  reduces  the  complexity  of  the  equation  and  facilitates 
experiment  design  and  analysis.  Properly  designed  experiments 
usmg  dimensrofU)  analysis  provide  similitude  of  experimental 
condition  for  different  combinations  of  dimensional  variables 
which  result  in  the  same  value  of  x's.  Similitude  reduces  the 
number  of  trials  needed  to  be  run  in  order  to  define  This  is  a 
major  advantage  when  the  physical  (dimensional)  experimental 
variables  cannot  be  set  at  arbitrary  values. 


J-f(Tw.Tf.N.H.Ga)  (8) 


This  equation  is  dimensionally  homogeneous.  There  are  six 
dimensional  variables  in  Eq.  8,  that  is.  n  =  6. 

Step  2  Determine  the  number  of  dimensionless  groups. 

The  number  of  dimensionless  variables  is  equal  to  n-k,  where  k 
is  the  maximum  number  of  dimensionally  independent  variables 
in  Eq.  S.  Dimensions  of  the  variable?  are 


The  xperiment  that  has  been  described  was  not  designed  using 
dimc.utonal  analysis.  The  independent  variables  that  were 
manipulated  were  not  *  j  3IJd  *3.  Therefore,  $  cannot  be 
determined  from  the  experimental  data.  The  purpose  of  using 
this  experiment  is  to  illussate  the  dimensional  anal > sis  procedure 
for  the  design  and  analysis  of  model  driven  experiments. 
Therefore,  only  new  results  from  dimensional  analysis  will  be 
shown 
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Rg.  1  Scaucr  Plot  of  Tf  versus  Tw  for  Two  Subjects 


Fig.  2  Exponential  Ri  for  Two  Subjects 

Since  the  critical  value.  Tw*.  of  Tw  has  been  found  front  the 
original  analysis  17J,  the  critical  value  of  Tf.  Tf»,  can  be 
calculated  using  Eq.  11.  Tab!e3  shows  the  statistics  of  the  uinc 
•v*v<KnM  mrresrioodinc  toTr  and  T-- 


TABLE2  Summaiy  of  Time  Threshold  for  Tf  and  Tw 
over  Subjects 


MEAN  ST.  DEV 

MAX. 

MIN. 

T(* 

4.50 

1.12 

7.21 

2.06 

T  * 

*  w 

6.38 

2.11 

9.88 

2.73 

From  Table  3.  it  is  clear  that  the  mean  value  of  T(*  is  smaller 
than  that  of  Tw*.  The  standard  deviation  of  T(*  is  less  than  that 
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CONCLUSIONS 
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fersro^px^ajcbaifcccoe^ 

3.  Design  expcncadJ  in  which  6c  valass  of  the  tsdcpeadmi 


4.  Rea  experiments  to  check  the  chore  cf  independent 
variables  aad  determine  the  hjpwienzrd  fractional 
xrlarioa. 


C^~Stdflttgg^ilaxtc^rfan-DM  organizarioa 
depends  on  the  tempo  of  operations  fwhicb  determines  the 
allotted  time  to  perform  different  tasks)  and  the  cognitive 


J*=«T.G*.G2,_0«) 


(12) 


where  J.is  accuracy,  T  is  a  meascrc  of  time,  and  G1  is  the 
wt xkkxai  of  the  i-th  ONLTbe  experimental  model  is  established 
by  augmenting  Eq.  12.  The  measure  of  time  is  decomposed  imo 
the  response  times  of  individual  DMs.  The  number  of  tasks  is 
considered  as  a  variable  which  affects  accuracy.  Uncertainty  of 
the  input  can  be  controlled,  and  will  also  affect  accoracy.  Fora 
particular  task,  cognitive  activity  varies  among  human  decision 
makers  because  each  DM  may  use  a  different  approach  to  do  the 
task.  Let  T1  the  denote  response  time  of  the  i*th  DM,  N  denote 
the  number  of  tasks,  and  H  denote  the  input  uncertainty. 
Equation  12  becomes 


J  =  f  (H.  N.  T1,  *!%_.  T\  G *.  G\^  Gn  )  (13) 


Equation  13 is  an  experimental  model  for  an  organization  with  n. 
DMs.  The  unknown  function  f  needs  to  be  determine]  by 
experiment.  There  are  (2n+2)  independent  variables  in  Eq.  12. 
Dimensional  analysis  will  be  used  to  reduce  the  complexity  of 
the  equation  and  organize  the  variables  into  groups  amenable  to 
manipulation  in  the  context  of  experiments  with  human  subjects. 


Keescccd  raljsis  has  beta  iecrodxcd  lo  the  design  cf 
operas  6a  have  cogririvt  aysa.  Aacceapoa  has  beta 
prrsemed  thus  stakes  k  possible  p'facfede  varia&ks  seci  as 
cog-risewcciixadardbocad^rariociE^ofhusaadeeaS^ 
sdgL  Aacxajrirgsisgfc-pcacxjexperimcsafcajhceatsedas 
'aarxt  TpfeMshoar  hoar  the  esshodofogy  can  be  applied.  A 
cewr  resdl  fcca  the  exisriag  experimem  has  beta  ptesemed  to 
i2scss  dgpossi^adia^agesoftss^dsaaaaocalgaalysaL 
Socc  that  daacgsaocal  analysis  oeJy  detemmes  possible 
rdariccs  between  relevant  variables:  the,  actual  functional 
expression  has  »  be  foend  fcoca  experimental  dra. 
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ABSTRACT 

A  class  of  decision  aids  tba:  is  recervisg  anrraioa  ia  ibe 
dcvdopn.cax  cosasay  is  based  oa  artificial  isteHigeacc  and 
especially  expert  syssssts.  This  paper  presets  a  procedure  few 
assessing  10  wfcai  extra:  the  measures  of  performance  of  an 
crganizarica  arc  modified  uEea  an  expert  sysKm  is  inroduced. 
Rrsua  model  of  $>TaboIx:cocrx^joQ  with  fezzy  logic,  using 
Predicate  Transition Nets,  i s~ presented  to  model  the  most 
cocrsoa  Ipzd  of  exp-rt  s>-saxns:  ihe  cocscl^at  expert  s)*s»2S- 
Tfcis  model  allots  to  evaluate  its  response  time  for  a  given 
iepeL  Aa  Air  Defease  problem  ia  which  command  aad  coatfol 
involves  a  hierarchical  two  decis*  cannier  organization.  where 
the  expert  system  is  used  as  aa  aid  ia  the  fusion  ofxnconsi«eni 
isfcnnatjool  is  then  presented  A  Strategy  icolving  the  use  of 
the  expert  sygem  is  compared  to  two  ocher  srarcgicscxpcaed  to 
be  used  bya  decisionmaker  facing  this  problem.  Mcascres  of 
performance  (workload.  timeliness  aad  accuracy)  are  evaluated 
for  each  of  these  scales.  The  results  show  that  the  strategy 
involving  the  use  of  the  expert  system  improves  significandy  the 
accuracy  of  the  organization,  bat  requires  more  time  and 
increases  the  worfdoed  of  the  decisionmaker  using  iL 


INTRODUCTION 

Decisionmaking  processes  require  the  analysis  of  complex 
situations  zed  the  planning,  initiation  and  control  of  subsequent 
responses.  These  2£tiviti cs  are  done  within  some  consaaims 
such  as  time  and  accuracy  and  so  that  an  acceptable  level  of 
effectiveness  be  reached.  The  amount  of  infeemation  handled  by 
decisionmakers  is  often  very  large  and.  in  order  to  maintain 
performance  above  a  certain  level,  decisionmaking  organizations 
use  decision  support  systems  to  help  them  accomplish  their 
mission.  Among  them.  Expen  Systems  with  their  deductive 
capability  and  their  ability  to  handle  symbolic  concepts  have 
proved  to  be  very  useful.  The  aim  of  this  paper  is  to  show  to 
what  extent  the  use  of  an  expert  system  modifies  the  measures  of 
performance  of  a  decisionmaking  organization.  To  allow  the  use 
of  the  analytical  framework  developed  for  the  study  of  these 
organizations,  an  expert  system  model  using  Predicate 
Transition  Nets  is  first  defined  for  the  evaluation  of  the  response 
time.  Expen  systems  are  then  studied  to  assess  thei ^usefulness 
in  aiding  the  fusion  of  possibly  inconsistent  information  coming 
from  different  sources.  This  assessment  is  done  through  the 


*  This  work  was  conducted  at  the  MIT  Laboratory  for 
Information  and  Decision  Systems  with  support  provided  by  the 
Basic  Research  Group  of  the  Technical  Panel  on  C3  of  the  Joint 
Directors  of  Laboratories  through  the  Office  of  Naval  Research 
under  Contract  no.  N000I4-85-K-O782. 


analysis  of  aa  application  involving  a  rwo-dccisioumaier 
organization  facing  this  problem  of  inconsistent  isfocmarioo. 
Three  strategies  used  to  solve  this  pmbtem  arc  described,  oce  ot 
them  involving  the  esc  of  an  cxpci*  system.  Measures  of 
performance  readied  for  each  of  these  smcpcs  are  finally 
evaluated  aad  compared. 


IT)  AN  EXPERT  SYSTEM  MODEL  USING  PREDICATE 

TRANSITION’  NETS 

Knowledge  Based  Expen  Systems  show  properties  of 
synchrpaicity  and  concurrency  which  makes  them  suitable  for 
being  represented  with  the  Predicate  Transition  Net  formalism 
(Gcnrich  and  Lautcnbsch.  1981).  The  rules  of  a  knowledge  base 
have  to  be  checked  in  a  specific  crier  depending  oa  the  smttegy 
used  to  solve  the  probiem  and  on  the  current  facts  deduced  so  far 
by  the  system  in  the  execution  of  previous  rules.  A  model  of  an 
expen  sysem  using  production  rules  to  represent  knowledge  is 
presented.  Some  previous  work  iGozdona  and  Santa.  1985) 
have  addressed  the  modeling  cf  production  rules  of  a  knowledge 
base  using  Predicate  Transition  N as.  The  model  presented  here 
is  different  because  it  incorporates  explicitly  the  control  done  by 
the  inference  engine,  fuzzy  logic  (Zadeh.  1965  and  1983: 
Whalen  and  Schott.  1983)  is  used  to  deal  with  uncertainty  and 
Predicate  Transition  Nets  arc  used  to  represent  the  basic  fuzzy 
logical  operators  AND.  OR  and  NOT  that  appear  in  this  kind  of 
rules.  An  extension  of  the  stanoard  inference  net  formalism  is 
obtained  by  the  combination  of  these  operators  which  permits  to 
represent  the  dynamical  behavior  of  an  expert  system.  The 
obtained  net  allows  the  identification  oi  the  rules  scanned  by  the 
system  to  produce  an  answer  to  a  specific  problem  and  to  deduce 
its  response  time  depending  on  the  number  of  rules  scanned  and 
on  the  number  of  interactions  with  the  user. 


1.1  Structure  of  the  Expert  System 

Knowledge  Based  Expert  Systems,  commonly  called 
Expert  Systems,  are  -  in  theory  -  able  to  reason  using  an 
approach  similar  to  the  one  followed  by  an  expert  when  he 
solves  a  problem  within  his  field  of  expertise.  A  ret  model  for 
the  most  common  kind  of  expert  system,  the  consultant 
expert  system,  as  described  by  Johnson  and  beravnov 
0985),  is  proposed.  Most  *ystems  engage  in  a  dialogue  with  the 
user,  the  computer  acting  as  a  "consultant,*  by  suggesting 
options  on  the  basis  of  its  knowledge  and  the  symbolic  daia 
supplied  by  the  user.  Moving  from  known  items  of  intormaiion 
to  unknown  information  is  the  vital  process  of  a  consultant 
system.  Die  user  of  a  consultant  expert  system  has  i»b served 
some  particular  state  of  affairs  within  the  domain  of  the  system  s 
expertise  and  submits  these  observations  to  the  system- Based 
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co  the  o&scxYz2cca,  ixc  system  makes  mfereaccs  zad  segecsss 
sen  rocs*  of  lsvesugaixra  *bxh  will  yield  high  grade 
isfocnarwa.  Imexazrwes  cccmrry  cetH  tbt  sys^m  Cads  tic 
mas  jskeJy  exp&zasaao  of  the  observrsoas-  Tee  focmaSsm  csed 
to  repeaem  knowledge  m  aiegleai  expert  systems  u  tit 
pmfaxti^^nftid. 

Tint  art  mree  <bsmxi  eoepooems  a  sa  expo*  s yrsza.  tit 
Koowfcdge  Base,  tie  Ret  base,  sad  lie  Inference  Esgbe. 

7fce  Knrxicd+c  Base  coetzias  tic  set  of  infoemziioa 
specific  10  tie  field  of  expertise.  Knowledge  is  expressed  is  a 
language  defined  by  tie  expert.  Tbe  knowledge  base  is  a 
codecooci  of  general  Carts,  empirical  rules,  sad  causal  models  of 
tie  profcSem  domain.  A  number  <T.  formalisms  exist  to  represent 
knowledge.  The  cxn;  ,vjdely  used  is  tie  ptodsevea  sycem 
model  in  v*  ,L>  Jh  the  knowledge  is  encoded  in  tie  Terra  of 
amecedeca-^otpcxjixat  pairs  or  IF-THEN  roles.  A  production 
role  is  divided  ta  two  pans: 

A  sci  of  conditions  (called  left-hand  side  of  tbe  rule) 
combined  logically  together  with  a  AND  or  a  OR 
operaar. 

-A  sci  of  tw^icnces  or  actions  (called  also  right  hand 
safe  ot  tic  m\z).  tbe  value  of  which  is  computed  accorfing 
to  the  conditions  cf  the  role.  These  consequences  can  be 
the  conditions  for  odscr  roles/Thc  logical  combination  of 
tie  conditions  on  the  left- hand  ride  of  the  role  has  to  be 
true  in  cxdrr  to  validate  tbe  consequences  and  the  actions. 

An  example  of  a  production  role  is  e 

IF  the  flying  object  has  delta  wings  AND 
the  object  flies  21  great  speed 
THEN  the  flying  object  is  a  fighter  plane. 

The  conditions  ’the  flying  object  h  . ;  J^lt-  wings"  and  ’the 
objea  flics  at  a  great  speed'  have  to  be  true  to  attribute  the  value 
true  the  consequence  -the  flying  object  is  a  fighter  plane.’ 

The  relations!  v*  among  the  roles  of  a  production  system 
can  be  represented  with  an  inference  net.  The  net  shows 
graphically  the  logical  articulation  of  different  facts  or  subgoals, 
and  identifies  which  rules  are  used  to  reach  a  specific  goal.  Let 
us  consider  the  following  production  roles:  , 

if  A  AND  B.thenC 
if  D  ORE.  then  F 
if  NOT  G.  then  H. 


These  rules  are  represented  in  the  inference  net  formalism 
on  figure  I. 


Figure  1  Representation  of  the  logical  operators  in  the  inference 
net  formalism 


The  Predicate  Transition  Net  model  developed  in  this  paper 
i;  an  c>  ’ension  of  the  inference  net  formalism  and  permits  the 
explicf  representation  of  the  rules  of  a  knowledge  ba>e  and  the 
relationships  among  them. 


Tktfaa  base,  also  known  as  uxacuoe  wcfas^ocax), 
coasa  tbe  dsa  for  the  speafk.  problem  to  be  solved-  lus  a 
workspace  foe  the  problem  cocKroexed  by  &  isfcrcoc 
mevhxcom  the  olcc&a.o  provided  by  Jbc  «aez  ed  the 
kaowJedge  base.  Thu  working  crroccy  uxeaersasaceof  every 
line  of  reasoning  previously  used  by  opsenzisg  all  the 
imenned-ure  reschs.  Therefore,  ibis  caa  be  used  to  explain  the 
ongm  of  dtetfTuraaaon  deduced  « 10  describe  tbe  behzvitx  of 
ibcsyKcm. 

The  te^ereesx.  a  csed  to  zxxzux  the  execution  of  the 

program  by  using  tbe  knowledge  base  to  modify  the  cixkcu.  Si 
uses  the  knowledge  and  the  heuristics  contained  in  the 
knowledge  base  to  solve  the  problem  specified  by  tbe  data 
eccuurd  ia  tbe  fan  base.  In  the  production  sysrcm  modeled  in 
this  paper,  the  rules  are  of  tbe  kind,  A  ->  B,  saying  dm.  if  A  is 
valid.  B  cm  be  deduced.  Tbe  inference  engine  selects,  validates, 
and  triggers  some  of  these  roles  to  reach  the  solution  of  the 
problem. 

In  order  to  deal  with  uncertainty  in  items  of  evidence,  fuzzy 
logic  has  been  unplemeracd  in  tbe  model  to  combine  logically  to 
conditions  of  the  left-hand  side  of  the  production  roles.  The 
value  of  a  rule  or  a  fact  is  either  unknown  or  a  number,  pi. 
between  0  and  1 .  representing  the  degree  of  troth  associated  with 
it.  The  operators  AND.  OR.  and  NOT  execute  operations  on 
these  degrees  of  fro*  as  follows: 

pi  AND  p2  =  min(pJ.  p2) 

pi  OR  p2  =  maxfpl .  p2) 

NOT  pi  « 1  -  pi. 

Among  tbe  strategies  used  by  tbe  inference  engine  to  select 
the  roles,  forward  chaining  and  backward  chaining  are  the  most 
common.  In  forward  chaining,  the  inference  mechanism 
u orks  from  an  initial  state  sU!e  of  known  facts  to  a  goal  state.  It 
finds  first  all  the  roles  that  match  the  context,  then  it  selects  one 
role  based  on  some  conflict  resolution  saategy ,  and  then  execute 
the  selected  rule.  Facts  are  inputs  to  the  system.  The  most 
appropriate  hypothesis  that  fits  the  facts  is  deduced.  For 
backward  chaining,  the  system  tries  to  support  a  hypothesis 
by  checking  known  facts  in  the  context.  If  ihc^e  known  facts  do 
not  support  the  hypothesis,  the  preconditions  needed  fox  the 
hypothesis  arc  set  up  a>  »ubgoa!s.  The  process  fox  finding  a 
solution  is  (j  jcaxih  from  the  goal  to  the  initial  state,  it  involves 
a  depth-first  search. 

In  order  to  simjlate  the  behavior  cf  an  expen  system,  the 
process  o»  selection  and  firing  of  rules  done  by  the  inference 
engine  has  been  modeled  when  a  backward  chaining  strategy  is 
used  A  trigger  is  associated  with  every  rule  (or  operator).  A  role 
is  selected  by  the  inference  engine  when  the  trigger  is  activated. 
Only  one  rule  at  a  time  can  be  activated  and  the  continuation  of 
the  selection  and  firing  process  is  done  according  to  the  result  cf 
the  rule : 

-If  the  result  is  unknown,  the  role  is  put  in  memory  and  the 
rule  which  gives  the  value  of  the  first  unknown 
precondition  is  selected. 

-If  the  result  is  known,  the  last  role  which  was  put  in 
memory  is  selected  again  because  the  produced  result  is  the 
value  of  one  of  its  preconditions. 

Let  us  consider  the  example  where  we  have  two  roles. 

B  =>C  (1) 

A  =>  B  (2) 
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23d  where  the  degree  <rf  tnsh  of  lie  fee*  A  is  kaowx 

Tbe  ifcfcreace  ecgmc  selects  first  rule  (1).  Tbedegree  of 
tretii  of  C  is  cskoovn  because  the  degree  of  trc£h  of  B  is 
enkaova.  Rule  (1)  is  then  de-activared  aad  pu:  ta  meroocy. 
Then  rule  (2)  is  selected.  Since  the  value  of  A  is  bo»a,  the 
va3oe  of  B  is  de&red.  Rale  (IX  wfcch  is  the  last  to  have  been 
pa  bm^^y.is-scSectedagaa  and  the  answer  CKObesbed. 

Tbeproress  of  selcccoaaudfiriug  of  ndcs  described  abqce 
is  repeated  by  reccrsioa  cadi  the  final  answer  is  found;  the 
process  esn  last  a  loeg  teat.  In  the  search  for  efficiency  sad 
performance,  caaccesssry  coempetsaoes  mast  be  avoided.  Ia 
some  esses,  there  is  no  need  to  know  the  values  of  all  the 
prcccoditicas  of  n  ndc  to  deduce  the  vslac  of  its  consequence. 
For  example,  b  Boolean  logic,  if  we  base  the  role : 

A  ANDB=>G 
and  we  know;  that: 

A  is  false. 

then  the  consequence  C  is  false  and  there  is  no  need  to  look  for 
the  vabc'of  B  to  conclude  that ;  the  set  of  rales  giving  the  value 
of  Bean  be  pruned. 

b  systtros  using  fuzzy  logic,  this  avoidance  of  unnecessary 
computations  is  all  the  rocce  important  as  computations  are  nxxe 
costly  b  time  and  memory  storage  than  in  systems  using 
Boolean  logic.  The  problem  is  that  little  improvement  in 
performance  is  obtained,  if  extra  computation  is  avoided  only  in 
the  case  of  complete  truth  (for  the  operator  OR)  or  of  complete 
falsity  (foe  the  operaror  AND).  The  solution  lies  in  the  setting  of 
thresholds  for  certain  truth  and  certain  falsity.  For  example,  b 
the  case  of  the  operator  AND.  if  ut  have: 

A  AND  B  =>  C 

and  if  we  know  that  the  degree  of  truth  of  A  is  less  than  the 
threshold  of  certain  falsity,  then  we  can  deduce  that  the  degree  o* 
truth  of  the  consequence  C  is  less  than  the  degree  of  truth  of  A 
and,  therefore,  less  than  the  threshold  of  certain  falsity.  There  is 
no  need  to  know  the  degree  of  truth  of  the  precondition  B.  The 
thresholds  for  which  no  further  search  is  required  in  the 
execution  of  the  operators  are  set  to  0.8  for  certain  truth  in  the 
operator  OR  and  0.2  for  certain  falsity  in  the  operator  AND.  A 
rule  or  fact  having  a  degree  erf  truth  larger  or  equal  to  0.8  (resp. 
less  or  equal  to  0.2)  will  be  considered  to  be  true  (resp.  false). 
Therefore,  the  logic  takes  into  account  the  unknown  rules  or 
facts. 

1.2  Characteristics  of  the  Predicate  Transition  Nets  Used  in 

the  Model 

Predicate  Transition  Nets  have  been  introduced  by  Genrich 
and  Lautenbach  (1981)  as  an  extension  of  the  ordinary  Petri 
Nets  (Peterson.  1980;  Reisig,  1985)  to  allow  the  handling  of 
different  classes  of  tokens.  The  Predicate  Transition  Nets  used 
in  the  model  have  the  following  characteristics. 

Tokens.  Each  token  traveling  through  the  net  has  an  identity  and 
is  considered  to  be  an  individual  of  a  given  class  called  variable. 
•Each  variable  can  receive  different  names.  For  this  model,  two 
classes  of  tokens  are  differentiated : 

fl)  The  first  class,  denoted  bv  P,  is  the  set  of  the  real 
numbers  between  0  and  1,  representing  the  degrees  of 


urb  of  the  facts  cc  irems  cf  evidence.  The  names  of  the 
bdivifeal  tokens  cf  these  classes  ui3  be  p.  pi ,  p2. 

(2)  The  second  class  is  drooled  by  S.  The  bdin&als  of 
this  class  can  cdy  fake  obe  value.  Only  ooc  token  of  this 
class  will  ravel  through  the  net  and  will  represent  rhe 
action  of  the  inference  engine  b  triggering  the  different 
ides. 

Pieces.  Places  are  entities  winch  can  comam  tokens  before  and 
after  the  firing  of  transitions.  Three  kinds  of  places  are 
differentiated:  • 

(1)  places  representing  a  fact  or  the  result  of  a  rule  and 
cocabbg  tokens  of  the  dass  P  or  no  token  at  all. 

(2)  places  used  by  the  system  as  triggers  of  operators  and 
containing  the  token  of  the  dass  S.  These  places  and  jhc 
connectors  connected  to  these  places  arc  represented  u 
bold  style  in  the  Figures  and  constitute  the  system  net. 

(3)  places  allowed  to  contab  different  kinds  of  tokens  (P 
arid  S)  and  which  are  used  to  collect  the  tokens  necessatyr 
for  the  enabling  of  the  transitions  of  w  hieh  they  are  the 
input  places. 

The  marking  of  a  place  is  a  formal  sum  of  the  individual 
tokens  contained  b  the  place.  For  example,  a  place  A  containing 
a  token  of  the  class  P.  pi  and  the  token  of  the  class  $  has  the 
roarfdng  M(A) : 

M(A)=pl+S 

Connector i  and  Labels.  Each  connector  has  a  label  associated 
with  it  which  indicates  the  lands  of  tokens  it  can  cany  .  A  special 
grammar  is  used  on  the  labels  to  define  in  what  way  tokens  can 
be  carried.  The  labels  of  connectors  linking  places  to  transitions 
contain  conditions  that  must  be  fulfilled  for  them  to  carry  the 
tokens.  The  labels  of  connectors  linking  transitions  to  places 
indicate  what  kind  of  token  twill  appear  in  the  places  after  the 
firing  of  the  transition. 

The  following  notation  in  labels  is  used : 

When  token  names  arc  joined  by  the  sign  "+"  then  the 
tokens  defined  by  these  names  have  to  be  earned  at  the  same 
time.  For  example,  the  label  "p  +  S’  indicates  that  one  token  of 
the  class  P  and  one  token  of  the  class  S  have  to  be  carried 
together  at  the  same  time  by  the  connector. 

When  token  names  arc  joined  by  the  sign  V  then  the 
tokens  defined  by  these  names  can  be  carried  at  different  times 
but  not  together.  For  example,  the  label  "p.  S’  indicates  that 
cither  a  token  of  the  class  P  or  a  token  of  the  class  S  can  be 
carried. 

Mixing  of  notation  is  possible.  The  label  ’p+S,  S" 
indicates  that  the  connector  can  cany  cither  a  token  of  the  class  P 
and  a  token  of  the  class  S  or  only  one  token  of  the  class  S 

A  connector  without  label  has  no  constraint  on  the  kind  of 
tokens  it  can  cany. 

fn  some  cases,  the  connector  has  to  carry  the  token  of  class 
S  when  there  is  no  token  of  the  class  P  involved  in  the  finng  of  a 
transition.  The  statement  "absence  of  token  of  the  class  P"  is 
denoted  by  the  symbol  0.  This  symbol  is  used  in  the  ’abels,  as 
if  it  was  a  class  of  tokens,  in  association  with  the  names  of  ihe 
other  classes.  The  symbol  0  is  used  in  the  following  cases 
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(1)  Tfce  label  mS*0"  means  that  the  cocscctor  can  jany  a 

"token  of  tbe.cfossS.  if  there  is  co  token  of  the  class  P. 

£2)  The  label  "(Sip),  (SiO)'  sunns'  that  the  connector  can 
carry  titbrr  a  token  cf  the  chss  S  and  a  token  of  the  class 
P.  or  a  token  of  the  class  S,  if  there  is  co  token  of  the 
class  P. 

Trcrsiilors.  Trasprioes  have  asacbed  to  them  a  predicate  which 
is  a  logical  formula  (cr  an  algorithm)  built  from  the  operations 
and  relations  on  variables  and  tokens  in  the  labels  of  the  input 
connectors.  The  valcc  (true  or  false)  taken  by  the  predicate  of  a 
transition  depends  on  the  tokens  contained  in  the  input  places  of 
the  transition.  When  the  predicate  has  the  value  "true",  the 
transition  is  enabled  and  can  fire.  In  the  model  of  the  consultant 
expert  system,  predicates  are  conditions  on  tokens  of  the  class 
P. 

A  transition  without  predicates  is  enabled  as  soon  as  all  the 
input  places  contain  the  tokens  specified  by  the  labels  of  the 
connectors. 

Transitions  with  dedicates  arc  represented  graphically  with 
squares  or  rectangles.  The  predicate  is  written  inside. 
Transitions  without  predicates  are  represented  with  bars  as  in 
ordinary  Petri  Nets. 

Firing  Process.  The  conditions  of  enabling  of  a  transition  are: 
llj  ihe  input  places  contain  the  combination  of  tokens  specified 
by  the  labels  of  the  connectors,  and  (2)  the  predicate  of  the 
transition  is  true.  If  these  two  conditions  arc  fulfilled,  the 
transition  can  fixe.  In  the  firing  process,  tokens  specified  by  the 
input  connectors  are  withdrawn  from  the  corresponding  input 
places  and  tokens  specified  by  the  output  connectors  arc  put  in 
the  output  places.  Let  us  conswler  the  example  shown  on  Figure 
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Fjgu.c  2  Example  of  a  transition  with  a  predicate 

The  condition  "pi  <.  p2"  written  in  the  transition  represented 
by  a  square  is  true  when  the  value  of  the  token  named  pi  coming 
from  place  A  is  less  than  the  value  of  the  token  named  p2 
coming  from  place  B,  as  specified  by  the  connectors.  In  this 
eau\  tne  transition  is  enabled  and  can  fire;  the  tokens  pi  and  p2 
are  withdrawn  from  the  places  A  and  B  and  a  token  pi  is  put  in 
place  C. 

1.3  Logical  Operator  Models 

In  order  to  construct  the  model  of  the  expert  system  using 
Predicate  Transition  Nets,  it  is  necessary  to  construct  first 
models  of  the  logical  operators  AND,  OR,  and  NOT.  The  results 
are  shown  in  Figures  3,  4  and  5.  Let  us  describe  now  what 
happens  in  the  operator  AND  (the  operators  OR  and  NOT 
behave  in  a  similar  way). 

The  operator  draw  n  in  Figure  3  realizes  the  operation : 

A  AND  B  =>  C 


It  can  be  represented  as  a  black  box.  having  three  inputs:  A, 
B  and  Sc  (the  trigger)  and  six  outputs  :  C  (die  result).  A,  B 
imemonzir.g  of  the  input  value)  and  three  system  places  S.,  SB 
and  S,^,.  Only  one  of  those  system  places  (represented  in  cold 
style  in  the  figures)  can  have  a  system  token  at  the  output  Sneji 
will  contain  a  system  token,  if  the  result  of  the  operation  is 
known.  Le.,  if  C  contains  a  token  of  the  class  P.  This  show’s 
that  the  next  operation  can  be  performed.  If  the  result  is 
unknown,  l  e.,  the  two  inputs  are  not  sufficient  to  yietd  a  result, 
the  system  token  is  assigned  to  SA  or  SB  in  order  to  get  the 
values  of  these  unknown  inputs.  A  system  token  will  be 
assigned  to  SA  if  (i)  C  is  unknown  and  (h)  A  is  unknown  or  if  A 
and  B  are  both  unknown.  The  system  token  will  be  assigned  to 
SB  if  C  is  unknown  and  only  B  is  unknown. 

The  execution  of  the  operation  will  start  only  if  there  is  a 
system  token  in  Sc.  We  denote  by  Sc  the  trigger  place  of  the 
operator  computing  C  As  soon  as  there  is  a  token  in  Sc.  the  two 
input  transitions  are  triggered  by  the  allocation  of  a  system  token 
(S)  at  the  input  places  of  these  transitions.  The  values  of  A  and 
B  are  therefore  reproduced  in  A  and  B  and  in  the  output  place  of 
each  of  the  transitions.  These  places  contain  also  a  system  token, 
which  will  ensure  the  enabling  of  the  following  transition  (i  e., 
that  the  two  inputs  arc  present).  These  two  places  arc  the  input 
places  of  seven  different  transitions  which  have  disjoint 
conditions  of  enabl.ng.  Only  one  of  these  transitions  can  be 
enabled  and  can  fire.  At  the  firing  the  result,  if  any,  is  given  in 
ihc  result  place  and  then  in  C.  while  the  system  token  is  assigned 
cither  to  SW|I  or  to  SA,  or  to  SB 
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These  operators  can  be  compounded  in  super-transitions. 
The  model  can  be  generalized  to  operators  with  more  than  .two 
inputs  by  combining  these  basic  operators. 


(3)  linking  the  systcmplaces  of  each  operator  according  to 
the  rules  described  in  section  4  for  the  scheduling  of  the 
checking  of  the  unknown  subgoals. 


An  example  of  the  use  of  these  logical  operators  is  shown 
on  the  next  section,  where  a  simple  inference  net  is  modeled  and 
the  search  process  in  this  net  is  simulated. 

1 .4  Dynamic  Representation  of  an  Inference  Net 

The  connection  jof  the  super-transitions  representing  the 
logic  operators  to  places  representing  the  items  of  evidence  leads 
to  a  dynamic  representation  of  an  inference  net.  It  allows  to 
i.iow  explicitly  how  the  inference  engine  scans  the  knowledge 
base.  By  running  a  simulation  program,  w  e  can  sec  ir»  real  time 
what  the  steps  of  reasoning  are,  the  possible  deadlocks,  or 
mistakes.  It  allows  one  to  identify  the  parts  of  the  knowledge 
base  where  the  knowledge  representation  is  incorrect. 

Let  us  consider  the  simple  symbolic  system  containing  the 
following  rules: 

if  A  and  B  =>  E 
ifCandDoD 
ifEorF«>G 

The  standard  representation  of  the  inference  net  of  this 
system  (see  section  3.1)  is  shown  in  Figure  6. 


Figure  6  Standard  representation  of  the  inference  net  of  the 
example. 

The  representation  of  the  inference  net  with  Predicate 
Transition  Net  is  deduced  from  this  representation  by: 

(1)  replacing  the  rectangles  representing  the  subgoals  with 
the  places  of  our  model. 

(2)  replacing  the  formalism  AND,  OR,  and  NOT  by  the 
models  of  the  operators  aggregated  in  super-transitions, 
and  linking  these  places  to  those  transitions  (including  the 
self  loops) 


The  representation  of  the  inference  net  of  the  simple 
symbolic  system  m  Figure  6,  using  the  Predicate  Transition  Net 
models  of  the  logic  operators,  is  shown  on  Figure  7.  The 
interface  module  with  the  user  has  been  added  through  the  places 
IA,  IB,  IC  and  ID,  where  the  user  can  enter  the  degrees  of  truth 
ofA,B,CahdD. 


Figure  7  Inference  net  of  a  simple  symbolic  system, 
using  the  Predicate  Transition  Nets  formalism 

The  simulation  of  the  propagation  of  the  tokens  in  this  net 
allows  one  to  observe  the  reasoning  process  followed  by  the 
system.  The  mapping  of  the  different  places  of  the  net  at  each 
step  of  the  process  of  the  simulation  is  shown  on  Table  1 . 

TABLE  1  Mapping  of  the  Places  at  the  different  steps  of  the 
simulation 
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The  search  for  the  degree  of  truth  of  the  goal  G  starts  when 
the  system  token  is  put  in  the  system  place  Sp,  at  the  beginning 
of  the  search  (step  1 ).  The  degree  of  truth  of  G  cannot  be 
evaluated  when  the  operator  OR  is  executed  The  system  token 
is  therefore  assigned  to  Sc  for  the  checking  of  the  subgoal  E 
(step  2).  The  execution  oi  the  operator  AND  cannot  lead  to  a 
result  for  E  and  the  system  token  is  allocated  to  SA  (step  3), 
which  triggers  an  interaction  session  with  the  user  to  get  the 
degree  of  truth  of  A.  The  user  enters  this  value  (say  0  9)  through 
IA  (step  4)  which  is  assigned  to  A,  while  the  system  token  is 
assigned  to  Sg  (step  5)  Since,  the  degree  of  trutn  of  A  is  larger 
than  0  2,  the  result  of  the  operator  AND  cannot  be  given  in  E 
and  the  system  token  is  assigned  to  Sg  (step  6)  to  get  the  degree 
of  truth  of  B  (say  0  8)  through  IB  (step  7)  The  system  token  is 
then  reassigned  to  Sg  to  trigger  the  operator  AND  (step  8), 
which  can  now  be  executed  The  minimum  of  the  degrees  of 
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truth  of  A  and  B,  0.8,  is  put  in  E,  while  the  system  token  is 
-'ssigned  to  Sq  (step  9).  Since  the  degree  of  truth  of  E  is  equal  to 
0.8,  the  operation  OR  can  be  performed  to  produce  the  result  G 
equal  to  0.8  The  system  token  is  allocated  inS^,  (step  10). 
The  subgoal  F  has  not  been  checked  and  all  the  part  of  the  net 
u  hich  is  used  to  evaluate  F  has  been  pruned. 

1.6  Evaluation  of  the  Response  Time  of  an  Expert  System 

The  model  allows  the  evaluation  of  thc.time  needed  to 
produce  an  output;  this  is  then  used  to  assess  the  timeliness  of  an 
organization  using  an  expert  system. 

The  response  time  of  an  expert  system  is  related  to,  the 
number  of  rules  in  the  rule  base  scanned  by  ’S  system  to  give 
an  answer  to  a  specific  problem  or  goal,  arid  to  the  number  of 
interactions  with  the  user.  The  model  wo  has  c  defined  allows  a 
quick  idenuficanoa  of  the  parts  of  the  rule  base  which  have  been 
scanned,  given  a  certain  set  of  inputs,  to  reach  a  specific  goal, 
since  each  place  contains  the  token  symbolizing  the  value  of  the 
rale  or  fact  it  represents. 

Let  us  consider  -n  expert  system  being  used  to  give  a 
venain  answer  m  a  certain  environment.  We  represent  the  inpm 
X,  to  the  system  as  a  n-tuplet  where  n  is  the  total  number  of 
questions  which  can  be  asked  by  the  system.  The  answer  to  the 
questions  are  contained  in  this  n-tuplet  at  the  location 
corresponding  to  the  question  asked  (this  may  noi  be  listed  in  the 
order  of  appearance  in  time;.  The  locations  for  the  unasked 
questions  arc  left  cmpiy.  We  denote  by  n,  the  number  of 
questions  asked  by  the  system.  The  number  of  X,s  might  be 
very  large  but  it  is  bounded.  Given  a  certain  environment,  we 
can  define  a  distribution  p,(X,)  for  the  occurrence  of  the  input 
Xj. 

For  a  specific  input  Xj,  we  can  identify  N,,  the  number  of 
places  scanned  by  the  system  to  reach  its  goal,  since  they  still 
contain  the  degrees  of  truth  of  the  subgoals  (hey  represent.  If  i  is 
ihe  av  erage  ume  to  check  a  rule  and  t  is  the  average  ume  taken  by 
a  user  to  answer  a  question  asked  by  the  system,  then  the  lime  t, 
to  get  an  answer  given  an  input  Xj  will  be . 

t,»N|  t  +  Bjt 

Therefore,  the  average  time  of  use  T  of  the  expert  system 
for  the  set  of  inputs  X,  will  be  given  by. 

T a  £{1,1  ®  X  P,*,15  ^  Pi  N,X  +  ni* 

i  i  i 

which  leads  to: 

TaElNjlT  +  ElnJi  . 


wliere  EfXJ  denotes  the  expected  value  of  the  variable  X. 

The  titr-e  T  obtained  is  the  average  time  needed  to  get  an 
answer  from  the  expert  system.  This  model  of  a  consultant 
expert  system  will  be  used  to  evaluate  the  effect  that  inconsistent 
information  can  have  on  the  command  and  control  process. 


2.0  USE  OF  THE  EXPERT  SYSTEM  FOR  THE  FUSION  OF 
INCONSISTENT  INFORMATION 

An  important  problem  faced  by  decisionmaking 
organization  is  the  inconsistency  of  information  which  can 
degrade  substantially  their  performance.  This  inconsistency  can 
be  attributed  to  different  causes:  inaccuracy  in  measured  dat3, 
lack  of  sensor  coverage,  presence  of  noise,  bad  interpretation  of 
data.  In  a  military  context,  inconsistency  of  information  can  also 
be  explained  by  the  attempt  by  the  enemy  to  mislead  the 
organization  about  his  actions  through  the  use  of  decoys  or 
jamming  techniques.  TTiis  presence  of  inconsistent  information 
jeopardizes  the  successful  execution  of  the  mission  of  an 
organization. 

Three  strategies  to  fuse  inconsistent  information  are 
consiuered  m  this  paper  .  (1)  ignore  information  sharing,  (2> 
weighted  choice  among  contradictory  setsof  data  and  (3)  use  of 
an  expert  system  which  has  additional  knowledge  on  the 
problem  to  be  solved. 

The  first  strategy  occurs  when  the  decisionmaker 
performing  the  information  fusion  uses  only  his  own  assessment 
and  ignores  the  assessment  of  the  other  decision  maker.  This 
strategy  is  related  to  the  way  a  human  being  assigns  value  to 
information  which  is  transmitted  to  him,  while  executing  a 
specific  task.  The  study  of  Bushnell,  et  al.  (1988)  develops  a 
normauve-desenpuve  approach  to  quantify  the  processes  of 
weighting  and  combining  information  from  distributed  sources 
under  uncertainty.  Their  experimentation  has  shown  that  one  of 
the  human  cognitive  biases,  which  appears  in  the  execution  of  a 
task,  is  the  undervaluing  of  the  communications  from  others, 
which  occurs  independently  of  the  quality  of  the  information 
received.  The  decisionmaker  is,  therefore,  expected  to  have  the 
tendency  to  overestimate  his  own  assessment  and  to  assign  a 
lower  value  to  the  others  .isscssments. 

The  second  strategy  is  to  perform  a  weighted  choice  among 
the  contradictory  assessments  which  arc  transmuted  to  him  and 
compared  to  his  own.  This  weighting  strategy  involves  the 
confidence  which  can  be  given  to  the  information  and  which 
depends  on  the  manner  this  information  has  been  obtained,  or 
or.  its  certainty.  In  many  models  of  organizations  facing  this 
problem  of  inconsistent  information  and  using  the  weighted 
choice  strategy,  measures  of  certainty  are  the  basis  for  the 
weighting  of  different  items  of  evidence.  Among  the  methods 
used,  the  Bayesian  combination  has  given  valuable  results. 

The  third  strategy  involves  the  use  of  an  expert  system. 
Expert  systems  can  consider  additional  knowledge  and  facts 
which  would  be  too  costly  in  terms  of  time,  effort,  and  memory 
storage  to  be  handled  efficiently  by  the  decisionmaker  on  his 
own.  For  each  instance  of  contradictory  data,  it  can  check  if  their 
values  are  consistent  with  the  knowledge  it  has  and  give  an 
indication  of  their  correctness.  With  this  additional  attnbute,  the 
decisionmaker  can  perform  a  more  precise  information  fusion. 

In  order  to  ilhstrate  how  these  strategics  modify  the 
measures  ui  performance  of  an  oigamzation  and  to  emphasize 
the  role  of  an  expert  system  in  the  fusion  of  inconsistent 
information,  an  illustrative  application  will  be  used. 

2.1  Command  and  Control  in  an  Air  Defense  problem 

Mission  and  Organization.  The  illustrative  application  involves 
an  organization,  the  mission  of  which  is  to  defend  a  set  of 
facilities  against  attacking  missiles.  Thtt-set  of  facilities  consists 
of  three  cities,  two  military  bases  and  two  production  facilities 


located  m  a  square  with  30  mile  sides,  as  shown  on  Figure  8.  To 
destroy  incoming  missiles,  the  organization  can  either  use  a  laser 
beam  or  send  an  antimissile  rocket.  The  laser  beam  is  used  in 
case  of  urgency,  when  the  time  before  the  missile  hits  its  target 
is  less  than  a  certain  threshold  The  antimissile  rocket  is  used 
when  enough  time  is  available.  Both  weapons  require  different 
targeting  solutions.  The  performance  of  the  organization  is 
measured  by  its  ability  to  send  the  nghi  weapon  at  the  right  place 
for  each  incoming  threat. 
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Figure  8  Location  of  facilities  to  be  defended  by  the 
organization 

The  considered  organization  is  a  hierarchical 
two.flccisionmakcrs  organization  with  the  Petri  net 
representation  (Tabak  and  Levis,  1984,  Remy  ct  ai.,  1987) 
shown  in  Figure  9.  The  two  decisionmakers,  DM1  and  DM2, 
perform  their  own  situation  assessment  producing  the  results  Z1 
and  72.  DM2  sends  Z21,  which  is  equal  to  Z2,  to  DM1  who  is 
in  charge  of  performing  the  information  fusion  with  one  of  the 
three  strategics  available.  One  of  them  is  to  use  an  expert 
system  Using  the  revised  situation  assessment  Z'l,  the 
response  V 1  is  selected  and  transmitted  to  DM2.  DM2  takes  into 
account  this  new  information  in  his  information  fusion  stage  and 
realizes  the  final  response  selection  of  the  organization,  Y. 


|  Figure  9  Pern  net  of  the  hierarchical  2-DM  organization. 

Inputs  and  situation  assessments  Each  decisionmaker  receives 
as  input  two  points  of  the  trajectory  of  the  missile.  The  first  one 
is  its  position  at  time  t,  which  is  the  same  for  the  two 
<  decisionmakers  to  make  sure  they  are  assessing  the  same 

i  missile  The  second  point  is  determined  by  the  tracking  center 

f  .  of  each  decisionmaker. The  tracking  center  is  defined  as  the  sum 

of  the  human  and  hardware  means  assembled  to  process  the 


information.  The  use  of  decoys  by  the  enemy  and  the  presence 
of  noise  result  in  these  positions  being  not  the  same  for  each  of 
the  decisionmakers  'When  t\is  is  the  case,  we  assume  that  one 
of  the  two  is  the  actual  one.  In  addition  to  these  different 
coordinates,  the  input  contains  also  the  confidence  factors 
associated  with  each  position  These  confidence  factors  have 
been  generated  by  a  preprocessor  (say,  a  tracking  algorithm)  and 
measure  the  quality  that  can  be  attributed  to  each  set  of  data. 

After  receiving  these  inputs,  the  two  decisionmakers,  DM1 
and  DM2,  perform  the  same  situation  assessment.  DM1  (resp. 
DM2)  computes  the  velocity  of  the  missile  and  evaluates  its 
impact  point,  according  to  the  set  of  coordinates  he  has  received, 
and  produces  the  result  Zl  (resp.  Z2).  DM2  sends  Z21,  which  is 
equal  to  Z2,  to  DM1  who  is  in  charge  of  performing  the 
information  fusion. 

Information  fusion  of  DMI:  In  his  information  fusion  stage, 
DM1  makes  first  the  comparison  between  Zl  and  Z21.  If  they 
are  equal,  Z’l  =  Zl  is  produced.  If  they  are  different,  DMI  has 
to  choose  from  the  three  different  strategies  described  in  the 
previous  section. 

The  first  one  is  to  ignore  information  sharing.  In  this  case, 
DM!  produces  ZT  =•  Zl  without  considering  the  situation 
assessment  Z21,  transmitted  to  him  by  DM2. 

The  second  strategy  is  the  weighting  of  the  information 
according  to  the  confidence  factors  associated  with  eavh  set  of 
data.  DMI  considers  the  confidence  factors  Confl  and  Conf2 
given  with  the  input  and  which  measure  the  quality  of  the 
information  to  choose  Zl  or  Z21  If  Confl  is  greater  than  or 
equal  to  Conf2,  DMI  produces  Z’l  =  Zl.  In  the  opposite  case, 
DMI  produces  ZT  a  221. 

The  last  strategy  involves  the  use  of  an  expert  system  The 
simple  knowledge  base  system  which  has  been  developed  for 
this  application  evaluates  the  degree  of  threat  a  missile  represents 
as  a  function  of  the  distance  between  the  location  of  the  different 
facilities  and  its  impact  point  estimated  by  the  user  A  more 
sophisticated  system  could  make  the  assessment  of  the  threat  by 
taking  into  account  the  type  of  missile,  the  geographical  aspect 
of  the  area,  the  direction  of  winds,  the  interest  for  the  enemy  to 
destroy  the  aimed  facility,  ...  The  threat  assessment  of  the 
missile  is  done  for  the  two  possible  trajectories,  one  after 
another.  If  the  first  threat  assessment  shows  that  the  target  is  one 
of  the  facilities  with  enough  certainty,  the  compuu  ■  stops  its 
search.  In  the  opposite  case,  the  computer  evaluates  also  the 
threat  that  the  missile  would  have  if  it  followed  the  second 
trajectory.  The  answer  of  the  expert  system  consists  of  two 
numbers  between  0  and  1  representing  the  severity  of  the  threat 
posed  by  the  missile  (according  to  each  assessment).  When  the 
answer  is  given,  DMI  docs  not  use  a  strategy  to  make  a 
comparison  with  a  result  from  an  internal  algorithm,  as  shown 
by  Weingacnner  and  Levis  (1987).  This  is  due  to  the  fact  that 
the  decisionmaker  has  not  enough  data  on  his  own  to  be  able  to 
double  check  the  answer  of  the  decision  aid  If  the  degree  of 
threat  acvording  to  the  assessment  of  DM!  is  greater  than  or 
equal  to  the  one  according  to  the  assessment  of  DM2,  the  result 
is  ZT  «  Zl.In  the  opposite  case,  the  result  is  ZT  =  Z21 

Response  of  the  organization  Having  chosen  the  trajectory 
which  seems  to  be  the  most  likely,  DMI,  in  his  response 
selection  stage,  determines  the  type  of  threat  the  missile 
represents  by  computing  the  time  before  impact  and  sends  it  to 
DM2  with  the  fused  information  DM2,  in  his  information 
fusion  stage  selects  the  weapon  to  use  and  performs  the  targeting 
solution  in  his  response  selection  stage 
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22  Measures  of  Performance 

The  measures  of  performance  considered  in  this  paper  are 
workload  (Boettcher  and  Levis,  1982;  Levis,  1984),  timeliness 
(Cothier  and  Levis,  1986)  and  accuracy  (Andreadakis  and  Levis, 
1987)  They  have  been  defined  for  the  two  possible  types  of 
interaction  between  the  computer  and  the  user : 

The  user  initiated  mode  when  the  decisionmaker  enters  all 
the  data  he  h3S  in  a  specified  order  and  the  machine 
produces  a  result  Not  all  entered  data  may  be  needed  by  the 
machine  in  its  search  process. 

The  computer  initiated  mode  when  the  user  enters  specific 
data  only  in  response  to  requests  from  the  computer. 

Thirty  three  equiprobable  inputs  to  the  organization  have 
been  considered.  Twenty  four  inputs  contain  inconsistent 
information.  We  assume  that  for  half  of  these  inconsistent 
inputs,  the  tracking  center  of  DM1  is  correct  (the  tracking  center 
of  DM2  is  correct  for  the  other  half  because  we  assume  that  for 
each  input,  one  of  the  two  contradictory  positions  is  correct). 

2.2.1  Workload 

The  evaluation  and  the  analysis  of  workload  in 
decisionmaking  organization  uses  an  information  theoretical 
framework  (Levis,  1984).  It  allows  to  evaluate  the  activity  of  a 
decisionmaker  by  relating,  in  a  quantitative  manner,  the 
uncertainty  in  the  tasks  to  be  performed  with  the  amount  of 
information  that  must  be  processed  to  obtain  certain  results. 

The  information  theoretic  surrogate  for  the  cognitive 
workload  of  a  decisionmaker  is  computed  by  adding  all  the 
entropies  of  all  the  variables  used  to  model  the  procedures  he 
uses  to  perform  his  task  The  distributions  of  all  the  variables  are 
generated  by  executing  the  algorithms  for  all  the  inputs.  This 
process  of  generation  starts  with  a  probability  equal  to  zero  for 
all  the  values  that  each  variable  can  take.  When  the  execution  of 
the  algorithm  is  performed  with  the  input  Xj  having  a 
probability  pj,  the  internal  variable  w^ ,  if  it  is  active,  takes  the 
value  a..  The  probability  mass  function  of  this  variable  w,  is 
updated  by  adding  the  probability  pjto  the  probability  this 
variable  had  to  take  the  value  aj  before  the  execution  of  the 
algorithm  with  this  input  Xj.  The  operation  for  all  the  variables 
wj  affected  by  the  input  is: 

p(w,<  u  aj  I  Xj . Xj,|,  Xj)  a  p(wj «  aj  I  Xj, ....  Xj.j)  +  pj 

However,  to  take  into  account  the  effect  of  the  different 
strategies,  the  workload  of  the  decisionmakers  has  to  be 
computed  for  all  the  mixed  strategies.  A  mixed  strategy  is  a 
convex  combination  of  the  three  pure  strategies,  and  is  noted 
(Pl»  P2*  ft),  where  p,,  fl »  1,2,3)  is  the  probability  of  using 
strategy  1  tn  the  mixed  strategy.  The  quantities  pi,  P2  and  P3 
verify : 

Pl  +  P2  +  P3“l 

To  compute  the  workload  of  DM1  and  DM2  for  all  the 
mixed  strategies,  the  system  of  all  the  variables  has  to  be  divided 
in  three  subsystems. 

The  first  subsystem  is  composed  of  the  internal  variables  of 
the  algorithms  for  situation  assessment  of  DM1  and  DM2.  The 
execution  of  these  algorithms  and  the  values  taken  by  their 
internal  variables  for  each  input  do  not  depend  on  the  strategy 
chosen  in  the  information  fusion  stage.  Therefore,  these 


algorithms  are  executed  only  once  for  each  input  to  generate  the 
probability  mass  functions  of  their  internal  variables.  This 
subsystem  allows  to  compute  the  invariant  part  of  the  workloads 
of  DM1  and  DM2,  G^y*  and  Gjnv2. 


The  second  subsystem  is  made  of  the  variables  of  the 
different  algorithms' of  the  information  fusion  stage.  This 
subsystem  has  for  input  (Z1.Z21)  and  produces  the  output  Z’l 
with  three  different  algorithms.  Each  algorithm  1  is  executed 
independently  of  the  others  for  all  the  inputs  and  the  sum  of  the 
entropy  of  its  internal  variables  (ZT  is  considered  to  be  an 
internal  variable  of  each  algorithm) ogives  the  activity  of 
coordination  of  the  algorithm  of  the  strategy  i,  gc*.  The 
contribution  of  this  subsystem  to  the  workload  of  DM1  is 
evaluated  by  using  the  Partition  Law  of  Information 
(Conant,1976). 

The  throughput,  Gt,  is  given  by : 

Gt»T(ZI,Z21  :Z’l) 

The  blockage  term,  G5,  which  represents  informant  in  the 
input  not  reflected  in  the  output,  is  given  by : 

GboHfZl.Zll)-^ 

We  assume  that  the  data  are  noiseless  and  that  the  algorithm 
are  deterministic.  This  assumption  is  made  only  to  simplify  the 
presentation.  The  noisy  case  with  stochastic  algonthms  leads  to 
additional  terms  in  various  expressions:  In  this  case,  the  noise, 
Gn ,  is  only  caused  by  the  internal  choice  in  the  decisionmaking 
process  and  is  simply  given  by: 

Gn  «  H(u) 

where  u  is  the  decision  variable  specifying  the  choice  among  the 
different  algorithms.  H(u)  is  equal  to . 

H(u)aH(Pl)  + H(P2)  +  H(P3) 

As  stated  by  Boettcher  (1981),  the  coordination  term  is 
given  by : 

3 

where : 

//(p,)  =  Pi  log2(Pi)  +  (1  -  p.)  log2(l  -  p.) 

and  cq  is  the  number  of  internal  vanables  of  the  algorithm  i  VVe 
have  therefore  the  activity  of  the  subsystem,  Gjubsysicm 
3 

G*  H(ZI.  Z2)  +  H(u)  ♦  £  <**;+  a,  IHpj) 

*»I 

Finally,  since  the  entropies  of  Z1  and  Z21  have  been 
evaluated  in  the  first  subsystem,  the  contribution  G,j(pi,  P2.  P3) 
of  the  second  subsystem  to  the  workload  of  DM1  for  the  mixed 
strategy  (p,,p2,p3)  is: 

3 

G^Pi.  Pj.  Pj)  -  H(u)  +  £  (P.^  +  «,W(P^) 

**1 

The  third  subsystem  is  composed  of  the  variables  of  the 
algonthms  used  after  the  information  fusion  stage  These 
algonthms  are  the  response  selection  of  DM1,  the  information 
fusion  and  the  response  selection  of  DM2.  The  variables  of  these 
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algorithms  can  take  three  values  that  are  different  for  each  input 
according  to  the  pure  strategy  used.  Therefore,  for  each  variable 
of  this  subsystem,  three  probability  mass  functions  arc  generated 
for  all  the  inputs  and  for  each  pure  strategy.  To  compute  the 
entropies  of  these  variables  for  the  mixed  strategies,  a  convex 
probability  mass  function  is  deduced  from  the  probability  mass 
functions  determined  for  each  pure  strategy.  By  summing  these 
entropies,  the  variable  contribution'  to  the  workload  of  DM1  and 
DM2  is  deduced,  (pj,  P2,  P3)  and  P3)*  The 

workload  of  DM  1  and  DM2  can  now  be  evaluated: 

GdM!  =  H(input)  +  Hjnv1  +  H(Z21)  +  Gjf  (P1.P2.P3) 

+  Gvar,(Pi.P2.P3) 

Gdm2  =  H(input)  +  H,nv2  +  H(Y!)+ Gvax2  (p1.P2.P3) 
222  Timeliness 

The  measure  of  timeliness  considered  in  this  application  is 
related  to  the  response  time  of  the  organization.  A  deterministic 
processing  time  has  been  associated  with  every  algorithm. 
Again,  each  processing  time  can  be  described  by  a  probability 
density  function  and  the  probability  density  function  of  the 
response  time  can  be  computed  (see  Andreadakis  and  Levis, 
1987)  The  use  of  stochastic  model  does  not  add  to  the 
presentation  of  the  example,  but  would  be  the  model  to  use  for 
an  experimental  investigation  For  the  strategy  involving  the  use 
of  the  expert  system,  the  time  to  give  an  answer  has  been 
computed  using  the  expert  system  model  described  in  the  first 
section  of  the  paper.  The  response  time  of  the  expert  system  is 
function  of  the  number  of  rules  scanned  by  the  system  for  each 
input  to  the  organization  and  of  the  number  of  interactions  with 
the  user.  This  time  Is  likely  to  vary  with  the  mode  of  interactions 
used. 


if  Vy4i 
'f 


The  accuracy  J(i)  obtained  for  the  pure  strategy  x  is : 


J®=£p(xpc(ys.Y<lj) 

J 

The-accuracy  for  the  mixed  strategy  (pi,  P2,  P3), 
J(Pl,  P~2»  P3).  ,s  obtained  by.  computing  the  convex- 
combination  of  the  accuracy  for  each  pure  strategy : 


"  J<P1- P2»  P3)  =  Pi  JO)  +P2  J(2)  *  P3  J(3) 

Consequently,  J  represents  the  probability  that  an  incorrect 
response  will  be  generated.  The  lower  the  value  of  J,  the  better 
the  performance  is.  The  next  section  provides  an  analysis  of  the 
results  obtained  by  using  these  measures  of  performance 


3.0  RESULTS  AND  INTERPRETATION 

Using  the  method  described  above,  measures  of 
performance  have  been  evaluated  for  the  three  strategies.  For  the 
■strategy  involving  the  use  of  an  expert  system,  we  have 
considered  two  different  options  for  dealing  with  uncertainty  in 
the  ftnng  of  rules.  Fuzzy  logic  or  Boolean  logic,  and  two  modes 
of  interaction  between  the  user  and  the  decision  aid.  user  initiated 
mode  or  computer  initiated  mode.  The  results  arc  summarized  in 
Table  2. 

TABLE  2,  Measures  of  Performance  for  the  three  strategies 


We  assume  that  DM1  and  DM2  perform  their  situation 
assessment  concurrently  and  synchronously,  and  that  the  same 
ariiount  of  time  is  needed  by  the  two  to  give  an  answer 
Therefore,  only  one  of  the  two  processing  limes  is  considered. 
Tsai*  <rC!>P*  TRS1»  TSa2>  Tifz  and  TRS2)  denotes  the  time 
needed  to  execute  DM  I  s  situation  assessment  algorithm  (resp 
Dml's  response  selection,  DM2’s  situation  assessment, 
information  fusion  and  response  selection)  Tjpt(t)  is  the  time 
needed  to  perform  the  information  fusion  using  a  pure  strategy  1 
(1  «=  i,  2, 3J.  Tjpjk3>  is  a  function  of  the  average  response  time 
of  the  expert  system  computed  from  its  response  time  for  all  the 
inputs.  The  response  time  for  the  strategy  i,  T(i)  is  therefore: 
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3.1  Measures  of  Performance 


T(i)  «TsA|  •*'Tipi(i)+Tr$i  +  Tjf2  +  Trs2'  ^.1.1  *>UPe  Strategies. 


The  response  time  for  each  mixed  strategy  (pj,  p2,  P3)  is 
given  by  a  convex  weighting  of  the  response  time  for  each  pure 
strategy  If  T  (pj,  pj,  P3)  denotes  the  response  time  of  the 
organization  when  the  strategy  (pj,  P2,  P3)  is  used,  we  have : 

T'Pt>P2*P3)  aPiT(l)  +  P2T(2)  +  p3T(3) 

223  Accuracy 

Accuracy  of  the  organization  has  been  evaluated  by 
comparing  the  actual  response  of  the  organization  with  the 
desired  or  optimal  response  expected  for  each  input  This 
desired  response  is  known  to  the  designer.  A  cost  of  one  has 
been  attributed  when  the  incorrect  type  of  weaoon  is  used  or 
when  the  target  point  is  not  accurate.  For  each  input  Xj  having  a 
probability  p(Xp»  the  use  of  the  pure  strategy  1  generates  the 
response  Yu  which  is  compared  to  the  desired  response  Y^.  The 
cost  function  C(Y,j,  Y<j;)  has  the  following  characteristics : 


The  three  first  columns  of  table  2  display  the  measures  of 
performance  (MOPs)  of  the  organization  for  each  pure  strategy 
These  results  show  that  the  taking  into  account  of  more 
knowledge,  either  about  the  way  data  are  obtained,  in  the  case  of 
the  weighted  choice  strategy,  or  about  the  meaning  of 
information,  when  the  expert  system  is  used,  yields  greater 
accuracy.  Accuracy  is  an  important  issue  for  the  kind  of  mission 
this  type  of  organization  is  expected  to  carry  out.  The  results 
show  also  that  taking  into  account  more  knowledge  requires  the 
handling  of  more  data  Therefore,  more  time  is  needed  and  more 
effort,  expressed  in  terms  of  workload,  is  required  This 
increase  in  workload  is  caused  more  by  the  extra  decisions 
which  must  be  made  when  the  knowledge  is  taken  into  account 
than  by  operations  or  manipulation  done  with  the  additional 
knowledge.  These  manipulations  are  done  by  the  decision  aids, 
out  of  the  control  of  DM  1 
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When  DM1  ignores  the  situation  assessment  of  DM2,  very- 
few  operations  are  performed  The  response  time  is  the  smallest 
of  the  three.  If  the  measure  of  timeliness  is  the  ability  of  the 
organization  to  give  a  response  as  fast  as  possible,  this  strategy 
leads  to, a  more  timely  response  than  the' two  others.  The 
simplicity  of  the  algorithm  results  in  low  workload  for  DM1  in 
comparison  with  the  other  strategies  which  can  be  explained  by 
the  fact  that  DM1  handles  fewer  variables.  This  strategy  has  low 
accuracy  in  comparison  with  the'other  strategies,  because  the 
choice  made  on  the  information  to  be  fused  is  arbitrary  and  has 
no  rational  justification.  Thus,  a  clear  assessment  of  the  cost  and 
valuse  of  coordination  can  be  made. 

For  the  weighted  choice  strategy,  no  operation  on  variables 
received  is  performed.  DM!  makes  only  a  comparison  between 
the  weights  of  the  information.  Wc  have  assumed  that  the 
weighting  process  was  carried  out  outside  the  organization  by  a’ 
preprocessor  and,  consequently,  DM1  performs  only  few 
operations  more  than  in  the  first  strategy.  Therefore,  workload 
and  response  time  are  slightly  larger  than  for  the  first  strategy 
because  of  the  extra  information  obtained  by  comparing  the 
confidence  factors.  An  increase  of  3.9  %  in  response  time  and  of 
2,4  %  in  the  workload  of  DM1  is  found.  The  measure  of  how 
the  data  have  been  obtained,  given  through  the  confidence 
factors,  brings  a  large  gain  in  accuracy.  An  improvement  of  25 
%  in  the  accuracy  of  the  organization  in  comparison  to  the  first 
strategy  is  observed.  These  results  show,  as  expected,  that 
taking  into  account  the  quality  of  information  plays  an  important 
role  in  the  accuracy  of  the  organization,  without  degrading 
substantially  the  other  measures  of  performance. 

When  the  expert  system  is  used,  the  increase  in  workload  of 
DM  I  is  about  8.3  %  from  the  level  of  strategy  2,  and/10.8  % 
from  the  level  of  the  first  strategy.  This  can  be  explained  by  the 
handling  by  DM1  of  the  assessments  given  by  the  expert 
system.  These  assessments  are  variables  which  have  greater 
entropies  and  which  require  more  processing.  The  increase  in 
response  time  (of  10.8  %  from  the  level  of  strategy  2  and  of 

15.2  %  from  the  level  of  strategy  1)  is  mainly  caused  by  the  time 
taken  by  DM1  to  interact  with  the  system  and  the  time  needed  to 
get  the  answer.  This  response  time  of  the  expen  system  can  get 
larger  as  the  size  of  the  knowledge  base  and  of  the  magnitude  of 
the  problem  to  solve  increase.  In  the  example,  the  simplicity  of 
the  expert  system  hides  the  real  effect  on  timeliness  which  can  be 
expected  with  the  use  of  such  interacting  system.  The  gain  in 
accuracy  is  very  significant,  about  22  in  comparison  with 
the  accuracy  reached  with  the  second  strategy  and  41.7  %  from 
the  level  reached  when  the  situation  assessment  of  the  other  DM 
is  ignored.  This  shows  the  extent  to  which  the  accuracy  is 
improved  when  additional  knowledge  is  used  to  verify  the 
correctness  of  information.  By  using  the  expert  system  to 
evaluate  the  threat  and  to  estimate  the  seventy  of  the  threat  for 
each  possible  trajectory,  DM!  has  a  broader  assessment  which 
allows  him  to  perform  more  accurate  information  fusion. 

Finally,  we  note  that  the  workload  of  DM2  remains  almost 
constant  for  all  the  strategies.  A  vanation  of  1.5  %  can  be 
observed.  He  uses  always  the  same'algonthms,  and  only  the 
different  distributions  of  the- variables  of  the  algorithms 
obtained,  when  different  strategies  are  used  by  DM1,  explain 
this  small  variation  in  his  workload 

3.1.2  Mixed  Strategies 

The  performance  measures  (accuracy,  timeliness,  and 
workload  of  DM1)  reached  by  the  organization,  when  mixed 
strategies  are  used  by  DM1  in  his  infoimation  fusion  stage,  have 
been  obtained  using  CAESAR  (Computer  Aided  Evaluation  of 


System  ARchitectures)  Measures  of  Performance  Jiave.becn 
evaluated  for  all  mixed  strategies  and  have  led  to  a  surface  in  the 
space  (J-T-Gl)  represented  on  Figure  10.  The  projections  of  this 
surface  on  the  Accuracy  -  Workload  (J-Gl),  and  Timeliness  V 
Workload  (T-Gl)  planes  are  drawn  on  Figure  11’  Measures  of 
performance  reached  for  each  pure  strategy  are  located  at  the 
three  cusps  of  the  figures. , The  convex  combination  of  any  two 
pure  strategies  gives  a  U-shaped  curve  (Boettchci  and  Levis, 
1982)  which  can  be  explained  by  the  fact  that  when  a  mixed 
strategy  is  used,  there  is  an  additional  activity  due  to  switching 
from  onealgorithm  to  another! 


Figure  10  Locus  of  the  Measures  of  Performance  attained  by  the 
organization 


Figure  1 1  Mixed  Strategics ,  Accuracy  /  Timeliness  vs 
workload  for  DM1 

The  projection  of  the  surface  of  the  Measures  of 
Performance  on  the  Accuracy  -  Timeliness  plane  (J-T>  gives  the 
mangle  shown  on  Figure  12,  which  shows  the  performance 
attained  by  the  organization.  The  comers  of  this  tnangle  indicate 
the  level  reached  in  accuracy  and  response  time  for  each  pure 
strategy.  For  all  binary  variations  between  pure  strategies  or  for 
all  successive  binary  combinations  of  mixed  strategies,  J  and  T 
are  linear  combinations  of  each  other.  Figure  12  shows  clearly 
the  trade-offs  between  response  time  and  accuracy  and  how  the 
requirements  of  the  mission  will  justify  a  strategy.  Thus,  if  the 
requirements  in  accuracy  are  too  binding,  the  strategy  of 
ignoring  information  sharing  will  not  be  acceptable  -  In  the  same 
way,  if  the  time  available  to  process  each  input  is  too  short,  the 
expert  system  would  be  useless  because  too  much  time  will  be 
needed  to  perform  the  information  fusion. 
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Figure  12  Mixed  Strategics  :  Accuracy  and  Timeliness  of  the 
Organization 

3.2  Effect  o  .ae  mode  of  interaction 

The  effect  of  the  mode  of  interaction  on  the  measures  of 
performance  is  shown  on  the  last  four  columns  of  Table  2 
There  is  no  change  in  accuracy  or  workload;  however,  a  slight 
change  in  timeliness  is  observed.  Ibis  is  caused  by  the  fact  that, 
in  the  user  initiated  mode  of  interaction,  all  the  data  which  have  a 
chance  to  be  processed  by  the  expert  system  are  entered  at  the 
beginning  of  the  session  In  the  example,  the  position  of  the 
impact  points  according  to  the  two  different  situation 
assessments  arc  entered,  even  if  the  first  set  is  sufficient  to 
assess  the  threat.  Therefore,  more  time  is  needed  than  in  the 
computer  initiated  mo/;  where  data  are  entered  at  the  request  of 
the  system  during  tire  search. 

It  is  important  to  note  that  in  the  air  defense,  no  workload 
have  been  assigned  to  the  process  of  entering  the  information  in 
the  expert  system.  The  process  consists  only. of  replication  of  the 
information  the  decisionmaker  already  has.  If  the  inputs  asked 
by  the  expert  system  do  not  correspond  to  the  data  the 
decisionmaker  has,  he  would  have  to  perform  sonic  operations 
to  deduce  these  inputs  from  the  information  he  has  'Let  ~s 
consider  an  example  where  the  decisionmaker  has  computed  or 
received  from  another  member  of  the  organization  the  value  of 
the  speed  of  an  object  being  analyzed.  If  the  ejepest  system  asks 
the  decisionmaker  the  question  "speed  of  the  object :  {possible 
answer  low,  moderate,  high]."  the  decision  maker  will  have  to 
deduce  from  the  actual  value  of  the  speed  the  attribute  asked  by 
the  system.  A  small  algorithm  will  have  to  be  executed, 
increasing  his  workload.  It  can  be  expected  therefore  that,  in  this 
case,  a  change  in  workload  similar  to  the  change  m  response 
time  would  be  observed.  This  issue  raises  the  problem  of  the 
adequate  design  of  the  expert  system,  or  more  generally,  of  the 
decision  aid  in  which  the  mode  of  interaction  has  to  be  thought 
very  carefully  to  avoid  an  unnecessary  increase  in  the  workload 
of  the  decisionmaker  and  in  the  response  time. 

3.3  Fuzzy  Logic  vs.  Boolean  Logic 

For  this  illustrative  application,  the  levels  of  performance 
reached  when  different  expert  systems  are  used  have  been 
j-tudied.  The  performance  achieved  with  an  expert  system  using 
fuzzy  logic  as  the  means  of  inference,  which  has  been  developed 
for  the  example,  has  been  compared  to  the  performance  obta.ned 
by  using  an  expert  system  which  does  not  deal  with  uncertainty 
and  uses  Boolean  logic.  This  version  of  the  expert  system  has 
been  obtained  by  changing  the  mappng  functions  (only  values  0 
and  i  could  be  processed  instead  of  the  real  numbers  between  0 
and  l A  It  has  been  assumed  that  a  statement  having  a  degree  oi 


truth  greater’fresp.  smaller)  than  0.6  was  true  (resp.  false). 
Therefore,  the  assessment  of  the- threat  of  the  missile  for  each 
trajectory  has  only  the  values  true  or  false.  The  different 
measures  of.  performance  obtained  for  the  two  systems  are 
summarized  in  the  last  four  columns  of  Table  2. 

The  organization  has  a  response  time  slightly  lower  with  an 
expert  system  using  Boolean  logic  than  with  the  expert  system 
using  fuzzy,  logic  (2.3  %)<  This  is  due  to-the  fact  that  by 
assigning  the  value  true  or  false  to  the  severity,  of  threat,  the 
system  can  reach  a  conclusion  (which  is  not  always  the  best  one) 
by  examining  fewer  possibilities.  It  can  prune  a  larger  part  of  the 
knowledge  base  than  the  fuzzy  logic  system  when  it  reaches  the 
conclusion  that  the  missile  is  threatening  a  specific  facility. 
When  this  conclusion  is  reached  for  the  first  possible  trajectory, 
the  other  trajectory  is  not  examined.  This  results  in  a  shorter  time 
to  produce  the  answer  and  in  fewer  interactions  with  the  user 
and  therefore  i  n  a  shorter  response  time. 

Since  the  expert  system  with  Boolean  logic  assesses  the 
threat  only  with  the  value  true  or  false,  the  answer  of  the  expert 
system  has  a  lower  entropy  The  workload  of  the  decisionmaker 
is  therefore  lower  (about  o.8  %)  when  he  uses  the  expert  system 
with  Boolean  logic  than  when  he  uses  the  expert  system  wuh 
fuzzy  logic. 

By  pruning  a  larger  part  of  the  knowledge  base  when  « 
reaches  a  conclusion,  the  system  has  more  chance  to  make  the 
wrong  assessment  of  the  threat.  The  results  show  that,  indeed, 
the  system  with  Boolean  logic  exhibits  lower  accuracy  than  the 
system  with  fuzzy  logic.  The  level  of  accuracy  is,  nevertheless, 
bitter  than  for  the  two  other  strategies  expected  to  be  used  in  the 
information  fusion  stage  and  is  explained  by  the  fact  that  more 
knowledge  is  taken- into  account  in  the  information  fusion 
process. 

4.0  CONCLUSION 

In  this  paper,  a  model  with  fuzzy  logic  as  a  means  for 
dealing  with  uncertainty  has  been  developed  using  the  Predicate 
Transition  Net  formalism.  A- method  to  make  time-related 
measures  from  this  representation  has  been  introduced,  taking 
into  account  the  portion  of  the  rule  base  scanned  by  the  system 
and  the  number  of  interactions.  Then,  the  assessment  of  the  role 
of  an  expert  system  has  been  madc-through  the  study  of  an 
example  which  involves  a  two  decisionmaker  organization 
facing  the  problem  of  fusion  ot  inconsistent  information  The 
decisionmakers  must  identify  the  trajectories  of  threats  that  they 
then  have  to  destroy  to  protect  a  sci  of  facilities.  In  the  example, 
the  expert  system  helps  the  decisionmaker  to  clarify  the 
contradictory  situation  assessment  he  has  to  fuse.  This  strategy 
has  been  compared  to  two  others  expected  to  be  used  in  this 
situation  ;  (!)  ignoring  the  assessment  of  the  other 
decisionmaker,  (2)  making  a  weighted  choice  among  the  two 
contradictory  situation  assessments,  by  taking  into  consideration 
the  way  the  data  used  to  produce  these  assessments  have  been 
obtained  by  each  decisionmaker.  Measures  of  performance 
(workload,  timeliness  and  accuracy)  have  been  evaluated  The 
results  show  that  the  use  ot  the  expert  system  impiuvc- 
significantly  the  accuracy  of  the  oigamzauon,  bui  requites  mure 
time  and  increases  'he  woikloud  of  the  decjaiuamakei  usin^  u 

comparison  of  the  two  modes  ot  imeracuqn  between  the 
user  and  the  system  has  shown  vai  rations  »n  w  oik  load  and  in 
response  time  the  computei  muraied  mode  requires  less 
workload  ar.d  less  response  ume  for  a  same  level  of  accuracy 
This  result  tends  to  show  that  the  design  of  an  interacting 
decision  aid  mus  take  into  account  not  only  che  chaiaueusUvs  oi 
the  problem  to  be  solved,  but  also  the  way  the  dcusionmAei 
would  use  if. 
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BACKGROUND 

The  current  technique  for  the 
mission  t  as  icing  of  a  multiple  sensor 
suite  on  an  airborne  platform  lads  the 
efficiency  and.  coordination  between 
sensors  that  is  needed  to  maximize  the 
effectiveness  of  the  platform- assets  for 
a  battlefield  situation. 

The  state1  of  the  art  in  mission 
{ashing  -for  multisensor  systems  involves 
independent  and  often  manual 
scheduling  of  each  sensor  within  the 
flight-profile  constraints  and  schedule 
provided  for  the  platform.  This  is  a 
time-consuming  process  that  generally 
fails  to  provide  for  integrated,  multi- 
sensor  observations  of  critical  targets; 
in  a  fashion  that  facilitates  their 
multispectral  exploitation.  New 
concepts  and  automated  tools  are 
required  to  plan  and  manage 
reconnaissance  missions  utilizing 
multidisciplined  sensor  suites  in  a.n 
integrated  way.  Solutions  to  this 
problem  are  needed  that  treat  the 
complex  tradeoffs  between  the 
conflicting  goals  of  collection  efficiency 
and  survivability,  which  often  arise 
during  intelligence  collection." 

-  This  paper  presents  work  in 
progress  whose  goal  is  to  develop  new' 
concepts,  methodologies,  and  tools  for 
the  planning  and  management  of 
multisensor  intelligence  and 
reconnaissance  missions.  The  planning 
function  begins  with  requests  for 
intelligence  collection  and  culminates  in 
a  detailed  plan  that  specifies  the 
platform  flight  path-,  sensor  schedules, 
cue  lists,  self-protection  rules,  and 


-  Laura  C;  Morrison 
Lockheed  Austin  Division 
0/T5-40,  B/30F,  (51?)  44.8-5126 
6300  Burleson  Road 
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historical  information  required  by 
mission  management.  The 
management  function  monitors  mission 
execution,  performs  multisensor  fusion 
and  cueing  on  processed  sensor  data, 
and  modifies  the  mission  plan  in 
response  to  the  immediate  situation. 

PROJECT  O'  F.RVIEW 

This  section  focuses  on  the  overall 
scope  of  the  project,  presenting  the 
top-level  concepts  for  developing 
mission  planning  and  management 
tools.  The  next  section  describes  the 
work  to  date  that  has  been  integrated 
into  software. 

The  project  approach  is  to 
integrate  and  evaluate  the  models  and 
algorithmic  solutions  developed  from 
these  concepts  in  the  framework  of  a 
software-based  analysis  system.  Figure 
1-  depicts  the  three  components  of  the 
analysis  system.  The  plan  development 
phase  results  .in  the  complete 
specification  of  i  mission  plan.  It 
includes  fiigh' .  i-ith  planning,  sensor 
scheduling,  arid  cue  rules  generation. 
This  portion  <  *  <c  system  has  been 

the  focus  of  this  work  to  date.  The 
system  simulati r  phase  provides  a 
detailed  time-his  ory  of  the  aircraft 
flight,  sensor  t  Election,  threat 
responses,  and  target  movements.  The 
simulated  flight  wi  1  differ  from  the 
original  mission  plan  as  the  mission 
manager  respondi  to  information 
gathered  during  execution.  The 
evaluation  phase  collects  and  analyzes 
the  statistics  generated  from  the 
simulation. 
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Figure  1.  The  analysis  .system  for  the  development  of  mission  planning 
and  management  algorithms  provides  a  complete  testing  environment  for 
new  concepts  in  multisensor  tasking.  The  system  becomes  the  actual 
decision  aid  for  a  mission  planner  after  the  design  and*  verification  of  the 
three  components:  plan  development,  system  simulation  and  evaluation. 


.Plan  Development 

The  functional  flow  for  multisensor 
mission  planning  (Figure  2)  interprets 
the  planning  process  in  terms  that 
allow  automated  implementation.  This 
corresponds  to  the  plan  development 
phase  of  the  analysis  system  (Figure 
1)  and  results  in  the  initial  mission 
plan  depicted  in  Figure  2.  Details  on 
the  software  implementation  of  this 
functional  flow  are  provided  in  the 
Impact  System  section  of  this  paper. 

The  setup  phase  is  initiated  by 
submitting  a  request  for  collection, 
which  consists  of  ah  object  of  interest, 
its  associated  area  of  interest  (AOI), 
timeliness  information,  and  desired 
information  on  the  object.  This 
includes  information  on  quantifiers 

Se.gw,  location),  acquisition  level 
detection,  classification,  recognition, 
identification),  and  activity  status. 
The  system  then  determines  specific 
targets  for  IMINT  and  SIGDfT  sensors 
that  will  satisfy  the  collection  request. 
At  this  time,  threats  to  the 
survivability  of  the  platform  are  added 


to  the  list  of  target  objects  on  which 
to  collect  information,  and  a  history  of 
observables  is  referenced  for  known 
locations  and  densities.  Next,  an 
interactive  feedback  loop  between  the 
selection  of  the  flight  path  and  an 
evaluation  of  exposure  to  threats 
determines  and  refines  the  platform 
-route.  Also  in  the  setup  phase,  tasks 
that  can  only  be  satisfied  by  a  near- 
real-time  management  function  (such 
as  high-resolution  location  accuracy  or 
identification  of  a  target)  are  allocated 
to  management  and  converted  into  a 
planning  task  (such  as  lower  resolution 
accuracy  or  detection)  with  an 
associated  cue  stored  for  the 
management  tasking, 

The  operating  parameters  of  the 
sensors  and.  mission  then  are  used  to 
determine  each  sensor’s  capability  to 
collect  the  information  in  order  to 
satisfy  the  requests.  Bach  of  the 
sensor  models  calculates  expected 
measurement  accuracies  and 
probabilities  of  acquisition  based  on 
sensor  capabilities;  target  parameters, 
geometric  considerations  (range,  field  of 
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Figure  2.  The  functional  flow  for  mission  planning  decomposes  the  process 
into  terms  that  allow  efficient,  coordinated  implementation  of  automated, 
multisensor  planning. 


V 


▼iew),  atmospheric  conditions,  and 
weather  conditions;  » 

These  decision  parameters'-  are 
passed  to  the  assignment  phase,  where 
sensor  coverage  is  displayed  to  the 
user.  In  this  phase,  intersensor- 
constraints  are  noted.  These  can  be 
exclusive  constraints  (e.g.,  SAR  may 
interfere  with  ELKiT  collection  in  a 
frequency  range)  or  inclusive 
constraints  (e.g.,  EO  and  IE  may 
share  optics  so  that  they  must  be 
directed  at  the  same  area).  Combined 
sensor  ^fleets,  also  calculated  here,, 
determine  the  cumulative  probability  of' 
acquisition  by  more  than  one  sensor. 
Each  element  of  information  -with  a 
probability  of  detection  by  a  sensor 
above! a  minimum  threshold  is  assigned 
to  be  collected  by  that  .sensor. 

In' the  scheduling  phase,  -  optimized, 
detailed  sensor  tasking  ir  computed. 
The  algorithms  for  these- computations 
consider  criteria  values  tiiat^are  based 
on  the  priority  -of  the  request,  the 
capability  of  the  sensor  to  collect  the 
information,  and  the  contribution  of 
the  information  to  satisfying  the 
overall  request-.  Tradeoffs  for 
employing  SIGINT  or  IMINT  collection 
opportunities  are  made  at  this  time. 
Initial  requirements  for  the  intelligence 
collection  mission  are  then  compared 
to  the  expected  performance  of  the 
mission  for  the  scheduled  sensor 
'tasking.  The  candidate  plan  and  the 
evaluation  of  it  are  then  presented  to 
the  user  who  can  accept  the  plan, 
modify  it' or  return  to  components  of 
the  setup  or  assignment  phase  to 
create  a  new  plan. 

System  Simulation 

The  purpose  of  the  simulation  is 
two-fold:  (X)  to  provide  the  developer 
with  a  vehicle  for  creating  and 
analyzing  new  mission  management 
algorithms,  and  (2)  to  aid  the  mission 
planner  in  evaluating  courses  of  action 
as  an  element  of  the  mission  planning 


decision  aid. 

The  system  simulation  encompasses 
two  primary  components:  the  modeling 
of  intelligence  collection  and  the 
responding  to  the  perceived  situation 
through  the  mission  manager.  The 
simulation  of  intelligence  collection  will 
be  performed  by  the  Lockheed 
Interactive  “Simulation  for  Intelligence 
Collection  (ISIC),  an  Ada-based  system 
that  resides  on  a  VAX.  ISIC 
simulates  the  activity  and  movement 
oh  a  -tactical  battlefield,  and  models 
the  sensors’  collection  of  intelligence 
information. 

Because  the  primary  goal  of  this 
project  is  to  develop  mission  planning 
and  management  Approaches,  the 
simulation  efforts  will  focus  on  the 
mission  manager,  the  second 
component- of  the  simulation.  Figure 
3.  shows  the  architecture  for  a 
management  function  which  will  be 
implemented  into  the  simulation.  The 
figure  depicts  a  baseline  functional  flow 
for  information  generation,  ’processing, 
.and_  mission  management  in  a 
multisensor  environment.  Once  the 
information  has  been  received  by  the 
system,  its  handling  can  be  segmented 
into  three  major  categories:  single- 
sensor  processing,  multisensor 
processing,  and  mission  replanning. 
Sensor  processing  is  the  analysis  of  the 
input  data  itself  and  includes  the- 
individual  processing  functions  of  each 
sensor  and  processing  for  self 
protection.  The  mission  management 
coinponent  is  responsible  for 
multisensor  fusion  and  the  subsequent 
generation  of  cues  for  more  data  when 
the  information  is  insufficient  to  meet 
the  collection  goals.  These  cues,  along 
with  aiiy  external  requests,  update  the 
collection  objectives.  The  mission 
replanner  monitors  changes  to  the 
collection  objectives  and  dynamically 
retasks  the  mission  by,  reallocating 
sensor  utilization,  reconfiguring  the 
flight  path,  and  employing  means  for 
self-protection. 
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Figure  3.  The  functional  flow  for  information-handling  accepts  an  Initial 
plan  and  dynamically  performs  single-  and  multisensor  processing.  Mission 
management  components  are  multiscnsor  processing  and  mission  replanning. 
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System  Evaluation 

The  effectiveness  of  a  mission  is- 
determined  by  conflicting  goals-  of 
survivability  and  collection  efficiency. 
Three  techniques  for  generating 
measures  of  effectiveness  (MOEs);  have 
been.-identified  for  consideration:  (1) 
neural  networks,  (2)  an  expert  system 
that  generates  rules  from  examples, 
and  .(3)  utility  functions.  These 
MOEs  can  be  used  to  evaluate  and' 
rank  various  planning  and  management 
options. 

MOEs  corresponding  to  platform 
survivability  include  minimizing 
platform  observability  to  threats  and 
active  ands-passive  responses  to  threat 
activity.  lit  also  includes  the;  ability  to 
execute  the  mission  plan  in  the 
presence  of  nonlethal -threats,  including 
jamming  and  deception.* 

Collection  efficiency  -encompasses 
several  factors  that  relate  to  the 
operational  usefulness  of  -the 
information  gathered,  processed,  and 
transmitted.  The  components  of 
collection  efficiency  are: 

•  Number  of  desired  objects 
detected /identified 

•  Quality  /accuracy  /relevance/time- 
liness  of  information; 

•  Time  required  to  collect  desired 
information 

•  Volume  of  excess  data 
^collected. 

A  -composite  mea-sure  of 
effectiveness  corresponding  to  collection 
efficiency  attempts  to  maximize  the 
first  two-  of  these  components  while 
minimizing  the  last  two.  These 
factors  and  their  relative  importance 
depend,  upon  the  operational  scenario, 
the  mission  goals,  and  the  time 
criticality  of-  the  information,  and  ms y 
cause  conflicting  goals. 

IMPACT  SYSTEM 

The  mission  planning  function 
described  in  the  preceding  section  is 


realized  in  the-  Intelligence  Mission 
Planning  and  Collection  Tasking 
(IMPACT)  system,  a  computer-based 
decision-aid  that  converts  the  currently 
time-consuming  process  of'generating 
independent  sensor  tasking  from 
mission  directives  into  an  interactive 
session  that  allows  the-,  user  to  rapidly 
generate,  evaluate  and  modify 
candidate  plans  for  multiple  sensors. 

Along  with  the  collection  requests, 
the  planner  specifies  the  platform 
characteristics,  sensor  capabilities, 
weather  conditions  and  flight  path  way 
points.  These  are  stored  in  data 
bases  and  are  used  to  construct 
missions.  A  mission  consists  of  a 
platform,  flight  path,  sensor  suite, 
AOIs  (with  associated  objects  of 
interest)  and  mission-specific 
parameters.  The  IMPACT  system 
then  develops  optimized  sensor 
schedules  that  integrate  -and  coordinate 
the  collection  of'  information  to  satisfy 
the  user’s  requests. 

Sensors  integrated  into  the 
IMPACT  System  are  electro-optical 
(EO),  thermal  infrared  (IR),  synthetic 
aperature  radar  (SAR),  moving  target 
indicator  (MTI),,  communications 
intelligence  (COMINT),  and  electronic 
intelligence  (ELINT). 

The  IMPACT  system  is  written  in 
Ada  and  resides  on  a  VAX  M/780. 
The  graphics  i.s  based  on  the 
Graphical  Kernel  System  (GKS),  using 
a  Chromatics  CX1536  colorgraphics 
engine.  The  textual  displays  use  the 
DEC  forms  Management  System 
(FMS),  and  the  user  interface  is  the 
Lockheed  Guided  Input  (GI)  menuing 
system,  both  of  which,  run  on  a  VT- 
100  (compatible)  terminal. 

Overview  of  Functions 

The-  IMPACT  system  performs  the 
following  functions: 

•  Determines  targets  for  IMINT 
and  SIGINT  sensors  which  will 
satisfy  collection  requests. 
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Calculates  a  flight  profile 

•  Evaluates  platform  survivability 

•  Evaluates  sensor  capabilities  to 
provide  desircd^informatibn 

•  Allocates  requirements  to  the 
different  sensors 

•  Develops  cueing  rules  to  be 
used  by  the  mission  manager 

•  Creates  an  optimal  schedule  for 
the  sensors 

•  Assesses  how  well  collection 
requirements  will  be  satisfied. 

The  following  sections  concentrate 
on  analytic  approaches  to  components 
of  the  IMPACT  system. 

Target  Determination 

IMPACT  includes  a  data-  base  of 
collection  targets,  each  of  which  is 
decomposed,  or  flowed  down,  in  a 
tree  whose  lowest-level  elements  can  be 
associated  with  collection  by  a  spe¬ 
cific  sensor  type  (IMINT  dr  SIGINT). 
For  example.  Figure  4'  describes  an 
object  flowdown  for  a  SAM.  When 
information  on  a  SAM  is  requested, 
the  planning  system  for  a  multisensor 
mission  determines  what  the  specific 
tasking;  assigned,  to  each  sensor  will  be: 
e.g.,  communications  networks  and 
acquisition  radars  to  SIGINT, 
associated  vehicles  to  IMINT.  All 
leaves  on  the  tree  in  Figure  4  become 
potential  targets  when  a  high-level 
request  for  information  on  SAMs  is 
made.  The  requests  can  be  made  at- 
any  level  on  the  tree,  such  as  locating 
the  missile  system  itself  (e.g.,  SAM-x) 
or  locating  its  acquisition  radar. 

In  addition  to  the  typical 
templating  of  targets  as  illustrated 
above,  a  logical  structure  is  imposed 
on  the  targets  in  the  tree.  This 
refinement  brings  the  object  flowdowns 
to  the  -level  suited  for  consideration  by 
a  planning  function.  The  three 
relationships  between  branches  of  a 
tree  are  OR,  AND,  and  XOR 
(exclusive  or).  Simplified  examples  of 
these  relations,  which  characterize  these 


concepts  are  shown  in  Figure  5.  The 
OR  relation  is  a  typical  decomposition 
of  an  object  into  two  components,  e.g., 
a  SAM  can  be  identified  by  collecting 
its  radar  emission -with  ELINT  or  by 
imaging  a  specified  chassis  with  an 
IMINT  sensor  as  is  shown  in  Figure 
5(a).  Two  branches  are  related  by 
AND  when  the  concurrent  collection  of 
both'  components  is  required.  For 
example,  detection  of-  both  RADIOl 
and  RADI02r  is  necessary  for  the 
detection  of  the  communications 
network  in  Figure  5(b).  An  exclusive 
or  relation,  XOR,  arises  when  one 
category  of  ' targets  is  segmented  into 
two  subcategories  [Figure  5(c)]  such 
that  an  object  falls  into  one  category 
or  another,  but  not  into  both.  When 
locating  moving  vehicles,  it  is  desirable 
to  locate  both  trucks  or  tai.1.3  (as  it  is 
for  AND),  although  the  collection  can 
be  partially  satisfied  by  locating  either 
trucks  or  tanks  (as  it  is  for  OR). 

This  detail  on  the  object  flowdown 
is  necessary  to  •the-  planner  of  a 
multisensor  intelligence  mission  since 
assessing  the  probability  of  satisfying  a 
higher-level  request  depends  on  the 
logical  relation  between  the  branches 
under  the  object  requested.  In 
addition,  the  value  of  collecting  an 
element  of  information,  a  critical 
element  of  the  scheduling  criterion, 
depends  on  the  relationship  of  the 
information  to  the  requested  object. 

Sensor  Capabilities 

Target  acquisition  and  accuracy 
models  for  each  of  the  sensors  were 
developed  to  apply  specifically  to  the 
unique  needs  of  the  planning  process. 
The  models  accept  available 
environmental  data  as  input  and  are 
based  on  parameters  which  drive 
sensor  tradeoffs.  A  brief  overview  of 
each  of  the  models  developed  is  given 
below. 

Infrared  (IR1  model.  The  thermal 
infrared  acquisition  parameters  for 
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Figure  4.  This  example  tree  depicts  the  object  flowdown  for  a  SAM. 
When  a  request  for  information  ion-  a  SAM  enters  the  IMPACT  system,  the 
bottom  elements  in  the  figure  are  automatically  identified  as  "targets  of 
interest  to  the  IMINT  and  SIGINT  sensors. 


Figure  5.  Logical  relations  between  objects  in  a  flowdown  in  the  IMPACT 
system  implement  realistic  scenario  components,  (a)  Traditional  OR 
relation:  detection  of  either  element  of  information,  the  chassis  or  .radar, 
satisfies  collection  request,  (b)  AND  relation:  both  pieces  of  the 
communication  network  must  be  detected  to  verify  detection  of  the  network, 
(c)  XOR  relation:  detection  of  tanks  or  trucks  satisfies  requests  for 
information  on  vehicles  while  detection  of  all  tanks  and  trucks  satisfies  the 
request  fully.  Each  moving  vehicle  is  either  a  tank  or  a  truck,  but  not 
both. 
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detection,  classification, .  recognition,  and- 
identification  are  computed  from  two 
sets  of  calculations.  .The  first  is  the 
probability  that  the  signal-to-noise 
(S/N)  ratio  is  sufficient  for  detection, 
P(S/N),  and  is  based  on  the  radiant 
temperatures  of  the  object  and  back¬ 
ground,  sensor  performance  ^parameters, 
and  transmission  loss.  Transmission 
loss  depends  on  precipitab'le  water, 
aerosol  content,  rain,  and  clouds.  The 
second  calculation  is  .the  probability 
that  the  object  resolution  is  sufficient 
for  acquisition,  given  detection  of  the 
signal,  P(acq|S/N).  These  probabilities 
are  multiplied  for  overall  probability  of 
acquisition:  PYacij)  =  PfS/Nl  • 
P(acq|S/N).  1 

Electro-optical  (EO)  model.  The. 
EO  model  is  similar  to  the  IR  model 
in  that  probability  of  -acquisition  is 
computed  by  P(S/N)  •  P(acq[S/N). 
Signal-to-noise  is  computed  as  a 
contrast  ratio  from  the  radiances  of 
the  object  and  background,  solar 
illumination  parameters,  and 
atmospheric  transmittance.  The  latter 
term,  P(acq|S/N),  is  calculated  in  the 
same  way  as  the  corresponding  IR 
term.  For  both  P(S/N)  and 
P(acq|S/N)  computations,  the  shadow 
of  the  object  is  considered  separately 
and  has  its  own-  parameters  and 
dimensions  as  seen  by  the  sensor. 

Synthetic  Aperture  Radar  (SAR) 
Model.  The  SAR  model  is  similar  to 
the  IR  and  EO  models  in  that 
probability  of  acquisition  is  computed 
by  P(S/N)  •  P(acq|S/N).  The  latter 
^.er?F',  ^(ac<lJS/N),  is  calculated 
similarly  to  the  corresponding  IR  term, 
except  that  the  computation  of 
resolution  elements  per  target 
dimension  is  dependent  upon  range 
and  azimuth  resolution  of  the  SAR 


sensor,  as  opposed  to  angular 
resolution  for  EO  and  IR.  For 
P  (S/N)  we-  assume  that  S/N  is 
constant  for  objects  outside  a 
minimum  depression  angle  and  within 
the  maximum  range  of  the  sensor. 


Moving  Target  Indicator  (MTU 
Model.  The  MTI  detection  model 
performs  an  initial  screening  to  test 
whether  the  object’s  radial  velocity  is 
within  the  minimum  and  maximum 
endpclutter  threshold  of  the  sensor.  If 
it  passes  the  .  screening,  signal-to-noise 
and  signalrto-clutter  ratios  are 
calculated  from  the  radar  range 
equation,  radar  losses  (see  SIGINT 
model),  subclutter  visibility,  and  the 
apparent  object  cross  section.  These 
ratios  then  determine  the  overall 
probability  of  detection  of  the  object. 

In  addition  to  these  calculations  is 
the  computation  of  the  maximum  time 
between  MTI  searches  in  order  to 
maintain  coverage  except  for  wedges  of 
length  specified  by  the  user.  This 
maximum  time  is  used  to  interleave 
SAR  and  MTI  when  they  are 
performed  by  the  same  radar. 

SIGINT  Model.  The  SIGINT 
model  treats  collection  of  signals  in 
the  traditional  COMINT  and  ELINT 
ranges,  and  above.  The  detection 
model  initially  screens  a  signal  to  test 
if  its  parameters  are  within  a  sensor’s 
acquisition  capabilities,  e.g.,  rf  range, 
demodulation.  An  additional  screening 
determines  if  the  signal  position  is 
within  the  azimuth  and  elevation  fields 
of  view  of  the  sensor.  A  signal-to- 
noise  ratio  is  calculated  based  on  the 
radar  range  equation  and  additional 
transmission  losses.  The  losses  depend 
on  transmitter  frequency  and 
polarization,  terrain,  and 
atmospheric/weather  conditions.  The 
signal-to-noise  ratio  then  determines 
the  probability  of  detection. 

Accuracy  Models.  Accuracy 
models  were  developed  that  compute 
precision  parameters  which  affect  the 
mission  planning  process.  A  linear 
error  analysis  was  performed  to 
calculate  target-state  error  covariances 
and  utilities,  designed  to  integrate  these 
covariances  into  the  mission  planner. 

Covariance  analyses  were 
performed  for  target  position 
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determination  by  EO,  IR,  MTI,  SAR 
and  SIGINT  sensors  and  for  velocity 
determination  using  MTI  data. 
Significant  input  error  sources  that 
affect  sensor  tasking  that  have  been 
modeled  are  sensor  measurement 
errors,  aircraft  navigation  errors- 
(position  and-  velocity),  pointing  errors'' 
of  the  sensor  and  aircraft,  and  height 
errors  in  digital  terrain  map  data. 

The  standard  covariance  analysis 
technique  employed  permits  the 
mapping  of  the  covariance  of  errors 
encountered  in  the  sensor’s  data 
collection  process  into  a  covariance  of 
the  errors  in  the  target’s  position 
and/or  velocity.  Because  the  analysis 
is  linear,  it  permits  rapid  parametric 
study  of  the  effect  of  data  collection 
errors  on  knowledge  of  the  target  state 
and  therefore,  on  the  mission  planning 
process.  The  technique  also  allows  the 
quantification  of  accuracies  of  multiple 
sensors. 

Sensor  Scheduling 

This  section  describes  the 
algorithmic  approaches  to  detailed 
sensor  scheduling  that  were  developed. 

The  value  of  a  given  sensor 
collecting  an  element  of  intelligence  is 
computed  based  on  the  priority  of  the 
request  for  that  information,  its 
contribution  to  satisfying  the  overall 
request,  and  the  capabilities  of  other 
sensors  to  satisfy  the  request.  After 
calculating  value  factors,  the  schedules 
are  computed  sequentially,  beginning 
with  IMINT  since  it  is  more 
constrained  than  SIGINT  collection. 
IMINT  is  initially  scheduled  assuming 
that  the  SIGINT  sensor  schedule  will 
satisfy  all  SIGINT  objectives.  A 
SIGINT  schedule  is  then  computed 
and  any  required  tradeoffs  are  made, 
based  on  the  actual  IMINT  schedule. 
If  the  resulting  SIGINT  schedule  varies 
significantly  from  the  assumption, 
iterations  of  this  sequence  are 
performed  until  convergence  to  stable 


IMINT  and  SIGINT  schedules. 

IMINT  Scheduling.  The  solution 
to  IR,  EO,  and  SAR  scheduling 
specifies  where,,  on  the  ground,  the 
sensors  should  be  directed.  The 
positions  that  optimize  the  amount  of 
desirable  information  collected  are 
those  that  maximize 

v„*'/  f  f„(x.t)*P„(x,t)  dxdt 
where 

Vc  =  value  of  the  object 

f„(x,t)  =  ability  to  collect 
information 

x0(x,t)  =  distribution  of  the 
object. 

At  every  point  on  the  flight  path, 
an  optimized  combination  of  IMINT 
sensor  placement  is  computed  by  first 
discretizing  the  points  on  the  ground 
perpendicular  to  the  platform  velocity 
and  assessing  the  individual  sensor 
coverages  at  each  point.  Then  the 
ground  positions  that  maximize  the 
total  effectiveness  (according  to  the 
above  equation)  are  found  by  a  branch 
and  bound  search  or  by  enumeration. 

The  schedules  for  SAR  and  MTI 
sensors  are  interleaved  to  satisfy 
continuous  MTI  coverage,  where 
required.  The  time  period  required  to 
achieve  this  coverage  is  based  on 
geometry,  sensor  characteristics,  and 
probability  of  acquisition.  SAR  and 
MTI  usage  may  be  limited  if 
survivability  considerations  restrict  the 
platform  from  actively  radiating. 

SIGINT  Scheduling.  The  objective 
of  SIGINT  scheduling  is  to  produce  a 
frequency  scan  pattern  that  determines 
the  order  and  repetition  of  frequency 
ranges  that  the  sensor  searches 
through  as  it  listens  for  signals  of 
interest.  SIGINT  scheduling  is 
achieved  in  three  stages:  signal 
segmentation,  allocation  of  frequency 
search  slots,  and  sequencing  of  the 
frequency  bands. 

The  segmentation  process  begins 
by  calculating  a  metric,  or  distance, 
between  each  pair  of  signals  of  interest 
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(SOIs).  The  distance  is  based  on  the 
value  of  the  signals,  the  differences 
between  the  frequency  ranges  of  the 
signals,  and  between  the  requirements 
on  the  bandwidth  and'  timing  for 
intercepting  the  signals.  It  also 
reflects  the  signal  density  of-  the 
environment,  in  order  to  avoid 
unwanted  signals  as  well  as  to  provide 
work-off  time  for  dense  signals.  A 
clustering  algorithm  then  joins  nearest 
(as  defined  by  the  metric)  signals  into 
frequency  segments  that  will  be 
included  in  the  sensor  schedule. 

An  optimum  allocation  of  the  total 
number  of  (not  necessarily  unique) 
segments  allowed  in  the  sensor 
schedule  is  then  made  by  first 
calculating  a  measure  of  merit  for  each 
segment  as  a' function  of  the  number 
of  occurrences.  A  linear  program  (LP) 
then  globally  optimizes  the  number  of 
times  each  segment  occurs  within  one 
frequency  scan  cycle.  The  naiure  of 
the  constraints  imply  that  a  real¬ 
valued  LP  will  provide  integer 
solutions  to  the  problem  (a  necessary, 
constraint). 

The  third  stage,  sequencing  the 
segments  into  a  final  frequency  scan 
pattern,  maximizes  the  separation 
between  occurrences  of  the  same 
segment.  A  heuristic  approach  has 
been  developed  that  appears  well-suited 
to  finding  the  optimum  or  near¬ 
optimum  solution.  However,  an 


approach  that  combines  number  theory 
with  sin  ulated  annealing  has  been 
identified  and  will  be  investigated  in 
the  future. 

Because  each  of-the  three  stages 
depends  on  the  others,  the  implemen¬ 
tation  will  include  an  iterative  scheme 
that  converges  to  an  improved 
solution. 

CONCLUSION 

Concepts  have  been  developed  for 
the  three  components  of  an  analysis 
system  for  evaluating  multisensor 
mission  planning  and  management: 
plan  development,  system  simulation, 
and  evaluation.  Software  has  been 
developed  for  the  planning  component 
through  the  IMPACT  system. 

The  current  status  of  IMP  ACT  is 
an  operational  system  that  allows .  the 
development  of  missions,  object 
requests  and  database  elements. 
Acquisition  probabilities  for  the  .targets 
which  are  identified  as  satisfying 
requests  are  calculated,  displayed  and 
passed  to  the  scheduling  processes. 
Initial  scheduling  algorithms  have  been 
integrated  into  IMPACT  and.  are 
undergoing  testing  and  enhancement. 

Future  work  will  -continue  to 
refine  the  architecture  for  a  real-time 
mission  manager  and  will  identify 
algorithms  for  implementing  the 
architecture. 
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INTEGRATION*  AND  EXPERIMENTATION  WITH  COOPERATING  EXPERT  SYSTEMS. 
NATURAL  LAXGUAGE.raOCESSING.  AND  ALGORITHMIC  TECHNSCCES  TO 
PERFORM  CORRELATION  AND  DATA  FUSSON  IN  A  TACISCAL  ENVIRONMENT 


teBLJcijM 


Lockheed  Ass&i  Dhissoo 

OTD-IO.  ROT.  6S£3  fcrfcseo  Road.  Aestea.  Tex»,  73744 


INTRODUCTION 

Manj*  exiting  tactical  command.  control.  commuui 
cations,  ind,;.«telligmcc  centers  arc  severely  tried  b 
their  ability  to  process  aaaxnadcaHy  ***e  large  volume  of 
multiple-format,  multisowce  message  date  they  recent. 
Currently  fielded  systems  lack  the  processing  sophistica¬ 
tion  that  is  needed  to  reduce  this  voluminous  amount  of 
data  into  useful,  manageable  information.  This  shortfall  in 
processing  capability  of  current  systems  has  simulated  the 
development  of  nr*,  improved,  state-of-the-an  process¬ 
ing  techniques  that  are  more  accurate;  save  time,  and  pro¬ 
vide  the  battle  manager  with  useful,  reliable,  alternated 
tools. 


Purpose 

The  purpose  of  this  project  was  to  investigate,  de¬ 
velop,  demonstrate,  and  evaluate  the  application  of  ad¬ 
vanced  processing  techniques  (automatic  message  proc¬ 
essing,  algorithmic  correlation/data  fusion,  natural 
language  processing,  expert  systems,  and  relational  data 
base  interfaces)  to  the  domain#  of  tactical  intelligence  proc¬ 
essing  and  analysis  and  to” examine  the  timely  use  of  those 
data  by  a  tactical  battle  manager. 

Eypgtfmgfflatigq 

Five  specialized  vignettes  were  created  (by  domain 
experts)  and  added  to  a  1990s  Fulda  Gap  war  scenario. 
These  were  input  to  the  Testbed  system  (1)  to  determine 
the  effectiveness  of  the  algorithmic  amP  heuristic  ap¬ 
proaches  to  correlation/data  Fusion,  (2)  to  observe  herw 
well  the  Natural  Language  Text  Line  Processor  (NLTLP) 
and  Expert  Systems  (E$)  performed,  and  (3)  to  ascertain 
if  a  dynamically  created  and  updated  intelligence  Ordcr- 
of-Baule  (OB)  could  be  used  automatically  by  a 
Weaponeenng  (Targeting)  function  of  a  tactical  C3I  cen¬ 
ter. 


Vignette  L  Draraiw  c i  Vest  Boundaries.  TKs  vi¬ 
gnette  is  scurared  to  capcurc  the  knosfcdge  an  analyst 
appSes  when  trying  to  determbe  the  area  of  cterest  cf  a 
threat  (Svisiixi,  the  forward  Ene  of  troops,  the  boundaries 
between  forces  adjacent  to  the  dhirica.  and  the  bounda¬ 
ries  of  subordinate  regimens.  Recognition  precepts  in¬ 
dude  inferences  on  air  defense  assets,  crirical  node  loca¬ 
tion.  and  artiHexy  command  and  cocaoL 

Vignette  IL  Rrccgmiicn  cf  Arr  Defease  Artillery  As¬ 
sets.  Dus  vignette  focuses  on  tactical  deployment  cf  divi¬ 
sion  air  defense  assets;  their  electronic  signatures  and 
commumcarions  links.  Ix  deals  with  the  thought  processes 
that  an  analyst  uses  to  identify  those  assets,  locate  them, 
and  trade  them.  Recognition  precepts  include  target  acqui¬ 
sition  battery  inferences,  echelon  and  organizational  infer¬ 
ences.  nel2rive  location  inferences  fer  emitters,  and  overall 
deployment  mferences. 

Vignette  IIL  Identification  and  Location  of  Com¬ 
mand  Posts.  This  vignette  is  designed  to  activate  the 
thought  process  of  the  analyst  when  he/she  identifies,  lo¬ 
cates.  relates,  and  interprets  the  significance  of  Command 
Posts.  Recognition  precept  include  signatures,  geoloca- 
tions.  organizational  data,  interactions,  and  tactical  infer¬ 
ences. 

Vignette  IV.  Recognition,  of  Attack  Activities.  This 
vignette  provides  the  stimulus  necessary  to  activate  those 
ES  rules  that  deal  with  recognition  of  the  type  of  combat 
activity  about  to  unfold.  Recognition  precepts  include 
communications  activity,  special  equipment,  frontage  size, 
and  asset  deployment  inferences. 

Vignette  V.  Enhancement  of  Algorithmic  Correla¬ 
tion.  This  vignette  is  designed  to  stimulate  the  refinement, 
assessment,  and  accuracy  of  OB  Database  files  of  emitters 
and  units.  It  permits  the  ES,  which  contains  multiple  hy¬ 
potheses  about  emitters  or  units,  to  recorrelate  question 
able  decisions  made  by  the  algorithmic  correlator. 
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Figure  1 .  Integrated  Testbed  Architecture 


SYSTEM  ARCHITECT  IRE 

The  overall  system  (C3I  Testbed)  is  a  fully  concur¬ 
rent,  multiuser  information  processing  system  where  proc¬ 
essing  is  divided  Into  functional  blocks  with  well-defined 
interfaces  between  modules.  The  Testbed  functional  archi¬ 
tecture  (Figure  1)  permit?  experimentation  and  demon¬ 
stration  of  integrated  technologies  as  applied  to  the  intelli¬ 
gence  and  weaponeering  functions  of  a  tactical  C31  center. 


Fully  formatted  JINTACCS  messages  are  input  to 
the  Testbed  by  an  Airland  Battle  simulator,  which  uses  a 
1990s  Fulda  Gap  war  scenario  (enemy  events  and  OB) 
and  a  variety  of  airborne  sensor  models.  The  Testbed 
automatically  parses  (decodes)  and  filters  the  JINTACCS 
messages  according  to  tables  that  are  set  and  easily 
changed  by  the  Intelligence  Analyst.  Two  algorithmic  cor¬ 
relators  (statistical  and  figure-of-merit  based)  perform 
automatically  to  read  the  message  data  anu  to  create  and 
update  emitter  files  within  an  OB  Database. 

A  Data  Fusion  function  examines  the  emitter  files 
created  by  the  correlators,  adds  the  information  produced 
by  the  artificial  intelligence  (AI)  techniques,  then  com¬ 
bines  the  data  to  form  units  and  weapons  systems  \yithin 
the  OB  that  represents  the  most  complete  information 
about  entities  on  she  battlefield. 
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The  AI  techniques  include  the  NLTLP  and  distrib¬ 
uted  cooperating  ES  The  NLTLP  reads  and  interprets  the 
English  language  text  lines  of  the  JINTACCS  messages, 
reformats  the  data,  and  passes  the  results  to  3ie  ES  The 
ES  examines  the  OB  Database  and  the  NLTLP  output  to 
determine  the  presence  of  certain  types  of  units  on  the 
battlefield,  their  geographic  operating  boundaries  and  ac¬ 
tivity  state.  Additionally,  the  ES  recognizes  and  corrects 
certain  types  of  errors  not  handled  bythe  algorithmic  cor¬ 
relators. 

The  Weaponeenng/Targeting  function  automatically 
accesses  the  intelligence  OB  Database,  compiles  target 
lists,  and  calculates  target-weapon  pairing  solution*  based 
on  a  global  optimization  algorithm 

An  imagery  processing  capability  is  m  the  planning 
stages  at  this  time. 

An  Air  Task  Order  (ATO)  generation  capability  is 
in  the  detelopment  stage. 

The  system  architecture  permits  a  wide  range  of  ex 
perimentation  possibilities  for  the  testing  of  spe  ifiw  mod 
ules,  algorithms,  or  fully  integrated  components 


Figure  2.  Hardware/Software  Modules  and  Interfaces 


HardsasgsISais.  Mansmafe 

The  approach  used  to  implement  the  C3I  Testbed 
'System  is  characterized  as  a  balanced  integration  of  con¬ 
ventional  processing  technology  with  AI  processing  tech¬ 
niques  in  a  distributed  environment.  Each  technology  is 
applied  to  the  intelligence  analysis  and  targeting  problems 
in  the  manner  deemed  most  appropriate.  This  approach 
does  not  attempt  a  total  AI  solution  nor  does  it  attempt  to 
force  AI  techniques  on  aspects  of  the  problem  that  have 
already  been  solved  by  algorithmic  methods.  Figure  2 
shows  the  hardware  connectivity  and  the  software  major 
module  integration  of  conventional  algorithmic  processes 
with  AI  heuristic  processes. 

l&irihittfljfrpttssinc .  Fmcrfares 

This  project  emphasized  the  use  of  distributed  proc¬ 
essing  techniques  as  a  way  to  achieve  fast  and  useful  in¬ 
terfaces  between  the  various  workstations  and  processes 
These  interfaces  permit  the  ES,  NLTLP,  algorithmic  cor¬ 
relator  analyst  displays,  Weaponeer,  and  data  base  man¬ 
agement  functions  all  to  reside  on  separate  processors,  yet 
be  accessible  by  any.  Two  primary  classes  of  interfaces 
are  used:  RS232  software  interface  and  TCP/IP  software 
In  addition  to  vendor-developed  TCP/IP  system  software 
for  specific  machines,  we  developed  a  remote  procedure- 
call  applications  layer  for  interface  between  the  Apollo 
and  Symbolics  machines. 


Software  Tools  and  Programming  languages 

The  Testbed  System  uses  a  variety  of  software  tech¬ 
niques  to  make  the  system  work.  These  are  summarized 
as  follows: 

Simulator:  Ada,  Vax  11/780 
Expert  Systems:  Common  Lisp,  Automatic  Rea¬ 
soning  Tool  (ART)  ES  Shell,  Symbolics.  ART  was  chosen 
for  us  graphics,  rule  definition  and  compilation,  confi¬ 
dence  levels,  and  viewpoints  (blackboard)  capabilities 

Natural  Language.  Common  Lisp,  Language  Craft 
NLP  Shell,  VAX,  and  Symbolics.  Language  Craft  was  cho¬ 
sen  because  it  is  a  general-purpose,  natural-language 
processing  tool,  it  permits  the  developer  to  concentrate  on 
vocabulary'  and  semantics  rather  than  mechanics  of  pars¬ 
ing  and  semantic  interpretation,  it  has  a  well-defined  in¬ 
terface  to  Common  Lisp,  and  runs  on  both  VAX  and  Sym¬ 
bolics. 

Map  Graphics:  C,  Apollo  (also  runs  on  Silicon 
Graphics,  Sun,  MicroVAX)  Digital  map  graphics  display 
technology  (SofiCopy  Map  Display  System)  contains  DMA 
data  (DTED,  DFAD)  and  World  Data  Base  II  and  has  user 
friendly  software  that  permits  extensive  map  manipulation 
and  control. 

User  Interface  Manager.  C,  Apollo  (also  runs  on 
Silicon  Graphics,  Sun,  MicroVAX)  System  permits  crea¬ 
tion/change  of  displays  in  minutes  by  a  nonprogrammer 
Correlators:  FORTRAN,  Apollo 
Data  Base:  IDL  and  Progress  Relational  DB  Ac¬ 
cess,  Britton-Lee. 

Message  Processing:  FORTRAN,  Apollo. 


AljOORTTWXflC  CORRELATORS 

Both  thq  Tactical  Electronics  Intelligence 
(TACEUNT)  *§ad  the  Taetica)  Report  (TACREP)  correla¬ 
tion  algorithms  function  auMcnaacally  within  the  Testbed 
message-handling  architecture.  Each  has  a  set  of  special¬ 
ized  interactive  tools  that  permit  an  analyst  to  control 
automatic  correlation  variables:  review,  edit,  or  change  the 
results  of  automatic  correlation  and  make  manual  correla¬ 
tions. 

TACEUNT  CORRELATOR 

The  TACEUNT  Correlator  performs  the  'following 
primai)'  functions: 

?  Attempts  to  correlate  signal-of-interest  messages  to 
listing  emitter  OB  Data  Base  files  automatically 

•  Updates  emitter- OB  D3ta  Base,  files  automatically 

•  Sends  graphic  updates  to  the  .map  graphics  display 
(analyst  workstation). 

The  TACEUNT  algorithm  is  based  on  a  scoring  and 
weighting  system  that  calculates  the  statistical  differences 
between"  the  emitter  parameters  contained  in  a  message 
and  the  parameters  of  emitters  held  in  the  data  base  that 
fall  within  a  tolerance  gate  set  by  the  intelligence  analyst. 
Those  OB  Data  Base  emitters  that  fall  within  the  tolerance 
gate  are  considered  to  be  r^/onable  candidates  for  corre¬ 
lation.  Each  parameter  of  ^ach  emitter  is  scored  and 
weighted  (by  any  criteria  as  determined  by  the: analyst, 
e.g..  Sensor  measurement,  time  delay,  etc.).  Next,  each 
-candidate  is  tested  for  geopositional  feasibilityvand  scored. 
Total  scores  arc  then  calculated  for  each  candidate  versus 
the  message  emitter.  Finally,  the  algorithm  compares 
each  candidate.  If  a  single  best  candidate  (heuristtcally  de¬ 
termined  by  the  analyst  and  input  to  the' algorithm)  is 
identified,  a  correlation  is  made.  Otherwise,  candidates 
are  ranked  and  filed  in  the  OB  Data  Base  as  potential  (am¬ 
biguous)  correlations.  Each  ambiguous  emitter  is  reconsid¬ 
ered  as  new  messages  are  input  to  the  TACEUNT  cor¬ 
relator. 


TACREP  CORRELATOR 

The  TACREP  correlator  uses  parametric  association 
a^d  attribute-matching  techniques  to  correlate.- message 
data  with  emitters  held  in  the  OB  Data  Base.  Automatic 
correlation  occurs  when  certain  combinations  of  data  ele¬ 
ments  in  the  message  match  exactly  or  within  tolerances 
with  the'data  elements  contained  in  the  data  base.  If  a 
imique  identifier  is  present  in  both  the  message  and  the 
OB  Data  Base,  if  the  candidate 'meets  a  geopositional 
feasibility  test,  and  if  the  candidate  meets  a  scoring 
threshold  (set  by  the  .  analyst),  a  correlation  is  made. 
Those  attempts  at  correlation  that  do  not  meet  the  mini¬ 
mum  score  result  in  the  message  data  being  returned  to  a 
message  file  for  future  attempts  at  correlation.  The 
TACREP  correlator  jloes  not  create  ambiguities. 


DATA  FUSION 

The  Data  Fusion  function  uses  the  emitter  OB  Data 
Base  files,  previously  created  by  the  TACEUNT  and 
TACREP  correlators,  to  create  and  maintain  weapons  sys¬ 
tems  and  unis  in  the  OB.  It  also  uses  the  d3ta  provided  by 
the  ES  and  the  analyst  workstation. 

D312  Fusion  performs  automatically,  making  infers 
cnees  abwt  the  battlefield.  At  the  first  level,  inferences 
proceed  directly  from  a  single  fact,  e.g.,  the  existence  cf  a 
weapons  system  can  be  inferred  directly  from  the  exis¬ 
tence  of  certain  emitters.  Some  unit  types  can  also  be  in¬ 
ferred  in  this  manner.  A  second  level  of  inferences  occur 
when  inferences  are  made  based  on  several  facts  that  do 
not  imply -anything  separately,  but  when  considered  to¬ 
gether  imply  somethirig  about  ihe  OB.  For  example,  the 
existence  of  several  different  entities,  located  within  a  cer¬ 
tain  distance  of  each  other,  or  the  determination  of  a  par¬ 
ent-child  relationship  between  two. or  more  entities,. can 
imply  much  more  than  the  existence  of  a  single  entity. 

The  Data  Fusion  function  performs  the  following 
functions: 

•-  Groups  entities  into  systems 

•  Determines  battlefield  positionsfor  systems  based  on 
locations'^/  component  pans 

.•  Deduces  the  presence  of  units  from  the  deployment  of 
specialized  equipment 

•  Assigns  systems  and  equipment  to  the  controlling  unit 

•  Determines  battlefield  unit  positions 

•  Determines  unit  organizational  hierarchy. 

The  Testbed  System  uses  tightly  coupled  OB  Data 
Base,  Correlation,  and  Data  Fusion  functional  modules  as 
a  complete  OB  management  system.  Each  of  the  auto¬ 
matic  processes  is  responsible  for  maintaining  its  specialty 
data  in  the  central  data  base  and  on  the  map  display  AH 
changes  to  the  OB,  whether  initiated  by  the  analyst,  ES, 
Data  Fusion,  or  Correlator,  mairtain  the  integrity  of  the 
OB  Data  Base.  For  example,  the  parametric  details  of 
TACEUNT  correlation  may  be  unknowr.  by  Dot?  Fusion, 
but  if  the  emitter  had  moved,  the. communication  cf  that 
fact  to  Data  Fusion  would  cause  the  Data  .Fusion  algo¬ 
rithm  to  recalculate -the  position  for  the  unit  contain,  lig 
that  emitter. 
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Figure  3.  AI  Techniques  Integrated  with  Testbed  System 


ABXPQAL  JECHyiQVK 

Seven  component  subsystems  using  AI  techniques 
were  integrated  into  the  Testbed  System.  These  compo¬ 
nents  arc  organized  as  illustrated  in  Figure  3.  The  ES  in¬ 
cludes  three  cooperating  subexperts  and  two  global  sup¬ 
port  functions. 

Correlation  and  AssiKiationJEnhaPcemem. 

The  Correlation.  and  Association  Enhancement 
(CAE)  Subexpert  looks  for  constraint  violations  in  the  out¬ 
put  of  the  algorithmic  correlators,  directs*  the  correlators 
to  recorrelate  the  associated  messages,  and  communicates 
with  the  correlator  in  a  manner  functionally  similar  to  that 
of  the.human  analyst.  The  CAE  works  in  conjunction  with 
the  FRT  to  perform  constraint-abased  correlation  and  data 
fusion.  Constraint-based  correlation  i«  performed  u$;ng 
constraints  along  pne  or.  more  of  several  different  problem 
space  dimensions  (or  classes).  Parametric,  Geopositional, 
Doctrinal,  Terrain,  Activity,  and  Multisource.  CAE  is 
closely  coupled  with  the  algorithmic  correlator  and  has  a 
feedback  loop  with  it  to  pass  information  on  recorrelation 
and  change  of  OB  Data  Base. 

Perce  $mmre,Brcgsnnton  and  Tracing 

,  The  Force’  Structure  Recognition  and  Tracking 
(FRT)  subexpert  accomplishes  the  following:  hypothesizes 
force  structures  from  the  association  of  emitter  reports; 
determines  the  types  of. units  represented  using  doctrinal, 
table  of  organization  arid  equipment  (TO&E),  and  analyti¬ 
cal  knowledge,  Tracks  the  movement  and  confidence  asso¬ 
ciated  with  the  force  structures  and  units.  The  FRT  formu¬ 
lates  and  compares  the  positional  clusters  formed  by 
individual  emitters,  determines  subclusters,  and  examines 
the  relationships- between  clusters  to  form  an  opinion  of 
the  existence  of  certain  types  of  units.  This  subexpert  also 
compares  the  total  OB  known  to  exist  within  an  area  of 
interest  to  doctrinal  data  to  determine  if  there  is  agree¬ 
ment  between  the  perceived  and  doctrinal  OB.  If  discrep¬ 
ancies  are  found,  they  are  reported  to  the  analyst.  In  addi¬ 
tion,  the  FRT  performs  specific  unit  identification, 
including  echelon  and  subordination. 


Truth  Maintenance 

The  Truth  Maintenance  Facility  maintains  the  inter¬ 
relationships  between  objects  and  permits  the  system  to 
backtrack  whenever  a  given  object  characteristic  or  occur¬ 
rence  is  found  to  be  in  error  or  is  contradicted.  These 
interrelationships  are  derived  from  the  endorsements  of 
each  object  maintained  for  reasoning  Ainder  uncertainty 
and  allow  for  chaining  from  one  object  and  fact  depend¬ 
ency  to  another. 


The  Explanation  Facility  provides  an  English-like 
explanation  of  the  reasoning  process  behind  each  decision 
made  by  the  three  subexperts.  This  facility  responds  to 
analyst  requests  for  explanation  regarding  any  emitter, 
unit,  or  activity  indicator.  The  explanations  are  derived 
from  the  endorsements  of  each  object  maintained  for  rea¬ 
soning  under  uncertainty  and  include  an  audit  trail  of  the 
inferences  performed  rather  than  just  a  list  of  rule  names. 
Each  rule  included  within  any  of  the  ES  subexperts  is 
coded  with  a  brief  English-language  exolanation  of  the 
rule  function,  and  when  a  rule'  fires,  an  endorsement  is 
created  for  the  object  of  interest  and  is  stored  with  the 
object.  By  using  the  accumulated  endorsements  as  the  ba¬ 
sis  for  explanations,  a  separate  audit  trail  does  not  have  to 
be  maintained  and  overall  system  consistency  is  ensured 

Activity  Monitoring 

The  Activity  Monitoring  (AM)  subexpert  recognizes 
activity  indicators  associated  with  the  units  in  the  OB,  ac¬ 
cumulates  warning  signs,  and  posts  alerts  to  the  analyst 
for  indicators  of  attack.  It  uses  the  output  of  the  Natural 
Language  Processor  and  the  output  of  the  algomhmic  toi- 
relators.  Activity  indicators  are  accumulated  by  activity 
category  and  by  unit  type  involved.  The  AM  uses  a  hierar¬ 
chical  structure  of  indicators,  warnings,  and  alerts  so  that 
any  type  of  activity  can  be  included.  If  multiple  indicaiois 
occur  fui  a  given  activity  or  unit  type,  a  warning,  is  pro¬ 
vided  to  the  analyst.  If  multiple  warning  are  created  re¬ 
garding  a  particular  activity  type,  an  alert  is  created  and 
issued  to  the  analyst. 
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Figure  4.  Natural  Language  Functlons'Integrated  with  Testbed  S)$tem 
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The  NLTLP  was  designed  to  combat  the  difficulties 
of  interpreting  free  text  and  creating  a  usable  form  of  data 
for  the  ES.  The  most  important  goals  were  to  examine  the 
techniques  needed  for  processing  free  text  and  to  create 
an  automatic  process  to  accomplish  this.  The  techniques 
explored  were  the  caseframe  grammar  used,  along  with 
discourse  analysis  techniques  such  as  using  .a- context 
mechanism,  to  complete  missing  values.  These  techniques 
were  written  in  Common  Lisp,  along  with  the  grammar 
written  for  use  with  the  Language  Craft  parser.  The  tech¬ 
niques  were  initially  implemented  as  a  automatic  process, 
however,  an  entirely  automatic  process  does  not  appear  to 
be  the  best  solution  because  ambiguous  (multiple)  parses 
car.  occur  unless  the  grammar  is  constructed  very  care¬ 
fully.  Ambiguous  parses  can  be  presented  to  the  analyst  to 
resolve,  saving  computer  time.  The  integration  of  the 
NLTLP  within  the  Testbed  System  is  shown  in  Figure  4 

NLTLP-Hu  nc.fi  ons  and  _Desi  cn 

The  Natural  Language  Text  Line  Processor  accepts 
the  fixed  fields  and  free-form  text  lines  of  both 
TACELINT  and  TACREP  messages,  parses  the  frec-form 
text,  and  interprets  the  meaning  of  this  text  in  the  context 
of  the  fixed  fields  and  other  text  lines.  The  results  of  this 
processing  are  records  that  can  be  processed  and  inter¬ 
preted  by  the  ES.  The  NLTLP  includes  preprocessing 
functions  to  handle  abbreviations,  acronyms,  and  simple 
misspellings  It  handles  a  variety  of  activity  types,  verbs, 
nouns,  and  modifiers.  It  can  distinguish  tenses  and  can 
correctly  interpret  time  and  place  information  The 
NLTLP  uses  a  caseframe  grammar  approach  to  parsing, 
and  semantic  interpretation  makes  the  NLTLP  easy  to  ex¬ 
tend  to  new  reports,  activities,  objects,  and  modifiers. 


Preprocessing  of  Free  Text 

Preprocessing  is  done  on  text  lines  before  they  arc 

parsed  by  grammar.  Several  preprocessing  steps  arc  used 

•  Message  handling  with  and  without  |ext 

•  Breakdown  of  multiple  (ext  lines  into  individual  text 
lines 

•  Preparation  of  each  text  line  (acronym  expansion, 
separation  of  numbers  and  characters  in  time  and  lo¬ 
cation  fields,  addition  of  case  markers  to  enhance 
parsing,  and  handling  of  abbreviations  not  allowed  by 
Language  Craft. 


The  grammar  used  for  the  NLTLP  processing  is  the 
caseframe  grammar  that  is  used  with  the  Language  Craft 
parser  (Plume),  consisting  of  the  four  main  components 
caseframes,  rewrite  rules,  irregular  morphology  rules,  and 
abbreviation  rules. 

PoSTOttSSint; 

Postprocessing  rules  operate  on  the  instantiated 
caseframe  generated  by  the  parsing  of  a  text  line  Three 
forms  of  postprocessing  rules  occur 

•  Mapper  Rules.  These  are  used  to  transform  the 
caseframe  instances  output  by  the  parser  into 
caseframes  for  input  to  the  LlSPifier  rules 

•  LlSPifier  Rules  These  are  used  to  convert  mapper 
output  into  LISP  forms  suitable  for  a  particular  appli¬ 
cation. 

•  Context  Resolution  Rules  A  context  schema  is  cre¬ 
ated  from  analyzing  each  text  line,  and  if  a  resultant 
schema  is  missing  information,  previous  schemas  are 
checked  to  fill  the  missing  values 
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Figure  5.  Natural  Language'Texr  Line  Processor  Functional  Modules 


Figure  5  provides  an  overview  of-the  NLTLP  func¬ 
tional  flow. 

ALTcchnioues  Control  Mechanisms. 

To  achieve  a  balance  Between  control  (reduce  the 
time  spent  responding  to  a  particular  input)  and  flexibility 
(spontaneous  handling  of  expected  and  unexpected  in¬ 
puts),  the  ES  design  consists  of  the  following:  cooperating 
subexperts,  use  of  an  endorsement  method  for  reasoning 
under  uncertainty,  and  a  mixed-inhiative  user  interaction. 

•  Cooperating  Subexpens:  Primary  control  was  estab¬ 
lished  in  the  FRT  subexpert  Because  algorithmic  cor¬ 
relators  have  already  processed  much  of  the  data. 
However,  the  system  uses  trigger  events  to  assist  in 
transitions  between' subexperts  so  that  certain  events  ' 
cause  primary  control  to  switch  to  the  .  appropriate 
subexpen. 

•  Endorsement  Method.  This  method  captures  endorse¬ 
ments  or  votes  for  or  against  a  particular  conclusion, 
which  is  then  reviewed,  summarized^  and  assigned  a 
confidence  level.  As  votes  are  collected,  a  record  of 
the  support  for  the  typing  of  each  object  is  kept,  and 
the  evidence  is  increased  or  decreased  as  appropriate. 
Endorsements  also  serve  as  a  basis  for  constructing 
explanations  of  system  decisions  arid  for  truth  mainte¬ 
nance. 

•  Mixed-Initiative  User  I/A:  This  approach  to  ES  con¬ 
trol  allows  both  the  analyst  end  the  ES  to  direct  the 
flow  of  processing. 


Relational  data  bases  provide  an  especially  flexible 
organization  system  for  storing  large  volumes  of  data  and 
data  relationships  in  tabular  form.  Interfaces  between  rela¬ 
tional  data  base  management  systems  and  Al  systems,  like 
the  NLTLP  and  ES,  permit  the  latter  to  retrieve  data  and 
information  automatically  and  selectively  and  store  the  re¬ 
sults  of  the  processing- for  later 'use  by  both  systems  and 
operators. 

The  relational  data  base  interface  allowed  the 
NLTLP  and  ES  to  share  a  common  relational  data  base  for 
the  OB  with  the  algorithmic  correlators  and  the  analyst 
interface.  It  allows  the  ES  to  submit  data  base  queries 
autonomously  and  update  requests  to  the  management 
^system. 

AnfefcMsfihiOfc  Interfile 

The. project- demonstrated  the. use  and  integration  of 
both'AI  and  conventional  technologies  for  the  analyst-ma¬ 
chine  interface.  The  interface  includes  a  menu-based 
query-and-command,  interactive^map  graphics,  and  an 
ES  mom  tori  ng-and-control  function.  For  the  ES,  the  ana¬ 
lyst  can  ask  for  descriptions  of  objects  in  the  OB  and  ex¬ 
planations  for  their  existence  The  correlation  analyst  can 
query,  move,  change,  arid  ask  for  unit  hierarchy  or 
parametric  data,  uncertainty  ellipses,  unit  or  emitter  histo¬ 
ries*  as  well  as  perform  other  analytic  functions. 
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The  Testbed  System  intelligence  analysis  functions 
were 'integrated  with  a  battle  management  function,  target¬ 
ing  and  weapo/ieering  This  interface  permits  the  battle 
management  functions  to  access  a  dynamically  created 
and  updated  intelligence  OB,  as  h  is  happening.  During 
system  tests,  we  were  able  to.- observe  the  input  of  mes¬ 
sage-containing  emitter  data  from  the  simulator  into  the 
Testbed  Parser  and  Filter,  Correlator,  Data  Fusion, 
through  the  NLTLP  and  ES,  into  the  OB  Data  Base,  and 
finally,  watch  the  data  appear  as  a  target  at  the 
weaponeering/targeting  analyst  display. 


The  Target-Weapon  Pairing  (T-WP)  algorithms  de¬ 
termine  the  optimum  allocation  of  weapons  systems  on 
alert  (or  with  short  response  times)  to  an  array  of  targets 
that  have  been  selected,  Thfc  allocation  is  based  on  the 
OB,  weapons  information  from  an  Assets  Data  Base,  the 
Single-Sortie  Probability  of  Damage  from  the  Joint  Muni¬ 
tions  Effectiveness  Manual  (JMEM).  and  the  analyst’s  in¬ 
put  of  weights  td'be  given  for  such  factors  as  attrition, 
weapon  system  cost,  ar.d  scarcity.  The  T-WP  algorithms 
pair  available  weapon  resources  to  a  list  of  prioritized  tar¬ 
gets,  based  on  a  criteria  function,  the  number  of  weapons 
available,  and  the  number  of  weapons  needed  to  attack  at 
the  desired  level  of  effectiveness.  The  vveapons/targeteer 
analyst  can  chose  targets  on  the  OB  map  display  using  the 
cursor  or  by  inputting  target  identifiers.  Solutions  are 
automatically  generated  and  displayed.  They  may  be 
saved  while  new  criteria  are  entered  for  a  different  solu¬ 
tion,  compared,  and  either  rejected  or  accepted.  The  algo¬ 
rithm  handles  up  to  25  targets  simultaneously  to  pair  up 
with  12  weapons  systems  standard  conventional  loads. 


The  scheduling  algorithm  determines  the  best  way 
to  load  and  assign  weapon  systems  to  all  targets  m  a  given 
Air  Task  Order  (ATO)  generation  cycle.  It  compares  avail¬ 
able  weapon  assets  with  a  target  list  based  on  multiple 
sorties  per  weapon  and  the  cost  effectiveness  of  all  target- 
weapon  pairs. 


The  algorithm  maximizes  the  sum  of  the  cost-effective¬ 
ness  values  for  the  target-weapon  pairs  subject  to  the  fol¬ 
lowing  constraints  number  of  available  weapons,  the 
minimum  time  from  take-off  for  an  aircraft  from  a  given 
weapon  set,  number  of  sorties  an  aircraft  can  accomplish 
in  one  day  and  its  cycle  time,  windows- for  each  target, 
and  weather  for  both  the  aircraft  home  base  and  the  tar¬ 
get.  The  approach  avoids  the  trap  of  assigning  the  best 
weapons  to  the  highest  priority  targets  by  detecting 
anomalies  or  special  cases  in  the  total  targct-weapon-time 
matrix  for  the  scheduling  period. 


JMEM  methodology,  along  with  use>  functions  that 
permit  problem  specification  and  standalone  execution  ol 
the  algorithm,  were  implemented  in  the  system  The 
JMEM'algorjthm  calculates  the  weapon-effectiveness  esti¬ 
mates  of  the  single-sortie  probability  of  damage  and  num¬ 
ber  of  weapons  needed  to  achieve  the  probability  of  dam¬ 
age  for  a  given  target  type  and  weapon  combination. 


Undei  development  within  the  Battle  Management 
laboratory  is  a  rapid  prototyping  and  evaluation  ol  dcu- 
sion-aids  that  would  furthei  automate  the  battle  manage¬ 
ment  functions  of  tactical  C31  centers  of  the  future  Figure 
6  illustrates  a  part  of  the  decision-aiding  necessary  to  ad¬ 
vance  the  automation  of  this  cycle. 
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Many  existing  tactical  command,  control,  communi¬ 
cations,  and  intelligence  centers  are  severely  limited  in 
their  ability  to  process  the  large  volume  of  multiple-for¬ 
mat,  multisource  message  data'  automatically.  Currently 
fielded  systems"  lack  the  processing  sophistication  that  is 
needed  to  reduce  this  great  quantity  of  data  into  useful, 
•manageable  information.  This  shortfall  in  processing  ca¬ 
pability  of  current  systems  has  stimulated  the  development 
of  hew,  improved,  state-of-the-art  processing  techniques 
that  are  more  accurate,  save  time,  and  provide  the  battle 
manager  with  useful,  reliable,  automated  tools. 

The  most  significant  operational  conclusion  regard¬ 
ing  the  application  of  artificial  intelligence  technologies  to 
tactical  intelligence  processing  and  analysis  is  that  these 
technologies,  including  the  ES  and  NLTLP,  can  signifi¬ 
cantly  enhance  the  support  provided  to  the  analyst  over, 
conventional  methods  if  they  are  applied  to  the  more  ab¬ 
stract  and  less  quantitative  portions  of  the  problem  do¬ 
main.  These  capabilities  complement  proven  conventional 
and  algorithmic  approaches  and  provide  an  intelligent  as¬ 
sistant  for  the  analyst"  in  the  areas  of  correlation  enhance¬ 
ment.  text  processing,  and  intelligent  data  base  interface. 
The  NLTLP  and  ES  provide  a  faster  method  of  handling 
high  volumes  of  messages  because  they  can  reason  about 
incomplete  and  uncertain  data,  provide  inferences  at  mul¬ 
tiple  levels,  and  maintain  multiple  contexts. 

The  Testbed  System,  demonstrated  that  analyst  ^ex¬ 
pertise  can  be  embedded  in  a  system.  The  ES  knowledge 
base  includes  the  doctrinal,  TO&E,  parameter  data,  and_ 
analytical  expertise  used  by  the  analyst  to  process  tactical 
intelligence  reports.  The  ES  inference  engine  uses  this 
knowledge  to  perform  analyses,  reason  about  uncertain 
data,  and  present  (display)  the  current  tactical  situation. 
The  NLTLP  knowledge  base  includes  the  grammar,  vo¬ 
cabulary,  and  contextual  associations  that  must  be  under¬ 
stood  by  an  analyst  to  interpret  these  reports. 

The  use-of  a  relational  data  base  interface  signifi¬ 
cantly  reduced  the  analyst  workload  by  automatically  re¬ 
trieving  and  updating  data  and  information  from  data 
bases  for  use  by  the  ES  and  NLTLP. 

Natural  language  processing  can  extract  useful  in¬ 
formation  from  free-form  text,  associate  this  information 
with  the  formatted  data  (report  context),  and  format  it  for 
use  by  the  ES.  The  NLTLP  processes  messages  much 
more  rapidly  and  accurately  than  human  analysts.  The  use 
oLcaseframes  to  support  natural  language  processing  per¬ 
mits  smooth  integration  of  an  NLTLP  and  ES. 


Advanced  and  conventional  techniques  can  be  inter¬ 
faced,  can  use  a  common  analyst-machine  interface,  and 
can  be  implemented  in  a- distributed  environment  that 
shares  a  common  data  base. 

The  development  of  customized  knowledge  bases, 
expert  systems,  natural  language  processors,  and  inter¬ 
faces  for  each  user  or  for  each  tactical  unit  is  not  neces¬ 
sary.  A  generic  model  of  knowledge  and  metaknowledge 
can  be  developed  that  will  serve  as  a  basis  for  supporting 
the  majority  of  tactical  analyssTneeds. 

Most  specific  knowledge  in  a  knowledge  base  can  be 
stored  in.  frame  structures  and  general  rules  rather  than 
using  specific”  rules.  The  frame,  a  flexible  record-like 
structure  with  slots  (fields),  relationships,  and  attached 
procedures,  can  be  used  to  represent  most  of  the  specific 
knowledge  in  a  knowledge  base,,  and  general  rules  can  be 
coded  that  reference  entire  classes  of  patterns  rather  than 
very  specific  patterns  and  data  values. 

A  single  deterministic  method  (endorsement)  can  be 
used  as  the  basis  for  reasoning  under  uncertainty,  truth 
maintenance,  and  explanation. 

The  Testbed  System  demonstrates  a  prototype  of  in¬ 
teroperability  and  integration  of  intelligence  analysis 
(preparation  of  the  OB)  and  weaponeering  (targeting) 
functions  of  a  tactical  C3I  center.  This  prototype  indicates 
a  significant  time  savings  m  generating  targeting  solutions 
through  the  use  of  an  automatic  optimization  scheme  and 
the  use  of  direct  interface  with  the  intelligence  OB  Data¬ 
base. 


Future  research  issues  concerning  the  use  of  ad¬ 
vanced  processing  techniques  for  tactical  C3I  centers  can 

be  outlined  as  follows: 

•  Automated  knowledge  acquisition  and  knowledge  base 
extensibility,  particularly  for  field  use 

•  Cooperating  distributed  ES 

•  Extended  natural  language  processing  with  human  in¬ 
terfaces  and  contextual  explanation  generation 

•  Sensor-cueing  based  on  situation  assessment  stem¬ 
ming  from  ES  such  as  the  Activity  Monitoring  and 
Force  Recognition  and  Tracking 

•  Terrain-based  geofeasibility  extension  to  enhance  cor¬ 
relation  accuracy 

•  Extended  automation  and  netting  of  Battle  Manage¬ 
ment  functions  with  intelligence  functions. 
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1.  IKTROMICTIOM 

This  paper  describes  some  key  taethodolo- 
glcal  aspects  of  an  assessment  effort  that 
looked  at  the  entire  DoD  C3  program.  The- intent 
of  the  effort  Is  to  develop  a  summarising 
document  that  articulates  key  issues  and 
fiscally  constrained  choices  regarding 
investment  strategies  in  C3  improvement.  The 
audience  for  this  document  is  acquisition 
decision  makers  at  the  highest  levels  in  DoD. 
Because  of  the  lead  times  needed  to  develop, 
implement,  and  field  technologically  complex 
systems,  a  time  frame-of  15.years.is  tfsed  in 
this  work* 

The  issue  is  framed  3s  "What  can  the 
overall  DoD  program  afford?"  Any  concept  of‘ 
affordability  has  three  elements:  a  fiscal 
constraint,  a  shopping  list,  and  price  tags  on 
each  element  in  the  shopping  list.  Each  of 
tnese  three  elements  entails  a  separate  type  of 
analysis:  funding  analysis,  capability/ 
analysis,  and  cost  analysis,  respectively. 

The  purpose  of  funding  analysis  is  to 
develop  a  set  of  estimates  of  the  funds  that 
will  be  available  over  the  next  15  years  to 
invest  in  C3  ioproveaemts,  More  precisely,  the 
analysis  develops  a  15  year  projection  of 
current  trends  and  then  examines  the  effect  of 
varying  (positive  and  negative)  growth  rates  on 
this  trend.  If  the  boundaries  of  C3  are  defined 
fairly  broadly  to  include  a  large  portion  of 
intelligence,  than  current  annual  expenditure  is 
about  $4$  billion.  The  trend  as  of  FY-8?  is  for 
about  a  3Z  annual  growth  after  inflation.  This 
figure  needs  to  be  further  broken  down  into  four 
categories  each  of  which  should  be  managed 
differently: 

(1)  Over  half  of  this  money  is  spent  to 
operate,  maintain,  and  replenish  the 
existing  C3  infrastructure.  This 
includes  procurement  to  replace 
obsolete,  non-supportable,  or 
destroyed  systems  with  new  equipment 
having  comparable  functionality.  The 
issues  addressed  in  managing  these 
dollars  focus  on  cost-effectiveness. 


(2)  A  second  category  is  basic  research 
and  long  leaU  developmental  research. 
This. involves  over  a  hundred  program 
elements  in  C3  alone,  each  of  which  is 
a  few  million  dollars.  These  should 
not  be  closely  managed  at  high  levels 
of  DoD  beyond  setting  an  overall 
funding  2eve2. 

(3)  A  large  category  of  programs  were 
regarded  as  fenced  for  the -purpose  of 
this  effort.  These  primarily 
consisted'of  C3  for  SDI  and  of  black 
programs. 

(4)  The  fourth  category,  which  is  labeled 

enhancements,"  consists  of  dollars  to 
acquire,  operate,  and  maintain  C3 
systems  intended  primarily  to  improve 
warfigheing  capability  either  through 
significantly  new  functionality  or 
significantly  improved  survivability.1 
Although  cost-effectiveness  is 
considered  in, system  design,  the  key 
high  level  issues  focus  on  the  value 
of  the  warfigheing  improvement  in  the 
context  of  overall  defense  priorities. 

The  fourth  category,  which  accounts  for 
about  $8  billion  annually,  is  the  portion 
of  the  C3  program  managed  by  mission 
oriented  analysis  (MOA)  and  is  essentially 
the  decision  space  for  this  affordability 
effort.  It  should  also  be  noted  chat  the 
3?  growth  trznd  is  concentrated  in  the 
third  and  fourth  categories. 

Capability  analysis  develops  a  mapping 
between  C3  enhancement  programs  and 
warfighting  capability.  Having  developed 
this  mapping  one  can  develop  an 
’unconstrained"  prioritization  of  C3 


J-  Welding  what  is  "significant"  derives 
from  capability  analysis  described  below. 
There  are  close  calls  on  this  issue,  but 
there  is  a  surprising  degree  of  consensus 
in  the  C3  community  regarding  which  systems 
belong  in  this  category. 
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enhancements,  based  on  defense  policy 
priorities,  Services*  doctrine,  and 
contingency  and  operations  plans,  the 
priorities  are  unconstrained  in  that  they 
do  not  account  for  cost  and  fiscal 
constraints.  This  effort  did  not  attempt 
an  independent' capability  analysis. 

Rather,  it  developed,  over  a  five  year 
period,  a  summary  of  several  hundred  plans, 
architectures,  ana  mission  analyses 
developed  by  CtNCsy {Services,  and  defense 
.agencies  encompassing  in  theiaggregate 
strategic,  theater  level,  and  tactical  C3. 
this  summarization  required  ’developing  a 
framework  to  structure  the  problem. 

Sections  2  and  3  of  this  paper  describe 
framework  development. 

Cost- analysis  develops  estimates  of 
the  15  year  price  tag  on  C3  improvements. 

A  key  observation  is  that  although  there 
are  hundreds  of  C3  improvement  programs, 
there  arc  approximately  two  dozen  programs 
th3t  -represent  over  )0Z  of  total  cost  of  C3 
improvements,,  thus,  one  way -of  scoping 
this  effort'  down  to  a  manageable  size  is  to 
focus  the  detailed  cost  analysis  on  these 
systems  and  assume  that  their  portion  of 
the  overall  program  remains  roughly  stable. 
Aside  from  scoping  down  the  number  of 
systems  for  which  estimates  are  needed 
there  is  an  additional  advantage  that  the 
larger  systems  usually  have  more  complete 
documentation  needed  for  cost  analysis, 
the  cost  analysis  includes  not  only 
research  and  procurement,  but  also 
operations,  support,  and  personnel.  A  case 
by  case  analysis  is  needed  to  determine  how 
much  of  the  latter  costa  are  offset  by 
savings  on  existing,  systems.  The  cost 
analysis  needs  to  be  done  at  a  sufficient 
level  of  detail  to  estimate  the  effects  of 
increasing  or  decreasing  the  size  of  a  buy 
and  the  effects  of  inefficiencies 
introduced  by  stretching  out  programs. 

The  remainder  of  this  paper  addresses 
developing  --'framework  for  capability 
analysis.  Two  key  aspects  of  such  a 
framework  are  the  notions  of  hierarchical 
structure,  and- of  levels  of  capability. 

Both  of  these  are  central  to  any  mission 
oriented  analysis  and  are^discussed  in  the 
next  two  sections  of  the  paper. 

2.  HIERARCHICAL  STRUCTURES 

One  of  the  most  fundamental  aspects  of 
03  analysis  is  its  hierarchical  structure.2 
These  hierarchies  are  needed  to  relate 
technical  improvements  in  the  form  of  new 


2.  Hierarchy  here  refers  to  the  structure 
of  the  analysis  and  not  to  military 
echelons  of  command. 


radios,  computers,  or  sensors  to  improve¬ 
ments,  in  the  ability  to  fight  and  win  wars. 
The  largest  war-gaming  and  computer 
simulations  either  available  today  or 
envisioned  can  quantitatively' analyze  only 
very  small  parts  of  the  total  problem  and 
cannot  analyze  how  these  parts  fit  together 
into  an  aggregate  assessment.  To  look  at 
the  aggregate  problem  requires  qualitative 
analysis  which  in  turn  requires  a  well 
thought  out  hierarchical  framework. 

Figure  I  shows,-  the  ikOA  process  itself 
as  a  hierarchical  methodology.  The  concept 
of  levels  of  capability  indicated  in  the 
figure  and  examples  of  levels  are  described 
in  the  next  section.  The  hierarchical 
structure  starts  with  broad  goals  for 
overall  military -capability  as  articulated 
by  OSD  and  OJCS.  These  goals  are  trans¬ 
lated  into  warfighting  strategies  by 
theater  CIKC's.  These  strategies,  in  turn, 
lmply.goalh  in  eaclralssion  area  (e.g.,  air 
defense,  ASW,  fire  support) t  Down  to  this 
level  all  statements  have  described  what 
the  forces  need  to  be  able  to  do.  It  is  at 
the  lowest  level  .of  the  chart  that  informa¬ 
tion  needs  are  addressed  and  the  resulting 
performance  and  survivability  of  the 
systems,  facilities,  and  procedures  for 
collecting,  processing,  and  transmitting 
information.  Figures  2,  3  and  4  present 
more  detail  on  the  theater,  mission,  and  C3 
capability  tiers. 

Figure  2  shows  a  theater  and  mission 
breakdown  which  has  been  used  in  presenting 
assessment  results.  This  structure  breaks 
C3  into  three  broad  areas.  Strategic  C3 
manages  global  nuclear  war.  Theater  level 
C3  addresses  C3  for  echelons  above  Corps  in 
conventional  and  theater  nuclear  conflict. 
Tactical  C3  addresses  C3  for  lower 
echelons.  For  each  of  these  three 
portions,  the  st“''Cture  first  shows  a 
theater  of  conflict.  Then  the  level  of 
conflict  or  phase  of  conflict  establishes 
the. threat  to  both  forces  and  C3,  The 
mission  levels  describe  own  force  action. 
For  theater  level  echelons  the  mission  is 
broad  force  management  with  specific 
nuclear  responsibilities.  For  strategic 
and  tactical  portions,  the  missions  are 
more  recognizable.  Figure  2  is  not 
intended  to  be  complete  in  representing  ail 
missions  in  all  theaters.  It  does 
represent  over  802  of  the  dollars  that  are 
being  or  might  be  invested  in  C3.^ 

There  is  an  important  underlying  theme 
in  the  choice  of  the  structure  in  Figure  2 


3.  It  does  rot  make  a  statement  about 
defense  priorities  since  there  are  small 
dollar,  high  priority  areas  (e  g.,  special 
forces). 
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and  In  all  of  the  remaining, figures  in  this 
paper  (including  tlie  next  section).  These 
structures  are  intended  to. articulate  the 
effects  of  investments  in  C3  systems.  To 
do  this,  one  should  be. able,  through  * 

shading  or  coloring  or  some  other  graphic 
arts  mechanism,  to  state  in  which  areas  C3 
is  in  good  shape  and  in  which  areas  C3  is 
poor.  In  order  to  do  this  the  .structure 
needs  to  be  sec  up  so  that  each  box  cair  be 
characterized  as  embodying  unique  C3 
requirements  and  that  the  differences 
between  boxes  represent  significant 
investments' In  C3.  In- Figure  2  these 
differences  represent  systems  with  vastly 
different  performance  or  survivability 
characteristics.  In  Section  3  (on  levels 
of  capability)  some  of  these  differences 
include  buying  larger  numbers  of  systems. 

Figure  2  represents  the  top  three 
tiers  of  a  hierarchical  structure  that  may 
extend  up  to  a  dozen  levels.  Figures  3  and 
4  indicate  the  lower  levels  for  the  Fire 
Support/Interdiction  missions  in  the 
European  theater.  This  mission  area  is 
highly  illustrative  of  the  concepts  in  this 
section.  The  criterion  in  developing  a 
structure  at  this  level  Is  that  it 
describes  all  of  the  distinctions  needed  to 
articulate  what  C3  systems  can  and  cannot 
do. 


missil  effectiveness.  Figure  4  contains 
the  bottom  two  tiers  of  the  hierarchy  which 
are  C3  functions  and; elements. 

3.  LEVELS  OF  CAPABILITY 

Levels  of  capability  are  a  mechanism 
for  articulating  investment  choices.  If  C3 
improvements *are  contemplated  it  is  because 
there  is  a  gap 'between  current  capability 
and  the  capability  Called  for  by  defense 
policy  and  war  plans.  The  idea  of  levels 
of  capability  is'to  establish  reasonable 
incremental  steps  between  these  two 
boundaries.  An  investment  choice  is 
reasonable  if  it  consists  of  a  package  of 
C3  improvements  designed  to  provide  one  of 
these  incremental  steps. 

Figures  5,  6,  and  7  present  levels  of 
capability  corresponding  to  mission* 
theater,  and  overall  defense  capability  in 
Figure  1.  The  mission  is  Fire 
Support/Interdiction  that  was  described  in 
Section  2  above  and  the  theater  is  Central 
Europe.  The  levels  shown  are  notional  and 
not  the  ones  used  in  the  effort  but  they 
are  reasonable  and  with  some  additional 
detail  could  have  been  used.  The  mission 
levels  in  Figure  S  correspond  to 
conventional  war,  conventional  operations, 
with  all  weapon  classes. 


Figure  3  describes  mission  levels  in 
that  all  of  the  statements  pertain  to  what 
forces  can  do  while  Figure  4  focuses  on  C3 
functions  and  systems.  In  Figure  3, 
conflict  level  establishes  whether  systems 
are  under  conventional  or  nuclear  stress. 
The  size  and  intensity  of  the  conflict  is 
implied  by  specifying  the  theater  and 
corresponds  to  threats  and  war  plans 
developed  for  that  theater.  Operations 
describes  own  force  response  with  nuclear 
response  involving  C3  for  custody,  control, 
request,  release,  and  execution.  Target 
distance  is  a  key  determinant  of  require¬ 
ment  for  sensor  coverage.  The  three  ranges 
shown  are  nominal  values  repre¬ 
senting  approximate  range  of  ground  and 
small  aircraft  based  sensors,  sensors  for  a 
high  altitude,  stand  off  platform  like  a 
TR-1,  and  possible  futuristic  sensor 
concepts,  respectively.  Target  classifi¬ 
cation,  as  the- term  is  used  here,  estab¬ 
lishes  how  rapidly  information  needs  to 
move  from  sensor  to  firing  unit.  Fixed 
time  sensitive  targets  refer  to  ground 
forces  or  support  units  temporarily  located 
at  staging  areas  or  choke  points.  Weapons 
class  determines  the  tradeoff  between  the 
capability  of  the  weapon  to  locate  a  target 
and  the  need  for  support  from  C3  external 
to  the  weapon.  Thus,  all  of  the  factors  in 
the  hierarchical  tiers  of  Figure  2  help  to 
provide  links  between  C3  capabilities  and 


There  are  two  broad  observations  about 
these  levels  that  should  apply  to  levels  of 
capability  in  any  MOA.  First,  each  level 
represents  a  sensible  strategy  for 
employing  military  forces.  That  is,  given 
that' fiscal  constraints  do  not  enable  us  to 
buy  everything,  each  of  these  levels 
results  in  achieving  a  significant  military 
capability  compared  to  lower  levels.  The 
second  point  is  that  having  achieved  any 
given  level,  there  is  a  significant  dollar 
investment  in  C3  systems  needed  to  get  to 
■the  next  higher -incremental  level.  Thus, 
the  levels  articulate  hard  choices. 

Note  that  the  levels  do  not  explicitly 
distinguish  all  combinations  of  factors  in 
the  hierarchy.  Further,  some  levels  of 
capability  are  combined  in  moving  up  the 
hierarchy  from  mission  to  theater  and 
overall  defense  levels.  Partly  this  is  to 
keep  the  presentation  of  results 
manageable.  Nothing  is  lost  by  this 
simplification  since  an  initial  analysis 
can  determine  a  “space  of  interest"  and 
then  a  closer  look  can  focus  on  that  space. 
The  "spa:e  of  interest"  is  the  level  of 
capability  where  the  cost  of  needed  systems 
and  fiscal  constraints  intersect.  That  is 
where  high  level  decision  makers  need  to 
choose  among  missions  and  theaters  and 
where  the  results. of  this  effort  can 
translate  those  decisions  into  specific 
system  level  choices. 
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ABSTRACT 

The  pricary  purpose  for  evaluating  the  ispact 
of  any  element  or  aspect  of  U.S.  forces  is  to. help 
establish  priorities  for  prograas  and  budgets, 
for  strategic  coazand  control  and  copauni cations 
(C3). analysts,  this  can  be  a  particularly 
frustrating  process.  The  performance  of  the 
strategic  war  machine  is  dominated  by  weapon 
hardware.  Consequently,  the  contribution  of  C3 
systems  to  strategic  force  effectiveness  has 
historically  been  overlooked  or  taken  for  granted 
in  the  broad  defense  coaxmity.  Those  who  have 
struggled  in  the  programing  and  budgeting 
processes  understand  the  axiua  that  if  your 
prograa  caa't  ’sake  things  go  boca",  you  don't 
have  ouch  leverage  in  those  arenas. 

This  paper  presents  a  aethodology  for 
expressing  the  impact  of  strategic  C3  perforcance 
in  teras  of "war  fighting  capabilities.  It  begins 
with  traditional  strategic  force  evaluation 
techniques  and  develops  specific  neasures  of  C3 
perforcance  that  can  be  integrated  directly  into 
those  techniques.  It  allows  the  analyst  to 
portray  C3  icpacts  in  teras  of  aission 
accoaplishsent  and  does  so  in  a  Banner  that  can  be 
widely  understood.  It  allows  direct  cosparison 
asong  C3  systeas  and  asong.C3  and  force  related 
systeas. 

ANALYTICAL  OBJECT I VES 

To  devise  an  approach  to  evaluating  any 
components  of  the  national  defense  structure,  it 
Is  necessary  to  first  establish  the  ultloate 
objective  of  that  effort.  What  are  we  trying  to 
accomplish?  It  Is  all  too  easy,  otherwise,  to  get 
caught  up  in  the  details  of  sioulation  and 
synthesis  and  find  that  our  product  is  not  really 
useful.  I  believe  that  the  ulticate  objective  of 
any  funded  activity  in  the  defense  coasunity 
should  be  to  establish  or  aaintain  the  capability 
to  wage  war  whenever  and  however  it  is  in  the 
national  Interest  to  do  so.  I  know  this  puts  oe 
in  conflict  with  some  deterrence  advocates;  but 
without  the  capability  to  wage  war' successfully,  1 
doubt  the  likelihood  of  deterrence.  It  follows, 
therefore,  that  I  believe  the  ulticate  objective 
of  evaluations,  including  C3,  is  to  help 
prioritize  the  use  of  our  1  fatted  defense  budget 
toward  the  ulticate  capability  for  war  fighting  in 
the  national  interest.  We  cust  prioritize 


developoent  and  procurement  programs  through  which 
we  can  establish  the  necessary  capabilities.  And, 
we  oust  prioritize  training  and  exercise  prograas 
through  which  we  can  assure  eaxicua  effectiveness 
of  existing  resources. 

Given  these  overall (analytical  objectives,  it 
is  necessary  for  C3  evaluations  to  support  two 
categories  of  coeparisons: 

o  C3  systeas,  subsysteas,  and  components  in 
the  context  of  overall  C3  capabilities, 
and 

o  C3  systeas  in  the  context  of  overall 
strategic  force  capabilities. 

The  first  of  these  two  types  of  cozparisons  is  to 
allow  prioritization  of  potentially  diverse  C3 
elecents  contributing  to  the  accoaplishsent  of  the 
saae  or  diverse  C3  aissions.  Sensor  processing 
versus  coaoand  center  display  systeas  versus 
coaminications  systeas  is  a  fair  exaaple.  The 
second  of  these  two  coaparisons  is  to  allow 
prioritization  of  diverse  elements  contributing  to 
the  sase  or  diverse  strategic  aissions.  Sensors 
versus  C3  systeas  versus  weapon  del ivery  systeas 
is  2  cocoon  exaaple. 

Accoaplishsent  of  these  coaparisons  and 
prioritizations  in  a  traceable,  auditable  way 
isplies  the  need  for  coaaon,  nission-related 
eeasures  of  effectiveness.  It  follows,  also,  that 
the  measures  used  oust  be  understandable  and 
useful  to  a  range  of  people  including  war 
planners,  C3  planners,  engineers,  budgeteers, 
prograwsers,  and  targeteers. 

STRATEGIC  EVALUATION  CONTEXT 

It  is  prudent  to  recognize  that  the 
evaluation  of  strategicaission  success  (i.e., 
projected  outcomes  for  the  various  levels  of 
potential  nuclear  conflict)  offers  a  unique 
context  for  the  analyst.  This  is  evidenced 
prinarily  in  two  ways.  First,  in  contrast  to 
tactical  assessments,  the  evaluation  of  strategic 
effectiveness  is  doainated  by  weapon 
considerations.  Within  the  bounds  of  the 
scenarios  noroally  considered,  the  contributions 
of  the  engineering  of  the  delivery  systeas  and  the 
physics  of  the  weapons'  effects  tend  to  dwarf  the 
contributions  of  C3  systems.  Sinilarly, 
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evaluations  of  the  total  costs  involved  tend  to  be 
dominated  by  the  costs  of  the  weapons  and  weapon 
delivery  systems.  Second,  in  contrast  to 
evaluations  within  the  Strategic  Defense 
Initiative  (SOI)  program  for  example,  there  is  a 
long-standing  precedence  in  the  way  potential 
strategic  ■ission  effectiveness  is  calculated  and  - 
priorities  derivedl 

Because  the  impact  and  cost  of  C3  system 
performance  were  recognized,  or  acre  likely 
believed,  to  be  so  relatively  small,  strategic 
analyses  were  conducted  for  many  years  with 
virtually  no  consideration, given  to  thea.  There 
was  a  coaaon  acceptance  of  a  nebulous  "force  , 
multiplier"  effect  attributable  to  C3.  However, 
the  tendency  was  to  asstiae  perfect  C3  as  a 
baseline  thus  converting  any  less-than-perfect  C3 
performance,  which  is  likely,  into  a '"force 
demultiplier",  as  it  is  sooetiaes  called. 

C3  analysts  attempting  seriousiy  to 
prioritize  their  systems  in  the  context  of  overall 
strategic  force  capabilities  have  found  theaselves 
in  the  role  of  relative  newcomers  to  the  strategic 
force  arena.  They  have  been  forced  to  accept  and 
integrate  with  an  analytical  process  of  long 
standing.  Although  new  and  different 
methodologies  for  common  mission-related  measures 
of  strategic  effectiveness  have  been  advanced  in 
the  C3  community,  there  has  been  little  success  in 
convincing  the  strategic  force  community  to 
change.  The  pragmatic  problem,  therefore,  is  to 
devise  a  way.  to  integrate  or  assimilate  measures 
of  C3  effectiveness  into  the  established  measures 
of  strategic  effectiveness. 


Strategic  force  evaluations  are  based  almost 
exclusively  on  expected  levels  of  damage 
potentially  achievable  against  enemy  war  fighting, 
war  supporting,  and  C3  capabilities  and 
occasionally  against  selected  urban  and  industrial 
centers.  Although  sometimes  computed  with  great 
specificity,  the  outcome  is  more  frequently 
expressed  in  aggregated  terms  like  those  implied 
in  Equations  II  and  #2  which  are  shown  below. 


D.E.j  -  l-[MSSPKij)]Nij 

Equation  II 

Where  D.E.j  •  Cumulative  probability  that  a 
designated  level  of  damage  is 
achieved  on  designated  targets  of 
type  j. 

SSPKjj  -  Single  shot  probability  that  a 

weapon  of  type  i  will'achieve  the 
designated  level  of  damage  against 
a  target  of  type  J. 

j  ■  Humber  of  weapons  of  type  i 

allocated  against  each  target  of 
type  j. 


SSPKij  -  (PPLSs ) (PLGi ) (PP| ) (PDs j) 


Equation  12 


Where  PPLSi  -  Probability  of  pre-launch  survival 
for  weapons  of  type  i. 

PIGf  •  Probability  that  weapon  delivery 
systems  of  type  i  will  launch  and 
fly  successfully  (does  not  account 
for  weapon  accuracy, -only  delivery 
systea  reliability). 

PPf  ■  Probability  that  weapons  of  type  i 
will  penetrate  the  appropriate 
defenses. 

PDfj  -  Probability  that  a  single 

detonation  of  type  i  delivered  with 
Its  associated  accuracy  can  achieve 
the  designated  level  of  damage 
against  a  target  of  type  j. 

I  prefer  to  call  these  the  "general  strategic 
equations".  In  a  simplistic  fashion,  they 
serially  link  the  uncertainties  associated  with 
the  delivery  of  nuclear  weapons  on  target  and  the 
uncertainties  of  the  weapon  effects  theaselves. 

The  users  of  these  equations  group  the 
uncertainties  into  larger  or  smaller  aggregations 
consistent  with  the  needs  of  each  particular 
analysis.  Penetration  through  several  layers  of 
defense  might  each  be  entered  separately,  for 
example,  instead  of  the  single  probability  (PP) 
shown  in  Equation  12  The  grouping  shown,  however, 
has  proved  most  useful  to  me,  particularly  because 
it  correlates  with  the  sequence  in  which  the 
uncertainties  would  impact  chronologically  along 
the  weapon  flight  path,  and  is  thus  intuitively 
clear.  In  this  sense,  it  may  be  convenient  to 
view  the  equation  as  representing  a  series  of 
"barriers"  through  which  the  weapons  must  pass. 
Extending  this  analogy  in  1980,  The  MITRE 
Corporation  and  the  Defense  Communications  Agency 
added  a  parameter  representing  another  barrier; 
namely  the  uncertain  likelihood  that  the  forces 
themselves  would  receive  the  order  to  execute. 

This  is  called  the  "Probability  of  Correct  Message 
Receipt  (PCMR)"  and  its  inclusion  is  shown  below 
in  Equation  13. 

SSPKi j  -  (PCMRi ) (PPLSi ) (PLG| ) (PPj ) (POi j) 

Equation  13 

Where  PCMRi  -  Probability  that  the  order  to 

execute  is  received  by  weapons  of 
type  i  exactly  as  sent. 

This  parameter,  PCMR,  now  serves  as  the 
principal  measure  of  strategic  communications 
connectivity  throughout  the  defense  community. 

The  linkage  of  the  PCMR  measure  to  strategic 
force  effectiveness  is  easily  recognized  and 
understood  and  is  increasingly  being  accepted.  It 
would  be  convenient  if  the  other  contributions  of 
C3  systems  could  be  linked  in  a  like  manner;  by 
adding  the  probabilities  of  correct  or  timely 
decisions,  for  example.  This  can  be  done  to  some 
people's  sctisfaction.  However,  the  circumstances 
must  be  rigidly  controlled  to  make  those 
probabilities  meaningful  and  the  coupling  of  C3 
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performance 'to  them  becomes  quite  tenuous.  I 
believe  the  solution  lies  in  the  reexamination  of 
the  general  strategic  equations  (including,  of 
course,  PCMR). 

Each  of  the  parameters, of  uncertainty  in 
Equation  #3  (PCHR,  PPLS,  PIG,  PP,  PO)  wist- be 
calculated  separately  for  each  set  of  analytical 
circumstances  of  interest  (weapon  type,  threat, 
scenario,  etc.).  This  outcome  is  most  credible 
when- those  parameters  are  calculated  within  the 
constraints  of  reality.  For. example: 

o  Only  whole  nuabers  of  weapons  assigned  to 
each  target;  N  constrained  to  be  an 
integer  number. 

o  Range  constraints  honored  in  assigning 
weapons  to  targets. 

o  footprint  constraints  honored  in 
assigning  missile  reentry  vehicles  to 
targets. 

o  Only  alert  weapons,  or  weapons  that  can 
be  brought  on  line  in  a  timely  manner, 
considered  for  assignment. 

The  obvious  simplifying  assumptions  implicit 
in  theseiequations  «.re  1)  that  the  cumulative 
probabilities  associated  with. individual  weapons 
are  independent  of  each  other,  and  2)  that  the 
parameters  of  uncertainty  also  are  independent  of 
each  other.  The  impact, of  the  former  is  generally 
lost  in  the  aggregation.  The  impact  of  the  latter 
can  be  minimized  by  selectively  computing  a  range 
of  values  for  various  conditions. 

In  calculating  the  parameters  of  uncertainty, 
the..analy$t  has  the  straight  forward  mechanism  for 
relating  small  changes  in  system  or  subsystem 
performance  directly  to  the  aggregated  force 
effectiveness.  This- is  true,  of  course,  provided 
-♦;*»  he  can  express  that  coupling,  C3  performance 
canhoC be  coupled  to  the  parameter  PIG.  It  can  be 
related  to  PD  only  if  the  location  of  the  target 
(arguably  a  C3  function  or  a  C3I  function)  is 
incorporated.  However,  it* can  be  related  to  PPLS 
and  PP.  The  value  of  those  two  parameters  vary 
according  to  the  time  in  the  conflict  at  which  the 
strategic  response  is  executed;  generally,  both 
decreasing  as  the  response  is  delayed.  C3  systems 
support  the  processes. of  decision  and  execution 
and  dictate  the  time  at  which  a  decision  can  be 
made  intelligently  and  executed  efficiently.  The 
timeliness  of  03  functions  (with  associated 
quality  levels)  is  thus  an  indirect  coupling,  but 
nonetheless  one  that  should  be  acceptable  and 
understandable  to  those  who  must  establish  program 
and  budget  priorities. 

The  character  of  03  support  to  strategic 
force  operations,  of  course,  is  not  simply  a 
matter  of  the  timeliness  of  decisions.  It  is  also 
a  matter  of  the  quality  of  those  decisions.  The 
03  goal  is- an  informed,  intelligent  decision,  made 
in  a  timely  manner,  consistent  with  the 
achievement  of  national  objectives  in  whatever 
conflict  scenarios  emerge. 


Based  on  these  considerations,  I  believe  the 
analytical  construct  shown  in  Figure  1  allows 
complete  coupling  of  C3  to  strategic  force 
effectiveness. 


Figure  1.  Analytical  Construct 


This  construct  shows  a  command  and  control 
model  with  C3  decision-making  support  (before  the 
fact)  and  decision-execution  support  (after  the 
fact).  The  measures  of  effectiveness  shown  are 
discussed  separately  below.  They  are  all  mission 
oriented  and  are  expressed  in  or  related  to  the 
terms  of  the  general-strategic  equations. 

Appr9Px.iaUpe».Qf.rgspon.^..^l£S.UfiD  is  a 
comparison  of  the  target  set  selected  based  on  the 
actual  perception  of  the  threat  (i.e.,  based  on  C3 
performance)  and  the  target  set  that  same  decision 
maker  would  have  selected  given  perfect  knowledge 
of  the  threat.  Note  that  this  is  not  a  measure  of 
the  quality  of  the  decision,  nor  is  it  a  measure 
of  whether  or  not  we  will  win  the  war.  People  do 
not  even  know  how  to  define  "winning"  in  a  nuclear 
war.  It  is  rather  a  measure  of  the  03  system's 
ability  to  give  the  decision  maker  the  best 
possible  basis  for  a  decision.  The  "appropriate" 
decision,  thus,  is  the  one  most  closely  matched  to 
the  planned  achievement' of  national  objectives 
under  the  circumstances  at  hand.  Figure  2 
characterizes  the  implications  of  inappropriate 
decisions. 


^Appropriate  Target  set  (D  E.  goals) 
..Selected  Target  Set  (0  E.  goals) 


Appropriate  Target  set  (D  E.  goals) 
Selected  Target  Set  {0  E.  goats) 


Escalation  otW» 
Inefficient  Use 
ot  Strategic 
Weapons 
Cpnswxncei* 
CombticdrttXs 
of  escalation  and 
contrwed  Uveal 


Figure  2.  Inappropriate  Decisions 
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Achievement  of  damage  goals  is  a  comparison 
of  the  damage  expectancy  associated  with  the  • 
actual  execution  time  and  that  associated  with  the 
execution  tine. that  would  have  accrued  with 
perfect  knowledge.  As  implied  earlier,  every 


strategic  response  has  an  execution  window  after 
which  the  response  becomes  increasingly  difficult 
to  achieve.  The  primary,; causes  are  the  loss  of 
communications  connectivity  to  the  forces  (i.e., 
lower  PCMR  from  direct  attack  and  counter 


measures), -the  loss  of  weapons  (i.e.,  lower  PPLS 
from  direct  attack),  and  the  loss  of  defense 
suppression  (i.e.,  lower  PP  from  loss  of  defense 
*  suppression  weapons  or  delays  in  receipt  of  the 
order  by  those  forces). 


comparison  of  the  number  of  weapons  required  when 
execution-time  is  based  on  the  actual  perception 
of  the  threat  and  the  number  required  if  execution 
were  based  on  perfect  knowledge.  Use  of  this 
measure  implies  one  of  two  US  capabilities  to 


assign  weapons  to  targets.  In  the  first,  war 
plans' might  be  prepared  in  advance  and  stored  with 
the  weapons  based  on  two  or  three  values  for  SSPK 


reflecting  increasingly  higher  levels  of  damage 
incurred  by  the  US  C3  structure  and  forces.  To 
accommodate  the  lower* values  of  SSPK,  greater 
numbers  of  weapons  would  necessarily  be  assigned 
to  each  target.  The  decision  maker  would  then 
choose  the  appropriate  preplanned  damage  level. 

In  the  second,  adaptive  planning  mechanisms  cculd 
be  developedUo  allow  real  time 
targeting/retargeting  at  the  time  the  decision  is 
made. 


Impact  measured. by  efficient  utilization  of 
weapons: 


Case  II:  EAM  released  by  Tj 

N*3  per  target'  (as  above) 

60  RVs  required 

Case  #2:  EAM  released  after  Ti 

•9-1-11-.27JN 

N«8 

160  RVs  required 

The  range  of  coupling  of  C3  performance  to 
strategic  force  decision  and  execution  processes 
is  pictured  in  Figure  3.  Couplings  are  shown  by 
the  dashed  lines,  real-time  functional  interfaces, 
all  of  which  can  be  expressed  in  terms  of  the 
quality  and  timeliness  of  information. 


The-application  of  this  methodology  is 
pictured  in  Figure  4. 


In  the  manner  already  described,  the  analyst 
would  compare  whatever  alternatives  are  available 
(the  right  hand  side  of  the  figure)  against  the 
reference  standard,  namely  that  which  would 
accrue  with  perfect  knowledge.  To  do  this,  the 
analyst  needs  the  following  tools  and 
capabilities. 


Achievement  of  damage  goals  and  efficient  use 
of  weapons  are  simply  alternative  applications  of 
the  equations;  one  application  letting  D.E.  vary, 
the  other  letting  N  vary.  The  following  is  a  very 
simple  example  of  the  alternative  uses. 


Objective:  0.9  D.E.  on  each  of  20  defended 
targets 

Weapons  Assigned:  ICBMs 

Coupling:  A.  SSPK  »  .6  based  on  .9  survival 
and  1.0  penetration,  given  EAM 
release  e  Tj 

B.  SSPK  -  .27  based  on  .9 

survival  and  .45  penetration, 
given  EAM  release  >  J\ 

Impact  measured  by  achievement  of  D.E.  goals: 

Case  #1:  EAM  released  by  Tj 


ana 

N-3  per  target 

Case  #2:  EAM  released  after  Tj 

O.E.  -  1-E1-.27J3 

•  I-t.39] 

•  .61 


1.  Subsystem  performance  models:  There  must 
be  detailed  models  or  algorithm  with  which  to 
calculate  the  parameters  of  uncertainty  for 
Equation  #3,  SSPK.  While  these  are  not  commonly 
in  use  in  the  offices  performing  C3  analyses,  they 
are  not  hard  to. find.  The  Air  Force  Center  for 
Strategic  Analyses  (AF/SA),  for  example,  should  be 
able- to  provide  a  relatively  complete  set. 

2.  Wargame  model :  A  two-sided,  two-phase  or 
three-phase  model  is  needed.  That  is,  one  in 
which  one  side  attacks,  the  second  side  retaliates 
and,  possibly,  the  first  side  strikes  again.  The 
model  supporting  the  SIOP-RISOP  games  (I.e.,  the 
US  Single  Integrated  Operations  Plan  versus  the 
hypothetical  Red  Integrated  Strategic  Operations 
Plan)  is  the  most  credible  example.  Models  from 
the  National  Test  Bed  (NT6)  being  developed  for 
the  SOI  program  would  seem  to  be  another  credible 
example,  although  the  specific  capabilities  of  the 
NTB  have  not  yet  been  established.  Use  of  either 
of  these  model,;  or  facilities  would  likely  be 
difficult  and  costly  for  evaluating  most  C3 
enhancement  concepts.  Fortunately,  however, 
representative  SIOP-RISOP  type  gaming  can  be 
emulated  fairly  easily. 

3.  Decision  rules  and/or  decision  makers: 

The  methodology  requires  that  a  decision  be  made. 
The  decision  need  not  be  "optimum*,  but  must  be 
made  in  as  professional  a  manner  a  possible.  The 
best  way  to  do  this  is  to  build  a  set  of  "if-then* 
decision  "rules"  to  serve  as  guides  for  response 
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selection.  These  rules  advise  the  decision  maker 
that  for  each  perception  of  the  situation  and 
threat,  a  given  response  is  most  appropriate, 
based  on  preplanning  and  current  guidance.  As 
more  decision  making  role  players  exercise  the 
model  and  critique  the  rules,  the  more  realistic 
they  would  become.  As’this  happensftthe  results 
from  using  the  methodology  would  obviously,  become 
more  credible. 

4.  Test  driver:  Finally,  a  test  driver 
model  Is  needed  to  synthesize  the  flow  of 
information  into  the  decision  process.  This  can 
be  as  simple  as  a  script  or  as  complex  as  a 
« computer  generating  outputs  from  individual 
sensors  or  data  fusion  facilities. 

The  modeling  implied  in  Figure  4  may  be  very 
aggregated,  using  representative  but  stylized 
threats,  weapon  sets,  or  target  bases.  It  can  be 
event-driven,  clock-driven,  on-line  or  using'*  look¬ 
up  tables.  However,  for  credibility,  the  analyst 
must  make  a  conscious  effort  to  be  realistic  in 
the  kinds  of  decisions  that  would  be  made. 

mm 

The  methodology  described  in 'this  paper  is 
much  less  sophisticated  than  most  operations 
research  professionals  would  prefer.  It  is  purely 
pragmatic,  based, on  hard  experience  (and  some 
success)  in  making  the  needs of  the  C3  coraunity 
heard  and  considered  in  the  000  programing  and 
budgeting  arenas. 


The  analytical  processes- associated  with /this 
methodology  are  cumbersome.  They' require 
literally  that  the  analysts  synthisize  the  outcome 
of  an  entire  war.  However,  that  is  where  .the 
ultimate  measure  of  effectiveness  lies',  namely  in 
the  projected  potential  capability  to  wage  war  in 
the  national  interest.  And,  I  believe '.that 
adequate  war  game  models  exist  and  can  be 
emulated. 

The  computational  processes  associated  with 
this  methodology  are  potentially  time  consuming. 
However,'  one  impact  of  aggregation  is  to  mitigate 
this  fact. 

The  ’bottom  line",  in  summary,  is  that  the 
measures  generated  using  this  methodology  directly 
relate  to  the  business  of  national  defense. and 
compare  directly  to  the  measures  commonly  used 
throughout  the  defense  community.  The  conclusions 
as  to.C3  program  or  budget  priorities  may  not 
always  be  accepted.  However,  the  measures  used 
should  be  understood  and  acceptable  to 
programmers,  war  planners,  engineers,  operators, 
budgeteers,  and  targeteers  as  well  as  C3  planners. 

When  the  old  school  general  says,  ’How  does 
C3  make  things  to  boom?’,  you  can  say,  "I'll  show 
you." 
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Planning  for  Integrated  System  Evaluation: 
An  Application  to  S.D.Jt. 
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The  conceptual  development  and  subsequent 
'deaonstration  and  validation  of  a  major  system 
Is  admittedly  a  very  complex,  dynamic  process 
and  a  theoretically  sound  procedural- plan  will 
usually  aeet  with  numerous ’Implementation  dif¬ 
ficulties.  This  presentation  discusse’sa 
theoretlcally-bascd  approach  to  the  organized 
Integration  of  high-level  value  trade-offs  to 
system  design  decisions.  The  work  presents  a 
top-down  approach  to  the- assessment  of  total 
sys tea  worth  which  provides  for  the  integra¬ 
tion  of  neasuros  of  different  aspects. of  sys¬ 
tem  worth.  Measures  can  be  performance  pro¬ 
jections  from  highly  detailed  simulations  or 
expert  assessments  of  potential,  performance. 

The  application  of  tho  approach  to  the  ac¬ 
tual  evaluation  of  proposed  SD1  battle  aanago- 
aent/C3  architectures  is  with  emphasis»on  the 
planning  for  the  total  evaluation, and  the 
practical  problems  involved  In  the'' Implements  - 
tlon  of  the  plan.  One  of  the  Issues  addressed 
Is  .the  relation  of  aeasures  of  suosystem  per¬ 
formance  to  yield  a  valid  assessment  of  over¬ 
all  performance. 


This  presentation  discusses  planning  for 
Integrated  system  evaluation  and  is  based  on 
both  theoretical  work  and  empirical  work  done  on 
the  evaluation  of  Battle. Mahageaent/Co'amand, 
Control,  and  Communications  (BM/G3)  architec¬ 
tures  that  are  being  designed  for  the  United 
States  Army  Strategic  Defense  Command  (USASDC) 
for  the  Strategic  Defense  Initiative  (S.D.l,), 
While  the  application  pertains  to  S.D.l, ,  the 
concepts  involved  are  relevant  to  any  program 
evaluation  that  Involves  projection  of  the  fu¬ 
ture  performance  of  a  proposed  major  system. 

The  work  Is  prescriptive  and  methodological  In 
nature,  discussing  what  should  be  done  rather 
than  presenting,  for  example,  a  piece  of  soft¬ 
ware  designed  to  solve  part  of  the  problem. 
Nonetheless,  Implementation  of  the  Ideas  dis¬ 
cussed  here  do  not  Involve  the  developaent  of 
major  new  algorithms  or  associated  software.  In 
fact,  much  of  what  Is  discussed  has  been  termed 
•good  engineering  design*  by  one  researcher-vho 
was  presented  with  the  work.  Ho  Indicated  that 
these  Ideas  are  routinely  accomplished, in  good 
engineering  design  Implementations.  The  claim 
here  Is  that  the  approach  expands  the  meaning  of 
•good  design*  and  also  that  the  more  restricted 


view  of  good  design  that  the  researcher  Implied 
was  routinely  implemented  is,  in  fact,  not  rou¬ 
tinely  implemented  for  any > of -a  number  of  rea¬ 
sons  depending  on  the  program  and  the  designers. 
These  reasons  Include- Increased  cost  of-rigoc, 
schedule  slippage,  programmatic  constraints,  r^e 
•usual  organizational  approach  to  system  acquisi¬ 
tion,  or  in  some  cases  simple  laxity. 


The  approach  here  termed  a  top-down  ap¬ 
proach  to  integrated  system  evaluation  neces¬ 
sarily  involves  a  linkage  of  user,  procurer,  and 
designer  in  a  trade-off  analysis  that  is  broader 
in  scope  than  the  analysis  usually  accomplished, 
and  the, proposed  analysis  is  to  bo  done  early  In 
the  program  with  whatever  tools  are  available. 
Difficulties'  in  accomplishing  the  approach  are 
not  technical,  but  rather  organizational,  and 
even  though  parts  of  this  presentation  deal  with 
the  use  of  complex  performance  simulations  and 
related  technical  problems,  the  view  adopted 
here  for  system  acquisition  decisions  is  one  of 
an  organizational  decision  maker.  Put  theoretl- 
.cally,- the  utility  function  relevant  to  tho 
design  decisions  is  a  social  one  involving 
numerous  organizations.  Put  practically,  the 
information  required  to  accomplish  design 
trade-off  analysis  resides  within  several  orga- 
rirarlons  and,  thus,  requires  *  -systematic  In- 
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lyses  necessarily  involve  sore  than  subsystem 
performance  trade-offs  often  addressed  In  <o» 
plex  simulations. 

Thlc  presentation  will  Involve  three 
phases:  the  theory  of  the  approach,  the  meth¬ 
odology  Involved,  and  an  example  of  procedures 
to  be  followed  In  Implementation. 

1  0  A  Theoretical  Framework ■■  for.  .tr.fi.<kc.Qfc£ 

Analysis 

Any  decision  where  the -options  are  clearly 
deflneddnvolves  uncertain  future  events  and 
value  trade-offs  with  respect  to  alternative 
cqnsequcnces.  The  system  design  problem  is  fur¬ 
ther  complicated  by  the  fact  that  the  decisions 
do  not  involve  fixed  options,  but  rather  involve 
the  design,  development,  testing,  and  deployment 
of  systems  that  must  meet  defined  performance 
goals  in  uncertain  future  scenarios  and  oust 
also  satisfy  numerous  rr  * «*•  la  such 

low  llfe-cyclo  cost  and  po» itieai  r  optablllty 
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'  tv**  -bar  arc  i-i*v  t  *  *» 

The  traditional  decision  analytic  represen¬ 
tation  of  a  decision  problea  involves  a  decision 
trei  in  which  the  relevant  outcomes  of  a  deci¬ 
sion  are  specified  is ? branches,  each  of  which  Is 
a  sequence  of  acts  and  events  terminating  in'  a - 
set. of  consequences  uniquely  associated  with-the 
particular  branch  of  the  tree.  An  alternative 
representation  of  the  decision  problea  appears 
In  Figure >1  In  which  four  abstract  spaces  are 
represented.  This 'particular  representation  has 
some  characteristics  that  are  particularly  suit¬ 
able  for  discussing  the  system  acquisition  prob¬ 
lem.  (This  approach  is  based  on  work  presented 
in  O'Connor  and  Edwards,  1977  and  O'Connor, 
1985).  Briefly,  Option  Space  contains  all  pos¬ 
sible  designs  of  the  kind  in  question.  For  this 
S.D.I.  problem,  it  is  the  space  of  all  architec¬ 
tures  and  associated  characteristics.  It  can  be 
thought  of  as  a  vector  space;’ but  however  it  is 
viewed.  It  contains  all  the  characteristics 
relevant  to  specif  leaden  of  an  architecture 
1,K  is  the  space  of  the  engineer  or  design*- 
who  soecin**  an  architecture  by  selling  * 
set  of  levels  of  characteristics.  In  Figure  l, 
the  specification  of  an  architecture  is  siaplls- 
cicaliy  displayed  as  settings  on  several  dials. 
It  is  acknowledged  that  In  Option  Space,  design 
dials  cannot.  In  general., be  manipulated  Inde¬ 
pendently.  A  change  in  one  often  changes  many 
others.  Needless  to  say,  designs  can  be  highly 
specific  or  very  general,  and  a  set  of  spe.  I  tc 
.  'teristirs  can  h*  capped  Into  sn*?/ 
general  system  characteristics.  Design  options 
can,  thus,  be  represented  in  hierarchies.  The 
main  point  is  that  all.deslgn  decisions  and 
changes  occur  as  .changes  In  Option  Sp  ■ 

FIGURE  1 

Four  Abstract  Spaces 
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Once  a  system  architecture  such  as  a  BH/C^ 
architecture  for  S.D.I.  is  specified,  it  can  be 
evaluated  by  considering  all  futures  in  which 
the  system  will  operate.  These  futures  are 
characterized  in  Figure  1  as  scenarios  in  Sce¬ 
nario  Space.  This  space,  as  with  Option  Space, 
can  also  be  viewed  in  several  ways;  as  a  vector 
space,  as  an  event  tree^vhose  branches  comprise 
rK*  -@t  of  alt  future  scenarios,  as  a  sample 


space,- or  as  some  combination  of  these.  A  sce¬ 
nario  is- viewed  as  consisting  of  two  parts:  On¬ 
stage  setting  into  which  the  system  is  intro¬ 
duced  and  ,the  subsequent  unfolding  of  acts  and 
events, that  details. the  future  with  the  system 
deployed.  More  than  one  scenario  is  possible 
and,  in  fact,  all  potential  futures  for. a  system 
comprise- an  infinite  set.  Some  care  must  be 
taken  to -develop  an  efficient,  manageable  set  of 
scenarios  that  will  allow  for  valid  system  eval¬ 
uation  and  that  will  also  be  cost  efficient. 
Such' a  set  of  scenarios  should  validly  represent 
the  future  In  which  the  system  will  be  deployed 
while  at  the  same  time  discriminate  among  alter¬ 
native  system  designs  in  terms  of  value  differ¬ 
ences.  These  two  requirements  will  most  likely 
be  In  conflict,  the  first  yielding  broad,  gener¬ 
al  scenarios  while  the  second  requires  fairly 
specific  scenarios. 

The  value  differences  referenced  are  repre¬ 
sented  as  level's  of  attributes  in  Outcome  Space, 
which  is  the  third  space  depicted  in  Figure  1. 

As  with  the  previous  two  spaces,  Outcome  Space 
can  be  visualized  as  a  vector  space,  and  at¬ 
tributes  in  Outcome  Space  can  be  types  of  per¬ 
formance,  different' "iHties"  such  as  surviv¬ 
ability,  or  different  attributes  such  as  "world 
political  stability".  Outcome  Space  contains 
all  attributes  relevant»:to  specification  of  the 
outcome  of  an  Option  Space,  Scenario  Space  com¬ 
bination,  and  one  can  think  of  these  attributes 
as  structured  in  a  hierarchy  in  which  descending 
levels  contain  subattributes  of  increasing 
specificity. 

The  fourth  space  in  Figure  l,  Value  Space 
illustrates  an  important  fact,  which  is  that  the 
same  outcomes  have  different  values  to  different 
populations.  For  the  S.D.I.  example  in  Figure 
1,  different  agencies  such  as  DoD,  Congress. 
^DTO,  the  general  public,  and  the  Soviets  ha** 
Ifferent  values  for  the  same  <e*  of  ou*cep* 
and  value  trade. nffa  amo*- 
butes  of  Outcome  Space  may  weli  be  different  tor 
these  different  populations.  Thus,  the  same 
point  In  Outcome  Space  can  map  into  a  large  num¬ 
ber  of  points  in  Value  Space. 

Another  important  point  with  respect  to 
system  design  that  is  often  neglected  by  those 
who  emphasize  performance  simulation  as  the 
major  aspect  of  system  evaluation,  illustrated 
In  Figure  2,  is  that  the  same  levels  of  overall 
system  performance  can  be  achieved  by  different 
systems  that  have  very  different  values  on  other 
attributes  of  Outcome  Space  such  as  affordabili¬ 
ty,  feasibility,  and  survivability.  While  this 
Is  no  revelation  to  system  evaluators,  what  to 
do  about  this  has  usually  been  overlooked. 

These  attribute  trade-offs  are  not  after  the 
fact  evaluation  Issues.  Rather,  they  are  deci¬ 
sion  Issues  that  are  relevant  to  the  design 
problem  and  should  be  examined  and  resolved 
before  highly  detailed  system  design  and  testing 
rake  place.  To  do  so  is  difficult  work  and  pare 
of  this,  of  course,  involves  a  good  mission  ana- 
lvsis  (so  often  neglected),  but  another  part 
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the  policy  analysis  that  addresses  those  complex 
value- trade-offs  characterized  by  Outcome  Space/ 
Value  Space •combinations.  Which  is  the  best  way 
to  achieve  a  given  desired  level  of  performance? 
One  way  would  be  to, deploy  a  large  number  of 
lower  performance  platforms  that  represr \c  a 
feasible,  near-teru  technical  solution.  A* 
second  way  would  be  to  go  for  a  core  risky,  less 
feasible  but  higher  performance  technical' solu¬ 
tion  that  will  lead  to  fewer  required  platforms 
and  will-achleve  the  same  performance  levels. 
Costs  will  differ,  including  development  costs, 
doMoyment  costs,  and  replacement  costs  to  »e 
•  w, 

FIGURE  2 

Mapping:  Option  Space  to  Oulcomc  Space 


DBase-, 

emso  -  ?| 
dbeeo ' 


What  about  political  aspects?  How  much  of 
this  should  bo  examined  up  front?  For  S.D.X,, 
much  of  the  answer  to  this  question  lies  with 
the  policy  analysts  whose  domain  Involves  the 
political  intricacies  of  developing  a  system 
where  different  options  also  represent  different 
political  positions.  One- thing  seems  clear, 
however,  and  that  is  the  desirability  of  answer¬ 
ing  so  many  of  these  value  trade-off  questions 
early  In  the  design  process.  A  decision  must  be 
made  with  respect  to  those  attributes  relevant 
to  evaluation  of  this  design  problem.  The 
problem  of  developing  measurement  scales  for 
these  attributes  must  also  be  addressed,  and 
that  problem  will  not  be  discussed  here  save  to 
state  that  such  scales,  if  they  are  to  have  much 
value,  vtU  preh-ihly  be  •peel lie  to  the  evalua- 
,oe-  "«  Mea¬ 

sures  of  Effectiveness  (HOEs)",  while  having  a 
nice  ring  to  It,  sounds^ilke  having  generic 
measures  of  beauty.) 

The  message  of  this  theoretical  Introduc¬ 
tion  is  simple,  that  value  trade-offs  relevant 
to  system  development  should  be  addressed  up 
front  in  the  design  process  and  in  an  organized, 
methodical  fashion  that  yields  design  direction. 
In  order  to  do  so,  some  evaluation  tools  are  re¬ 
quired.  With  S,D. I ,  as  with  most  other  major 
system  developments,  performance  simulations 
will  be  necessary,  and  numerous  simulation 
models  exist,  ?ach  of  which  answers  some  part  of 
the  performance  simulation  problem,  and  none  of 
which  does  the  complete  Job.  The  more  compli¬ 
cated  the  simulation,  the  more  expensive  it  is 
►a  •'’tn,  change,  and  understand.  But  the  system 


evaluator  need  not  shrink  in  fear. of  these  «.  <  m- 
ingly  ominous  considerations.  Rather,  he  should 
plan  to  do  what  he  will  eventually  be  forced  to 
do  anyway,  and  that  Is  to  use  what  he  has  when 
he  has  to  make  his- decision.  How  to  do  this 
will  be  discussed  later  when  the  concept  of  an 
attribute' bank  is  introduced. 


Figure  3  illustrates  the  use  of  the  ap¬ 
proach  to  evolve  architectures.  As  Indicated  in 
the  figure,  the  process  involves  first  specify¬ 
ing.*  relevant  scenario  (Step  1),  specifying  the 
required  effectiveness  in  tho  scenario  (Step  2), 
and  identifying  an  initial  architecture  (Step  3) 
that  will  yield  the  desired  effectiveness.  That 
architecture  is  then  "deployed"  in  the  scenario 
and  the  remaining  scenario  details  (part  of  Step 
4)  of  the  scenario  are  developed.  This  can  be 
done  using  a  computerized  simulation  t,o» estimate 
performance,  or  by  using  a  Judgmental  approach 
such  as  step-through  simulation  (see  Ulvila,  J, 
and  Brown,  R.V.,  1978).  The  assessment  of  sys¬ 
tem  performance  and  other  attribute  levels  Is 
accomplished  in  Outcome  Space.  Part  of  this  in¬ 
volves  verification  that  the  proposed  system  ac¬ 
tually  yields  the  desired  performance.  The 
detail  to  which  performance  can  be  modeled  at 
this  point  is  an  Issuo.of  paramount  importance. 
The  goal  is  not  to  obtain  two-digit  or  better 
performance  estimate  accuracios,  but  rather  to 
examine  value  trade-offs  in  detail.  Such  trade¬ 
offs  will  involve  Intersystea  performance  trade¬ 
offs  as  well  as  trade-offs  between  performance 
and  other  attributes  such  as  cost,  political 
stability,  etc. 


Uslnj;  llic  Approach  lo  fivolvc  Architectures 


Quite  Sul  VUuiltjMXI  M(MINU  UuV-XI 
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By  examining  attribute  levels  associate- 
with  the  proposed  system  including  cost, 
•ilities",  political,  social,  and  other  out- 
scaes,  potential  improvements  are  identified  anc 
prioritized  (Steps  4  and  5  in  Figure  3;.  The 
architecture  is  then  reworked  with  the  desigr«*r 
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and  Improvements  (with  respect  to  attributes) 
are  sought  (Steps  6  through  8).  Note  that  this 
can' be  an  exploratory  policy  analysis  at  this 
point.  Analyses  can  be  judgmental.  Performance 
estimates  can  be  expert  assessments  because  ar¬ 
chitecture  differences  yielding  different  attri¬ 
bute  levels  with  respect  to  major  political .and 
social  issues  will.be  major  differences,  and 
detailed  performance  assessments  may  not  be  re¬ 
quired  even  If  sufficient  detail  exists' to  make 
such  estimates. 

Alternatively,  such  analyses  may  require 
detailed  performance  simulation.  For  an  SDI  ex¬ 
ample,  consider  an  architecture  that  yields  ac¬ 
ceptable  leakage  protection  in  a  scenario,  but 
is  designed  such  that  its  surveillance  system 
and  weapons  are  deployed  at  fairly  low  levels 
thus  having  increased  vulnerability  to  anti- 
satellite  weapons  over  systems  in  higher  orbit. 
Suppose  further  that  the  performance  simulation 
does  not  address  the  dynamics  of  satellite  at¬ 
tack.  That  is,  vulnerability  is  not  addressed 
in  the  simulation,  Then  several  different  ar¬ 
chitectures  can  be  designed,  each  yielding  dif¬ 
ferent  leakage  performance,  and  each  having  dif¬ 
ferent  vulnerabilities.  The  two  attributes  are 
assessed  separately  and  then  addressed  in  value 
trade-offs.  Which  is  better,  Increased  perfor¬ 
mance  with  increased  vulnerability  or  vico 
versa?  Depending  on  simulation  complexity,  such 
off-line  analyses  will  be  required. 

It  is  easy  to  see  that  this  early  trade-off 
analysis,  involving  an  approach  such  as  Multlat- 
. tribute  Utility  Assessment  (HAVA- -see  O'Connor, 
1985)  can  be  of  different  levels  of  generality 
and  can  also  be  an  exploratory,  iterative  analy- 
sis  that  Involves  "excursions  in  Outcome  Space", 
For  example,  the  implications  for  architecture 
design  of  stressing  early  technical  feasibility, 
survivability,  political  acceptability,  low 
life-cycle  cost,  graceful  degradation,  etc.  can 
be  explored.  The  crucial  point  hero  is  tho  link 
between  Outcome  Space-Value  Space  trade-off  ana¬ 
lysis  and  design  implications, 

Ihe  level  of  precision  here  need  not  be 
that  of  a  simulation  that  estimates,  for  exam¬ 
ple,  leakage  in  terms  of  the  number  of  re'"*  v 
Icles  (RVs)  striking  the  Continental  Ui  ,ul 
*es  (COtflCV  an  S  n  I 

meaningful  measurement  scales  for  attributes 
should  be  used,  and  they  can  be  defined  as  rela¬ 
tive  to  the  attribute  levels  of  the  architec¬ 
tures  under  consideration.  As  more  precision 
and  detail  are  required,  more  specific  measure¬ 
ment  devices  may  be  required,  This  will  be  dis¬ 
cussed  later. 

Once  the  architecture  trade-offs  have  been 
examined  for  this  first  scenario,  the  same  pro- 
cess  must  be  repeated  for  the  other  relevant 
scenarios  (Step  10).  This  is  most  relevant  to 
performance  estimates,  although  changes  in  sce¬ 
nario  can  affect  levels  of  other  attributes 
also.  An  example  is  survivability  If  it  is  not 
part  of  the  performance  assessment  be  discussed 


in  the  example  above.  Another  example  would  be 
political 1  acceptability. 

Note  that. any  architecture  changes  made 
which  would  yield  attribute  levels  in  subsequent 
scenarios  analyzed  will  potentially  affect  at¬ 
tribute  ’levels  in  earlier  scenarios,  and  checks 
must  be  made  to  ensure  that  this  has  not  oc¬ 
curred.  If  it  has,  it  must  be  noted,  and  either 
a  compromise -design  must, be  achieved,  or  a  deci¬ 
sion  must  be  made  to  go  with  one  or  the  other  of 
the  designs  in  question.  Thus,  interscenario 
performance; trade -offs  are  yet  another  aspect  of 
the  organized  trade-off  analysis. 

Most  of  the  iteration  between  scenarios  and 
the  impacts  of  design  changes  across  scenarios 
as  discussed  will  involve  somewhat  specific 
details  relevant  to  performance. assessments. 
Other  broader  attribute  trade-offs  relevant  to 
such  issues  as  policy  analysis  will  often  re¬ 
quire  fairly  broad  scenario  differences.  For 
example,  a  different  scenario  might  be  relevant 
to  discriminations  among  designs  with  respect  to 
each  of  several  attributes.  This  issue  is  too 
extensive  to  discuss  here.  For  a  detailed  dis¬ 
cussion  see  O'Connor  and  Edwards,  1977, 


The  issue  of  quantification  of  attributes 
in  trade-off  analysis  and  the  related  Issue  of 
moasures  of  effectiveness  were  introduced  in 
Section  2,1.  This  section  will  expand  on  thu 
discussion.  The  issue  of  validity  and  reli¬ 
ability  of  subjective  value  assessments  is  one 
with  which  practitioners  of  decision  analyse* 
are  familiar.  Decision  analyses  involving  one 
time- evaluation  of  decision  options  usually 
* "^elfy  attributes  using  relative  intra- 
ir.\ute  value  scales  with  ranges  determine 
*«  >■••»*>«  . ,  •  -  . 

who  seek  to  develop  more  global  measures  of 
■effectiveness’,  value,  utility,  or  tho  like  ,o 
be  applied  more  than  once  to  different  sets  of 
options  must  find  intra-attribute  value  scales 
whose  ranges  include  all  potential  options  that 
may  be  considered.  Tills  Is  a  problem  faced  by 
those  who  develop  measures  of  effectiveness 
(MOEs),  This  can  be  a  difficult  problem  and, 
thus,  arises  the  issue  of  relative  versus  ab¬ 
solute  measurement  scales,  or  in  measurement 
theory,  the  related  issue  of  the  uniqueness 
problem.  It  Is  fairly  simple  to  determine  an 
appropriate  measurement  scale  for  the  height  of 
potential  basketball  team  candidates.  It  is 
quite  another  to  define  a  measurement  scale  for 
the  attrlbute^known  as  Battle  Management/ 
Command,  Control,  and  Communications  (BM/C3) 
system  effectiveness.  In  fact,  even  defining 
the  attribute  is  difficult  let  alone  defining  an 
appropriate  MOE. 

The  focus  of  this  paper  is  not  tho  estab¬ 
lishment  of  measures  of  effectiveness  for  BM/C3 
systems,  although  that  was  a  required  part  of 
the  actual  evaluation.  The  focus  is,  how«vei 
rtn  use  of  trade-off  analysis  in  the  df^.,. 
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process,  and  such  analysis, necessarily  Involves 
quantification  of  attributes.  An  earlier  recoa- 
oendatio’n  made  In  this  paper  was  that  the  eval¬ 
uator  faced^with  the  problem  of  Implementing ,a 
system- design  evaluation  should  use  the  tools  at' 
his  disposal  and,  get  on  with  th^task>  Often 
too  much  concern  ls,placed  on  the  so  called 
•apples, and  oranges"  problem,  and  large  amounts 
of  time  and/or  money;  are  spent  In  the ^develop¬ 
ment  of  detailed  performance  siaulatlShs  that 
will  have  all  the  properties  deemed  necessary  to 
address  the  relevant  trade-off  issues  Involved. 
In  the  application  used  as  an  example  for’ this 
discussion,  numerous  simulations  of  parts  of 
S.D.I.  system  performance  were  'available,  but 
none  directly  represented  the  specific  BM/CJ  to 
system  (weapons  and  sensors) 'trade-off  issues  In 
the  BM/C2  architecture  evaluation.  Because  time 
and  resources  were  not  available,  there  was  no 
choice  but  to  ..proceed  using  the  tools  (and  the 
contractors)  available  at  the  time.  The  attri¬ 
bute  bank  was  developed  as  a  means  of  organizing 
that* evaluation,  and,  at  the  same  time,  attack¬ 
ing  the  so  called  "apples  and  oranges*- problem. 

Figure, 4  lists  the  characteristics  of  the 
attribute  bank  approach  used  In  the  development 
of  methods  for  assessing  the  worth  of  BM/C3  at- 
chltectures. being  designed  In  studies  for  the 
-  "DC.  The  bank  consists  of  a  hierarchy  o 
osed  evaluation  attributes  which  procee 


slvely  more  specific  measures  at  each  hierarchy 
level.  Similarly,  the  hierarchy  contains  simu¬ 
lated  measures  to  the  left  and  expert  assess¬ 
ments  to  the,  right.  Thus,  the  uppermost  left- 
hand  corner  of  the  hierarchy  will  have  aggre¬ 
gated,  simulated  measures  and  the  lower  right- 
hand  part  of  the  hierarchy  has  export  Judgments 
with  respect  to  highly  specific,  disaggregated 
attributes.  Although  this  dlscusslonls  most 
amenable  to  performance  assessments,  It  Is  also 
relevant  to  the  broader  txadvoff  analyses  re¬ 
quired  for.  the  design  process. 
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Figures  5  and  6  Illustrate  some  of  the 
niorarchy  for  evaluating  the  worth  of  BM/C  ar¬ 
chitectures.  Figure  5 -represents  the  highest 
level  whereas  Figure  C  decomposes  the  node  num¬ 
bered  112132,  BM/C2  system  effectiveness  For 
each  node  in  the  hierarchy,  a  definition  was 
developed  w|*h  an  accompanying  discussion  o{ 


measurement  detail.  inis  detail,  is  u».aiiM 
in  an  evaluation  handbook  {set  0't«»  1^6  } 
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Overall  OMD*.’  Decomposition 
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For  many  of  the  attributes,  performance 
simulations  were  available,  and  the  outputs  were 
characterized  alternatively  as  measures  of  sys¬ 
tem  effectiveness,  measures  of  effectiveness, 
measures  of  performance,  or  simply  expert  as¬ 
sessments.  Examples  of  simulation  outputs  ap¬ 
pear  in  Figure  7.  For  other  attributes,  analy¬ 
sis  or  expert  assessments  nay  be  required.  The 
point  of  the  hierarchy  is  to  integrate  all 
aspects  of  the  effectiveness  evaluation  into  an 
organized  framework  and  to  focus  trade-off 
analyses. 

In  evaluating  performance ,  an  overall  mea¬ 
sure  is  desirable  such  as  that  for  node  1121, 
overall  BM/C3  performance.  However,  any  simula¬ 
tion  capable  of  assessing  such  a  complicated, 
highly  aggregated  performance  will  necessarily 
be  highly  detailed  and  potentially' difficult 
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understand.  The  evaluator  oust  understand  the 
simulation  used  or  have- a  translator,  a  go  be¬ 
tween  who  can  translate  the .model  outputs  into 
language  the  evaluator  can  follow.  Theoreti¬ 
cally,  if  the  evaluation  is  driving  the -simula¬ 
tion  and  not  vice  versa  (which  is  often  sadly 
the  case)  the  outputs  will  answer  evaluation 
questions.  The  point  of  the  trade-off  analysis 
based  on  the  attribute  bank  structure  is'to  as¬ 
sure  this. 
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Performance  Modelling 
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Any  simulation,  however  good,  will  omit 
certain  aspects  of  system  worth,  and  the  attri¬ 
bute  bank  will  contain  nodes  indicating  that 
aspect  of.-worth  and  a  potential  measure. 
'Familiarity  with  the  particular  tools  used  for 
evaluation  will  allow  mapping  to  the  nodes  of 
the  bank  that  are  covered  and  will  pinpoint 
those  attributes  not  covered.  They  can  be 
separately  assessed  through  analysis  or  Judgment 
and -the  results  can  be  combined  with  simulation 
outputs  to  yield  a  complete  evaluation.  Often 
decision-analytic  trade-off  analysis  will  be^re- 
qulred  to  accomplish  the  Integration  of  such 
measures,  but'thls  is  an .Implementation  proce¬ 
dural  issue  as  opposed  to  a  theoretical  problem. 

An  example  of  this  problem,  that  was  dis¬ 
cussed  ealler,  is  when  a  performance  simulation 
is  used  to  estimate  system  performance  using 
leakage.  However,  survivability  aspects  of  cer¬ 
tain  components  are  not  included  In  the -simula¬ 
tion.  The  simulation  can  be  methodicallj'  run 
for  several  different  architectures,  the  sur¬ 
vivability  of  which  can  be  separately  assessed. 
Two  attributes  can  then  be  defined;  leakage  per¬ 
formance  without  attack  by  the  enemy  and  sur¬ 
vivability.  The  trade-offs  between  the  two  at¬ 
tributes  can  be -assessed  and  architectures  lo¬ 
cated  on  each,  Kota  that  the  issues  of  inde¬ 
pendence  in  Option  Space  and  value  independence 
in  Value  Space  must  be  carefully  addressed  in 
,such  analyses. 


Such  an  organized,  thorough  evaluation  is 
not  easy,  even  If  planned  a  priori  using  trade¬ 
off  analysis  as  is  recommended  here.  Informa¬ 
tion  such  as  that% appearing  in  Figure  8  on  eval¬ 
uation  Issues  covered  must  be  organized- in  the 
attribute  bank  so  that  the. evaluators  know  what 
issues  are  covered,  to  what  degree,  and  by  vhat 
instrument.  The  evaluators. then  have  control 
over  the  evaluation  issues  and  can  use  the  ex¬ 
pertise  available’' to  them  in  a  continuation  of* 
the  organized  trade-off  analysis  as  discussed 
earlier. 

The  evaluator  picks  the  Issues  that  are 
relevant  to  the  evaluation  at  hand  using  the  at¬ 
tribute  bank.  Examples  appear  in  Figure  8.  The 
mapping  of  available  performance  models  to  the 
attribute  bank  allow  for  a  choice  of  attributes 
to  be  assessed  using  either  performance  models, 
analyses,  or  expert  assessments.  Where  a  model 
lacks  coverage  of  a  specific  aspect  of  system 
design  and  related  performance,. assessments  are 
obtained  with  respect  to  that  attribute  and  are 
combined  either  Judgmentally  using  a  form, of 
trade-off  analysis  or  by  an  integrated  applica¬ 
tion  of  available  models.  The  latter  process  is 
further  described  in  Section  3.0. 

FIGURE  8 

Evaluation  issue  Area's 
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3.0  Procedures  Used  in  Applying  the  Methodology 

ty.thc,.8.Pil.-6S2y 

Evaluation  Problem;  An  Example 


3.1 

In  this  section,  the  difficult  problem  of 
assessing  the  worth  of  different  BM/C3  struc¬ 
tures,  will  bo  addressed  indicating  how  the 
trade-off  analysis  should  proceed  using  the 
tools  that  are  available.  In  Figure  9,  the 
'BM/C3  to  systems  iterative  integration  process 
is  illustrated.  A  problem  with  S.D.I.  BM/C3 
evaluation,  and  with  C3  evaluation  in  general 
relates  to  the  “force  multiplier”  problem.  ”C3 
does  not  kill  people,  bullets  dol”  This  argu¬ 
ment  is  old  and  ived  not  be  discussed  here  save- 
to  indicate  that  most  simulations  emphasize 
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veapoa  and  shsutr  characteristic*  *»S  cocfig^a- 
tloas  while  mieixlrlmg  represestatisa  of  K/C' 
duricwriJilcf.  pirtly  btceae  of  tie  diffi¬ 
culty  of  Isclediag  all  of  ties*  decalls  la  ccx 
simalatioa.  Tbe  system  dycaalcs  r*?res«£awico 
for  a  problem  like  S.D.I.  is  already  fcge  for 
siaply  tbe  weapoa  asd  seaser  perfcrmaace  ail¬ 
ing  without  cosslderirg  the  iuarf  complicated 
derails  of  SVC3. 

Thus,  it  is  usually  the  case  la  Z£/<? 
design.  that  veapoa  aad  sensor  parameters  are 
constraints  «i  the  2 a/C3  systea  a^J  not  -rice 
versa.  Figure. 9  represents  aa  alternative  ap¬ 
proach  in  which  reasonable  boe=*ds  oa  the  5M/CT 
systea  serve  as  constraints  which  Halt  the 
range  of  allowable  veapoa  and  sensor  para- 
neterst  and,  thus,  the  W/u  becomes  the 
-driver-  of  the  design  optixizaticn.  Given  the 
great  uncertainty  vlth  respect  zooSH/Cr  feasi¬ 
bility.  this  Is,  Indeed,  appropriate. 
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In  Figure  10,  the  guidelines  developed  for  EM/C 
by  the  vell-knovn  Eastport  Study  Croup  are  pre¬ 
sented.  This  group  was  concerned  with  BM/C3 
feasibility.  In  particular  software  and  algo¬ 
rithm  feasibility.  As  Indicated,  that  group 
argued  that  BM/C3  should  be  an  integral  systea 
component  of  the  design  and  not  sicply  ah  ap¬ 
plique  added  after  thorough  consideration  of 
weapons  and  sensors.  The  evaluation  problea 
then  becomes  one  of  ascertaining  the  icpact  of 
tKese  recommendations,  if  adopted,  on  perfor¬ 
mance  and  associated  systea.  While  It  was  pos¬ 
sible  to  develop  soatf'  off-line  assessment  of/ EM/ 
C3  perfomar.ee  icpact  and  Integrate  this  vlth 
other  neasures  using  trade-off  analysis  as  dis¬ 
cussed  in  Section  2.0,  It  was  believed  that  a 
mo-e  integrated  assessment  of  weapon-sensor/ 
BM/C3  performance  tr«de-offs  was  required.  The 
question  to  be  answered  is  displayed  in  Figure 
11.  Given  definition  of  the  axis  labeled  as  BK/ 
C3  simplicity,  which  was  the  correct  curve7  The 
dotted  line  represents  required  performance  in 
the  scenario,  and  It  Is  necessary  to  decide 
where  on  t ho*  BM/C3  continuum  to  locate  to  assure 
that  requirements  are  fcet. 
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Pcr(3nuaM/BU/C3  Tradeoff 


While  numerous  slsulatlons  of  total  systea 
performance  were  available  for  the  evaluation, 
none  of  those  a/ailable  provided  detailed  repre¬ 
sentation  of  overall  S.D.I.  systea  performance 
(e.g..  R.V.  leakage  into  COKUS)  as  a  function  of 
weapon  details,  sensor  details,  and  sicllar  lev¬ 
els  of  detail  with  respect  to  EM/C3  characteris¬ 
tics  such  as  organizational  structure,  communi¬ 
cations  throughputs,  EM/C3  processor  through¬ 
puts,  etc.  Those  that  were  large,  detailed, 
sultitiered  aodels  generally  provided  detailed 
dynamic  representation  of  threats,  weapons,  and 
sensors,  but  little  or  no  representation  of  BM/ 
C3  characteristics.  (For  example,  the  version 
of  D.I.D.S.I.M.,  Defense  lr.  Dep  Ji  Simulation, 
available  assumed  Instantaneous  communications 
between  nodes  and  a  centralized  BM/C3  management 
structure,  later  versions  were  under  develop¬ 
ment  to  change  these  simulation  characteris¬ 
tics.)  How  could  the  evaluation  be  accomplished 
with  the  tools  at  hand? 

The  next  few  charts  display  the  recommended 
procedure  for  the  evaluation  problea  described 


Assae  Air  a  simulation  off  overall  ycrffc face 
1*  available  Air  accurately  portrays  vuyoa  joi 
sesacr  characteristic*  and  rescltaetr  ^rfoancc 
Impacts.  (Jcatroct  detailed  simulations.  e-g-. 
DI3SIS.  wre  available  at  tie  time.)  Figure  12 
Illustrates  Ac  first  step  in  tie  yroce&rc. 
the  system  is  optimized  in  terms  off  rrrfwrs. 
laca tires,  and  capabilities  off  weapon  and  sensor 
parameters  in  detailed  performance  trade- off ff 
studies.  Impacts  off  «sjor  weapon  and  sensor 
characteristics  are  identiffied  a=d  qaastiffied 
(e.g.,  aidcocrse  tier  leakage).  At  this  point, 
JH/C:  characteristics  hare  swt  been  Introduced. 
SK/C3  essentially  is  assumed  to  be  a  •perfect" 
system,  i.e*.  no  UK/Cr-lafcced  performance 
decrements  are  assumed. 
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Kext  use  the  attribute  bark  to  develop  a 
set  of  8 H/Cr  related  attributes  to  be  varied  in 
the  evaluation.  Identify  major  structure  and 
capability  impacts  and  a  method  to  characterize 
performance  Impact s.  Examples  of  such  BM/C3  at¬ 
tributes  appear  in  Figure  13.  Using  these- 
details,  develop  the  BM/C3  structure  that  yields 
appropriate  attribute  levels  and  overlay  It  on 
the  simulation  by  Indicating  vhlch  functions 
will  be  performed  where,  which  information  will 
be  available  to  which  platforms,  and  what 
threats  can  be  engaged  as  a  result.  This  step 
Is  detailed  in  Figure  14.  An  example  with 
respect  to  such  attributes  as  performance,  sur¬ 
vivability,  and  feasibility  is  a  highly  central¬ 
ized  EM/C3  architecture  versus  a  completely 
autonooous  one: and  the  EM/C3  management  algo¬ 
rithms  required  for  esch.  For  the  centralized 
structure,  the  system  can  utilize  weapons  and 
sensors  to  engage  threats  In  an  optimal  overall 
fashion.  For  the  autonomous  architecture,  each 
weapon  must  engage  the  threats  In  the  order  it 
encounters  them  until  It  runs  out  of  "bullets”. 
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Evaluation  Procadcre  (Continued) 
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At  this  point  only  the  B M/C3  management 
structure  is  modeled  in  terms  of  information 
available  and  decisions  made.  No  delays  due  to 
communications  or  processors  are  Included. 
Clven  the  analysis  thus  far,  the  impact  of  In¬ 
creased  simplicity' should  be  decreased  S.D.I. 
system  performance  as  illustrated  In  Figure  15 
in  which  simplicity  Is  represented  as  degree  of 
Battle  Manager  Coordination  (BM  -  Battle  Mana¬ 
ger;  LBH  -  Local  Battle  Hanager;  BG  -  Battle 
Croup). 
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However,  there  ere  costs  to  centralization 
thee  ere  cot  represented  at  this  point.  Tims 
far,  the  B M/C3  network  has  been  assume d  to  cause 
no  delays,  and  weapons  and  sensors  receive  In¬ 
formation  as  required  to  operate  within  their 
respective  cycles.  However,  the  more  central¬ 
ized  architecture  will  involve  detailed  commu¬ 
nications  and  processing  delays  that  will  not  be 
Incurred  in  the  autonomous  battle  groups.  Thus, 
an  estimate  of  such  delays  must  be  Included. 
Another  Issue  here  is  key  node  vulnerability  and 
the  potential  for  catastrophic  failure  of  the 
system  through  system  fault  or  enemy  destruc- 
*  tlon.  One  of  the  Eastport  recommendation*  Is 
for  a  separate,  dedicated  commications  net¬ 
work.  A  separate  communications  simulation  can 
be  run  to  Include  battle  managers  and  communica¬ 
tions  nodes  and  It  can  be  used  to  estimate  com¬ 
munications  and  processing  delays  due  to  the  3M/ 
C3  network.  (Such  simulations  were  available  at 
the  time.)  Although  this  is  not  the  same  as  a 
complete  representation  of  the  entire  network, 
it  must  suffice  given  the  lack  of  the  "complete" 
simulation.  Given  such  a  modeling  effort,  com¬ 
munications  and  BM/CZ  processor  delays  can  be 
estimated  and  inserted  into  the  simulations  as 
delays  in  sensor  and  weapon  performance.  This 
concept  is  illustrated  In  Figure  16.  The  exact 
method  for  doing  this  depends,  of  course,  on  the 
simulation.  The  resultant  system  performance  is 
then  estimated  and  the  outcome  might  be  similar 
to  the  illustration  In  Figure  17. 
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Leakage  Assessed  For  Different  BU  Structures  and 
Associated  Command  Processing  Delays 


3.2  flip—*™ 

The  approach  described  here  allows  the  es¬ 
timation  "ct  -required  BM/C3  characteristics  given 
weapon  and  sensor  parameters  and  it  also  allows 
estimates  of  system  performance  given  "reason¬ 
able*  BM/C3  parameter  values  derived  from  models 
of  the  Kiy  network.  In  the  implementation 
discussed  here,  it  is  recommended  that  the  at¬ 
tribute  bank  serve  as  a  guide  to  the  procedures 
adopted  to  ensure  complete  and  systematic  cover¬ 
age  of  all  BM/C3  characteristics. 

The  approach  described  here provided  for 
evaluation  of  the  impact  of  M/C*  architectures 
on  the  same  measure  of  performance  as  that  used 
In  modeling  weapon  and  sensor  system  perfor¬ 
mance.  This  provides  a  capability  for  modeling 
BH/C3  versus  sensor  or  weapon  trade-offs  which 
is  often  perceived  to  be  a  more  "valid"  analy¬ 
sis.  It  also  allowed  for  completion  of  the 
evaluation  within  the  tine,  funding,  and  orga¬ 
nizational  constraints  existing  at  the  tine. 

In  a  particular  evaluation,  it  may  be  quite 
feasible  to  develop  completely  new  simulations 
ofe  performance  that  Include  all  system  detail 
relevant  to  architecture  performance  trade-off 
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considerations.  That  would  not  change  the  de¬ 
sirability  of  using  the  attribute  bank  approach 
to  integrate  the  evaluation  and  to  focus  an  a 
priori  trade-off  analysis  to  identify  the  arj 
chitecture  characteristics  for  which  key  perfor¬ 
mance  or^ effectiveness  simulations  are  to  be 
developed.  This  structured  approach  will  give 
the  program  manager,  who  In  the  end  must  make 
the  crucial  decisions,  control  of  the  evaluation 
'  from  beginning  to  end,  and  he  will  not  have  to 
rely  on  tools  or -reports  that  do  not  directly 
focus  on  the  evaluation  issues. 
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ANALYSIS  OF  8 M/C3!  SYSTEM  PERFORMANCE 


by 

^  Dr.  Thomas  E.  Monarty 

Unded  Technologies  Systems  Analysis 
McLean, Virginia 


1.  INTRODUCTION 

The  paper  addresses  the  analysis  of  the  performance  of 
BM/C3!  systems  wtfhm  the  overall  context  of  large  scale  mffiaiy 
operations.  The  second  section  develops  the  natural  hierarchy  of  sys¬ 
tems  within  military  operations  and  the  points  of  view  of  the  various 
decision  makers  that  work  with  elements  of  the  hierarchy.  The  cor¬ 
responding  hierarchy  of  models  is  then  presented  along  with  a  dis¬ 
cussion  ot  the  limiting  factors  in  the  models  at  various  levels.  Section 
3  discusses  the  cnwaHy  of  BM/C3!  issues  in  determining  the  effec¬ 
tiveness  ot  systems  in  a  large-scale  military  iteration.  In  Section  4, 
various  measures  of  effectiveness  are  compared,  with  emphasis  on 
‘rxiing  the  proper  context  for  judging  the  comparative  mSaary  utity 
of  alternative  systems.  The  fifth  section  of 'this  paper  compares  the 
various  analysis  methods  including  simulations,  simulators;  war- 
games.,  and  exercises:  and  it  shows  how  they  aB  fit  together  to 
develop  a  comprehensive  analysis  of  BWrC3!  system  utility.  Section  6 
presents  a  top^Jown  modeling  method,  cafled  the  Combat  Informa¬ 
tion  Flow  Mode),  which  has  proven  useful  In  analyzing  BM/C3!  sys¬ 
tems  In  various  disciplines.  The  final  section  certains  a  summary  of 
the  saSent  features’of  the  paper  and  draws  several  important  con¬ 
clusions. 

2.  SYSTEM  ANO  MODELING  HIERARCHIES 

Military  systems  can  be  conceptualized  within  a  natural 
hierarchy  that  is  arranged  according  to  increasing  scope  or  entities 
included.  As  shown  m  figure  1,  the  lowest  level  of  the  system  hierar¬ 
chy  consists  of  Components  &  Assemblies  -  devices  which  are  not 
functional  when  they  are  taken  apart.  Components  &  Assemblies 
combine  to  form  Subsystems,  which  in  turn  combine  to  form  Sys¬ 
tems.  to  general.  Systems  are  characterized  by  the  capabBty  to  do 
damage  to  the  enemy  or  aid  in  achieving  military  objectives.  Systems 
become  Weapon  Systems  when  property  combined,  usually  with 
human  bemgs  included  to  provide  direction  arxVor  decision  making 
Weapon  Systems  are  brought  together  to  form  Fighting  Units,  groups 
of  weapon  systems  and  people,  which  requiro  increased  human 
coordination  to  order  to  function  properly.  As  fighting  Units  are 
brought  together,  they  must  coordinate  their  efforts  to  prosecute  a 
conflict  over  a  significant  geographic  area,  and  these  combined  units 
are  usually  termed  Sub-Theater  Forces,  finally,  when  dealing  with  the 
entire  scope  of  a  military  conflict,  the  system  k  termed  a  theater,  and 
the  entities  involved  in  the  activity  are  usually  called  Theater  Forces. 
At  the  Theater  Force  level,  considerable  emphasis  must  be  placed  on 
such  issues  as  doctrine,  strategy  and  the  management  ol  the  battle, 
as  of  which  are  implemented  via  the  Command.  Control  and  Com¬ 
munication  systems.  It  should  also  be  noted  that  the  time  window  ol 
interest  increases  by  orders  of  magnitude  as  one  goes  upward  In  the 
hierarchy.  Components,  Assemblies  and  Subsystems  often  complete 
their  functions  in  seconds,  whereas  Sub-Theater  and  Theater  Force 
performance  is  often  assessed  over  penods  of  days,  weeks  or  even 
months. 


An  important  consideration  in  the  hierarchy  of  military  sys¬ 
tems  is  the  perspective  taken  by  decision  makers  at  various  levels 
Referring  again  to  figure  1,  the  engineenng  and  design  decisions 
tend  to  focus  on  subsystem  and  system  hardware  issues.  The 
operators,  usually  the  military  users  of  the  weapon  systems,  tend  to 
emphasize  the  performance  of  the  weapon  systems  In  the  field,  as 
they  interact  with  the  other  elements  of  the  fighting  units.  The  upper 
levels  of  the  hierarchy  are  of  particular  Interest  to  the  senior  military 
and  civilians  that  set  the  policy  and  continuously  make  difficult  torce 
structure  decisions  in  the  face  of  budget  limitations  The  increased  in¬ 
volvement  ol  BM/C3!  phenomena  m  systems  that  are  high  in  the 
hierarchy  requires  that  high-level  policy  makers  be  concerned  about 
BM/C?I  capabilities  m  their  decision  making  processes. 

The  modeling  hierarchy  in  notary  systems  analysis  (See 
figure  2)  is  similar  to.  and  actually  driven  by,  the  hierarchy  of  military 
sysfems  The  models  m  the  hierarchy  are  developed  to  facifitale  the 
understanding  of  the  elements  and  their  interactions  within  the 
various  levels  of  mtftary  systems. 
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*  A|  tfe  lowest  levels  ot  the  model  hierarchy,  a  modem  com- 
-  puter  wtfi  be  Jolly  engaged  in  calculating  the  flow  field  over  a  section 
of  an  atffol'Or  the  radiation  pattern  of  a  particular  antenna.  At  the 
higher  levels,  the  same  computer  w3I  simulate  all  the  entities  in  thirty 
days  of  conflict  in  Central  NATO  or;an  all  out  nudear  exchange. 
Clearly,  as  the  scope  of  the  model  increases,  going  up  in  the  model¬ 
ing  hierarchy,  data  and  descriptions  within  the  models  must  become;, 
more  aggregated.  Analysts  woridng  with  the  hierarchy  are  constantly 
chaBeriged  by  the  task  of  facifitating  theTtow  of  data 'between  the 
models  at  different  levels. 

There  is  an  unfortunate  dichotomy  m  the  modeling  hierarchy 
that  anses  from  the  tendency  to  reduce  fidelity  and  detail  at  the  upper 
levels.  Human  action  and  BM/C3]  phenomena  are  increasingly  impor¬ 
tant  at  the  higher  level  systems  and  the  higher  levels  of  the  hierarchy 
as  welL  Unfortunately,  there  is  often  too  fttle  fideBty  in  the  high  level 
models  to  be  abte  to  capture,  (he  functional  BM/C3!  activities,  but  at 
the  tower  levels  these  activities  don't  occur  in  the  same  way  if  they 
occur  at  alL  The  consequence  of  this  dichotomy  is  that 

8M/C3!  systems  and  phenomena  are  frequently  assumed  to 
be  perfect,  or  they  are  ignored  which  amounts  to  the  same  thing 
Weapon  systems  evaluated  in  this  unreasonably  ideafistic  environ¬ 
ment  are  then  often  characterized  as  being  more  effective  than  they 
really  can  be  when  actually  put  Into  the  field. 

3.  BM/C3!  ANO  THE  TOP-DOWN  PERSPECTIVE 

Analysis  of  weapon  systems  and  warfare,  generally  agree 
that  in  large  scale  operations,  modem  military  combat  Is  dominated 
by  the  How  of  information  and  messages  among  the  participants'.  Bat¬ 
tle  Management  -  Command,  Control,  Communication  and  Intel¬ 
ligence  are  critical  functions  with  strong  leverage  on  battle  outcome, 
and  a  fundamental  part  of 'battle  management  Is  decision  making. 
Contributing  functions  are  Intelligence  gathering,  fusion',  dissemina¬ 
tion,  surveillance  and  tracking,  target  correlation,  prioritization  and  as¬ 
signment  Also  included  are  such  concepts  as  strategies,  deploy¬ 
ments,  allocation  and  apportionment,  situational  awareness  and 
mutual  support.  The  common  denominator  in  all  these  functions  and 
concepts  Is  the  flow  of  information.  The  poBcy  makers  must  be  able 
to  capture  the  capabilities  of  the  BM/C3!  systems  in  order  to  assess 
the  capabilities  of  the  force  structure.  Thus  the'  methods  of  evaluating 
BWCrl  system  performance  must  be  abto  to  relate  to  the  outcome  of 
the  confect,  not  just  the  ability  to  pass  Information. 

4.  MEASURING  SYSTEM  UTILITY 

The  yardsticks  used  to  measure  system  performance  have  a 
number  of  names  such  as  Measure  of  Performance  (MOP),  Measure 
of  Merit  (MOM),  or  Measure  of  Effectiveness  (MOE). 

When  BM/C3(  systems  are  evaluated,  the  same  terminology  is 
used  and  yet  there  is  a  trap  that  Is  frequently  lalen  Into.  The  trap 
consists  of  the  fact  "that  the  ability  to  pass  a  lot  of  Information  in  a 
timely  manner  Is  not  necessarily  good.  "Effective  systems  must  pass 
the  right  information  at  the  right  time  so  that  correct  decisions  are 
made  and  the  m&iary  forces  are  successful  la  their  frissons.  Costs 
must  be  considered,  because  nothing  is  less  useful  than  a  system 
that  fsrt  affordable  Thus,  the  term  Cost  Effectiveness  Analysis  (CEA) 
or,  better  yet,  Cost  and  Operational  Effectiveness  Analysis  (COEA) 
capture  more  of  the  needed  philosophy. 

The  key  to  meaningful  analyses  of  BM/C3!  and  BM/C3!* 
oriented  systems  Is  to  address  the  mHitary  utility  of  these  systems  in 
their  proper  context.  The  process  begins  by  looking  at  the  broad 
military  objectives  associated  with  the  use  of  the  systems.  The  policy 


makers  are  usually  looking  for  the  minimum  cost  system  configura¬ 
tion  that  meets  these  military  objectives.  In  order  to  judge  the  degree 
of  accomplishment  of  these  objectives,  the  system  must  be  judged  in 
the  context  of  the  entire  scope  of  the  conflict  at  band  Ufttfnalejy,  the 
measure  of  mfflaiy  utility  must  come  down  to  the  Issue  of  "does  it 
help  writhe  war?" 

There  are  major'drfferences  in  the  realizations  of  mistaiy 
utifity  for  different  defense  functions.  Strategic  forces,  for  example,  re¬ 
quire  dissemination,  of  specific  quanta  of  information  in  a  precise  and 
rapid  manner  durtog  very  early  stages  of  the  conflict.  The  effective¬ 
ness  of  strategic  forces  hinge  .largely  on  BM/C3!  functions  that  occur 
within  minutes  of  the  start  of  the  conflict.  Air,, sea  and  space  forces 
have  vastly  different  media  thru  which  communications  must  flow, 
and  the  timing  requirements  differ  as  wefl.  Many  of  the  command  and 
control  functions  are  preset,  and  forces  are  often  trained  to  respond 
in  very  wen  defined  ways. 

Tactical  forces  tend  to  function  for  a  much  longer  period  of 
time,  and  thus  the  effectiveness  of  tactical  BWC3!  systems  is  often 
judged  over  periods  of  days  or  weeks.  Air,  sea  and  land  forces  must 
be  coordinated  and  the  changing  requirements  for  interoperability 
pose  a  special  challenge.  In  the  tactical  environment,  the  manage¬ 
ment  of  the  forces  must  react  to  changes  in  strategy  cn  both  skies  of 
the  conflict  over  a  long  period  of  time,  and  the  command  and  control 
functions  wffl  tend  to  change  considerably  over  the  period  of  the  con¬ 
flict 

Intelligence  dissemination  and  fusion  are  Integral  elements  of 
the  BM/C3!  systems,  and  are  powerful  oontrtoutors  to  the  force  effec¬ 
tiveness  in  both  strategic  and  tactical  environments.  Here,  major  dif¬ 
ferences  in  effectiveness  measures  occur  between  strategic  and  tacti¬ 
cal  applications,  but  the  more  notable  difference  occurs  in  comparing 
intelligence  functions  in  peacetime  and  wartime.  Peacetime  functions 
strive  for  completeness  and  accuracy  so  as  to  dnve  preparation  and 
readiness  for  contingencies.  Wartime  intelligence  functions  have  the 
added, requirement  for  currency  and  timeliness  which  changes  the 
manner  in  which  their  effectiveness  is  measured. 

5.  TOOLS  OF  ANALYSIS 

The  analysis  of  BM/C3!  systems  elf  ectiveness  requires  a  num¬ 
ber  of  tools  to  be  used, In  combination  to  obtain  the  true  measure  of 
a  system's  utility.  Three  major  types  of  tools  should  be  used  m  con¬ 
junction  with  analysis  of  BM/C3!  systems:. test  data  •  the  results  of 
testing  the  hardware  Involved;  exercises  *  where  the  systems  are  ex¬ 
ercised  in  a  seml-reafistib  environment,  but  the  performance  is  often 
clouded  by  the  conditions  of  the  exercise  and  the  fact  that  there  is  no 
repeatability  and  therefore  little’  statistical  rebaWity,  and  models  -  to 
be  discussed  here  In  more  detail  Models,  in  general,  are  repre¬ 
sentations  of  reality  and  can  be  divided  into  a  number  of  classes 
simulations,  simulators,  wargames,  contingency  analyses,  and  cost¬ 
estimating  relationships. 

Simulations  are  computer  programs  that  can  capture  a  targe 
portion  ol  the  application  context,  and  can  be  used  to  generate 
statistical  replicates  of  the  performance  of  the  systems.  Frequently 
unmanned,  occasionally  simulations  wift  contain  humans  in  their 
proper  roles  in  a  large  scato  evaluation  effort.  In  trying  to  control  the 
number  of  variables  that  simulations  have  to  contend  with,  decisions 
on  both  sides  of  the  conflict  are  often  preprogrammed,  whsh  can 
result  In  erroneous  conclusions  on  the  part  of  the  analytical  com¬ 
munity. 
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Simulators  are  usually  manned  facilities  that  carefully  recr¬ 
eate  the  environment  that  the  human  wBl  experience  when  using  the 
system  in  question.  Useful  for  training  and  determining  human  be¬ 
havior  on  a  focal, scale,  they  often  have  limited  scope  and  generafy 
the  human  experiences  a  preprogrammed  environments 

Wargames  are  generaBy  large-scale  representations  of  the 
higher-level  decision  making  , process  associated  with  a  particular 
manifestation  of  conflict.  They  usua’Jy  inefude  two-sided  variations 
and  are  very  useful  as  training  devices'  Wargames  rarely  result  in 
multiple  samples  of  the  same  situation  owing  to  the  length  of  each 
play  period, 

Although  not  usually  thought -'of  as  models,  contingency 
analyses  are  representations  of  realities  that  could  occur  and  as  such 
they  are  models.  These  contingency  analyses  develop  the  credible 
scenarios  and  plans  that  in  turn  provide  the  context  for  evaluation  of 
’BM/C3!  systems. 

Finally,  cost-estimating  retationshfcs  (CERs)  are  also  models, 
and  are  particularly  important  because  they  provide  the  file  cycle 
and/or  budget  costs  that  are  necessary  in  developing  cost-effective¬ 
ness  measures.  The  most  effective  system  has  no  matary  utility  at  all 
if  rt  is  not  affordable.  The  reality  of  mJitary  system'development  Is  that 
budget  limitations  are  always  in  effect  and  the  analyst  must  respect 
these  fimifatwns  in  quantifying  mbtaryuttfity. 

It  is  only  by  putting  aH  of  the  above  tools  together  fn  an  in¬ 
tegrated  and  coherent  analysis  that  one  can  perform  a  comprehen¬ 
sive  evaluation  of  the  cost  effectiveness  of  a  BM/C3f  system.  This  is 
the  way  to  meaningful  evaluations  of  the  mflitary  ut&y  of  systems, 
and  analysts  must  strive  to'achleve  the  complete  scope  necessary  for 
these  invo"  *  ,ations. 

6.  THE  COMBAT  INFORMATION  FLOW  MODEL,  A  TOP-DOWN 
MODELING  METHOD 

Tho  Combat  Information  Flow  Model  (ClFM)  is  a  structured 
simulation  methodology  that  Is  particularly  well  suited  to  studying 
BM/C?f  and  BM/C3l-onented  systems,  it  simulates  systems  in  their  en¬ 
vironment  by  focusing  on  the  way  In  which  information  is  received, 
processed  &  transmitted  by  each  element.  (The  interested  reader  will 
find  a  detailed  description  ol  ClFM  in  the  appendix  to  this  paper,  thus 
the  modeSng  method  win  be  onfy  briefly  summarized  here )  In  ClFM, 
the  BM'c3!  elements  are  modeled  explicitly.  Other  elements  aro  trans¬ 
formed  Into  an  information  flow  format  h  order  to  provide  a  common 
structure. 

ClFM  models  the  system  elements  by  nodes  that  are  con¬ 
nected  by  links.  Messages  (in  the  most  general  sense)  pass  over  the 
fcnks  to  provide  the  flow  of  information  in  the  model.-The  node  struc¬ 
ture  in  the  model  mimics  the' real  world  layout  of  the  system.  An  im¬ 
portant  feature  of  the  ClFM  metiiodoJogy  fs  the  capability  of  the 
model  to  Include  the  combatants,  weapons  and  the  interaction  of 
combat  units.  The  structure' of  ClFM  and  the  dynamic  memory  of 
SiMSCRlPT  II 5  allow  system  elements  to  bo  created  by  messages 
during  execution,  providing  considerable  modeling  flexibility.  The 
structure  of  ClFM  requires  the  receipt  of  a  message  by  a  node  before 
an  action  can  take  place.  Sirmiarty,  an  action  Is  requ'/ed  lor  a  node  to 
send  a  message.  The  result  Is  that  the  BM/C3!  concepts  cannot  be 
short  changed  or  bypassed  Especially  important  Is  the  fact  that  the 
ClFM  methodology  Is  designed  to  develop  models  that  encompass 
the  fuS  scope’of  the  combat  objectives  associated  with  the  systems 
being  analyzed. 


ClFM  experience  jbdudes  the  Theater  MissBe  Defense  Ar¬ 
chitecture  Study  -  the  design  and  analyse  of  the  BM'C3!  portion  of  a 
tactical,  missile  defense  system  in  NATO;  alrade  study  among  the 
parameters  ol  the  Space-Based  Kinetic  Kill  Vehicle  concept  m  SDI, 
development  of  a/ step’s -combat /system  model;  and  several 
avionics/weapon  system  integration  tasks  At  the  time  ol  tttsivntinq. 
ClFM  fe  being  configured  to  analyze;  the  BM/C3l  architecture  of  Anti- 
Submarine  Warfare  (ASW;  jhe  high-level  BM/C3!  functions  in'a  joint 
command  (US  Forces  Canbbean);  and  the  BM/C3!  requirements  of 
Anti-Satellite  (ASAT)  systems.  ~ 

,7.  SUMMARY 

The  analysis  of  BM/C3!  systems  mu?:  always  consider  the 
systems  hierarchy,  ttie  modeling  hierarchy  that  goes,  along  with  u, 
and  most  important,  the  policy  maker's  need  to  consider  the  top-level 
concepts  of  force  effectiveness  and  totaLsystem  cost.  In  order  to 
property  support  these  decision  makers,  BM/C3!  systems  analysts 
must  take  the  top-down  approach  in  structuring  and  executing  their 
evaluations. 

Developing  and  evaluating  a  vaW  measure  of  military  utility  is 
-a  difficult  and  at  the  same  time  critical  issue.  In  the  case  of  BM/C3! 
systems,  these  tasks  are  particularly  difficult  because  the  systems 
never  operate  without  the  presence  of  a  number  of  weapon  systems 
and  human  beings,  so  that  the  scope  of  Interest  is  always  large,  and 
the  activities  are  very  complex.  These  difficulties  not  withstanding, 
however,  the  analysts  must  consider  system  costs  and  the  military 
objectVe  which  precipitates  the  use  of  the  system  fn  most  cases,  a 
single  model  or  test  is  not  sufficient  to  gam  the  necessary  insight, 
and  a  number  of  toots  such  as  simulations,  simulators,  wargames, 
contingency  analyses,  cost-estimating  relationships,  tests  and  exer¬ 
cises  must  be  coherently  integrated  in  order  to  obtain  meaningful 
system  utility  analyses. 

In  the  specific  area  ol  simulations,  there  are  methods  avail¬ 
able  (for  example  ClFM)  which  are  focused  on  BM/C3!  issues.  They 
can  provide  the  necessary  top-down,  structured  approach  and  cap¬ 
ture  the  full  scope  of  the  conflict  required  for  credtolo  evaluations  of 
the  military  utaity  of  BM/C3!  systems 

Finally,  the  analysts  must  always  keep  in  mind  that  the  bot¬ 
tom  fines  to  the  analyses  ot  the  military  utWy  of  BM/C3!  and  BM/C3!- 
oriented  systems  have  to  be: 

Is  rt  affordable?* 

and 

•How  does  rt  help  win  the  war?* 
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APPENDIX 


COMBAT  INFORMATION  FLOW  MODEL  (CIFM) 
METHODOLOGY  '  2 


1.  INTRODUCTION 

This  paper  provides  a  perspective  on  modeling  and  simula¬ 
tion  appropriate  to  the  needs  of  individuals  or  organizations  con¬ 
cerned  about  the  performance  of  systems  that  involve  Battle  Manage¬ 
ment  or  Command.' ;  Control,  Communication  arid  Intelligence 
(BM/Cft)  functions.  It  discusses  the  usage  of  models. and  simulations 
in  modem  military  system  design  and  evaluation  and  presents  some 
ohthe  considerations  in  choosing  tools  to  support  these  activities.. 
Finally,- the  Combat  Information  Flow  Model  (CIFM)  Is  presented* 
along  with  some  o(  the  features  that  wifl  be  of  particular  value  to  a 
BWCn  system  analysis  or  design  effort.' 

2.  THE  ROLES  OF  MODELS  AND  SIMULATIONS  IN  ANALYSIS 
AND  ENGINEERING 

A  major  obstacle  In  developing  combat  systems,  particularly 
C3!  and  ,C3l-o  netted  systems,  is  the  inability  to  accuratefy-test  or 
even  predict  their  effectiveness  before  actual  hardware  is  built  and 
tested.  This  deficiency  compounds  the  difficulty  of  advocating  new 
-systems  in  austere  budget  environments  and  hinders  the  process  of 
evaluating  system  tradeoffs,  developing  operational  concepts,  and 
assessing  performance  against  postulated  threats.  Although  models 
and  simulations  are  now  in  widespread  use*  as  a  moans  of  solving 
this  problem,  many  have  severe  limitations.  Some,  for  example,  tond 
to  be  complex  and  Inflexible  in  their  ability  to  handle  varying  aspects 
of  system  performance.  Frequently,  a  combination  of  "few-on-few" 
aod  a  *many-on*many'  models  must  be  used  to  evaluate  a  system's 
performance  against  multiple  diverse  threats.  Finally,  most  models 
'  a  reenable  to  handle  the  critical  C3  elements  of  system  performance, 
f:'  response  to  theso  modeling  deficiencies,  a  simulation  methodology 
frp’Uen  developed  that  is  specifically  designed  to  overcome  theso 
iri^  problems  associated  with  many  current  models.  This 
methodology,  called  the  Combat  Information  Flow  Model,  can  oe  ap¬ 
plied  to  the  problem  of  developing  C3!  systems  and  system  concepts, 
assessing  their  effectiveness  in. threat  scenarios,  and  performing 
trade-oil  analyses  for  the  elements  of  the  systeni 

Modern  military  systems  are  becoming  increasingly  complex 
and  expensive  as  they  have  to  contend  with  threats  that  are  Increas¬ 
ing  In  capability  and  numbers.  Mechanical  and  electrical  designs 
have  to  be  validated  before  a  significant  expenditure  m  fabrication  is 
made  and  software  has  become  so  expensive  to  develop  that  the  al¬ 
gorithms  most  be  thoroughly  verified  before  they  are  put  to  code.  En¬ 
gineering  design  relies  heavSy  on  models  to  provide  insight  into  the 
function  of  complex  systems.  As  the  sys’ems  become  larger  and 
more  complex,  models  provide  the  only  way  to  capture  the  many 
phenomena  that  the  systems  w»  deal  w*u  ki*i»  real  world  Thus  the 
models  must  be  chosen,  designed  and/or  developed  as  carefully  as 
one  develops  the  system  itself,  for  they  will  have  a  direct  bearing  on 
the  eventual  capab&ues  ot  the  operational  system 


The  Combat  Information  Flow  Model  (CIFM)  can  be,  the 
primary  method  for  assessing  operational  utility  and  system  effective¬ 
ness  against  various  threat  scenarios,  CIFM  is  an  innovatrvo  ap- 
.  proach  to  simulating  large  scale  systems  where  overaS  system  perfor¬ 
mance  &  strongly  driven  by  interaction  among  the  system  elements. 
At  the- higher  levels  of- conflict  modeling,  communications  sun/eil- 
lance,  situational  awareness  and  other  forms  of  information  transfer 
have  great  influence  on  the  .Task  Group  Commanders  ‘decisions  as 
wen  as  weapon  system  effectiveness  and  thus  affect  battle  time  lines 
and  levels  of  intensity*- These  considerations  often  have  considerably 
more  leverage  than  the  technical  details  of  the  particular  weapon  sys¬ 
tems  since  they  provide  the  opportunity  to  use,  or  misuse,  the  ship's 
weapon  systems.  CIFM  provides  a  means  of  accounting  for  these  im¬ 
portant  aspects  of  combat  and  effectively  evaluating  their  influence 
on  battle  outcomes. 

3.  SIMULATION  TYPES  AND  CONSIDERATIONS 

3.1.  Models  vs  Simulations 

A  model  te  a  representation  of  reality  in  the  most  general 
sense:  There  fs  a  wide  spectrum  of  model  types,  ranging  from  mental 
models  of  a  relationship,  through  closed  form  algebraic  equations 
that  relate  one  set  of  phenomena  to  another,  on  up  to  massive  com¬ 
puter  programs  that  encompass  thousands  of  causo-and-effect 
relationships  and  their  interactions.  A  particular  and  important  subset 
of  the  general  class  ot  models  Is  the  simulation,  a  model  in  which  the 
phenomena  of  interest  Interact  and  are  monitored  as  time  progres¬ 
ses  The  Combat  Information  How  Model  produces  simulations  that 
allow  the  user  to  observe  the  time  behavior  of  the  system  ot  interest. 

3.2.  Cfii^rmiQist  loand  StQc^astlg_S!oiu  laUons 

Deterrmnisik,  simulations  have  no  random  occurrence  in  their 
execution  processes  Each  run  wiH  be  identical  to  the  previous  ono, 
assuming  that- none  of  the  input  parameters  or  data  have  been 
changed.  Since  real  world  phenomena  usually  include  vanous  ran¬ 
dom  processes,  deterministic  simulations  must  characterize  the  ran¬ 
dom  processes  by  single  valued  functions  that  are  based  upon  ex¬ 
pectations  These  simulations  are  frequently  called  "Expected  Value'1 
models.  It  should  be  noted,  however,  that  this  kind  of  simulation  is 
not  used  all  that  often  for  modeling  combat,  and  one  of  the  reasons 
Is  that  it  does  not  portray  uncertainty  very  wefl. 

A  more  common  type  ot  simulation  is  the  stochastic  simula¬ 
tion  which  actually  contains  random  variables  and  random  processes 
in  the  execution  stream.  In  this  type  ot  simulation,  the  random  draws 
w2l  result  in  two  subsequent  runs  being  different  because  of  the  prob¬ 
abilistic  nature  ot  decisions  or  occurrence  within  the  run  Stochastic 
simulations,  typically  caned  Monte  Carlo  simulations,  require  a  num¬ 
ber  of  replications  of  the  same  situation  in  ordei  to  achieve  a  level  ot 
statistical  coni  idence. 

Stochastic  simulations  can  be  further  broken  down  into  two 
classes  (1)  those  which  characterize  phenomena  by  means  of  an  ex 
peeled  value  or  probability  ot  occurrence,  and  then  model  the 
phenomena  by  comparing  the  results  of  a  random  draw  agamst  a 
threshold  for  occurrence,  and  f2>  those  which  model  phenomena  by 
their  distributions  and  then  draw  from  those  distributions  The  formei 
(occasionally  they  are  also  cased  "Expected  Value"  models)  are  fairly 
good  at  capturing  overall  average  system  performance.  The  latter 
models  are  more  complex,  but  they  capture  excursions  from  the 
norm  and  the,  effects  of  noninearities  and  non-gaussian  distributions 
that  are  not  available  any  other  way. 
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Every  modeling  or  simulation  task  Js'  unique  in  that  the  under¬ 
lying  ksue  or  analysis  win  pose  certain  requirements  and  constraints 
on  the  approach  taken/ The  higher  the  level  bt  the  analysis  or  Issue, 
tne  larger  the  scope  of  the  simulation  required.  However,  as  the  num¬ 
ber  of  phenomena  is  increased,' the  level  of  delator  fidelity,  in  the 
simulation  must  go  down  in  order. to  be  compatble  with' modern 
computing  capacity  -  both  size  and  speed 'This,  in  turn,  requires  ag¬ 
gregated  data  and  descriptions  of  the  systems  and  pheromena  being, 
simulated.  The  best  modeling  approach  for  problems  "with  ‘  large 
scope  is  one  that  takes  a  top-down  perspective  and  includes  all 
phenomena  of  interest  at  the  minimal  level  of  detail  that  will  still  yield 
the  required  insight  Into  the  system  performance.  Additional  detail 
should  be  added  only  when  the  analysis  shows  that  (1)  an  un- 
modeled  parameter  is  causing  a  particular  behavior  and  (2)  the  op¬ 
timization  or  modification  of  that  parameter  is  part  of  the  analysis.  As 
will  be  discussed  o  the  next  section,  the  Combat  information  Flow 
Model  lends  rtseB  very  wefl  to  highly  aggregated  descriptions  of  sys¬ 
tem  elements  and  natural  phenomena,  and  it  also  results  in  a  highly 
modular  model  which  accommodates  increases  in  detail  when  neces¬ 
sary,  This  helps  keep  thedevelopmem  times,  run  times  and  memory 
requirements  at  the  lowest  levels  that  stiU  satisfy- the  program’s 
analytical  goals. 

Another  important  consideration  is  the  time  required  to  con¬ 
figure  and  use  a  model.  Computer  speed  and  memory  size  are  con¬ 
stantly  Increasing  as  the  technology  evokes  tn  the  direction  ol  more 
efficient  and  cheaper  computation,  and  the  result  of  this  evolution  Is 
that  the  cost  of  the  people  Irivolvcd  in  these  tasks  becomos  the  over¬ 
ling  consideration,  in  today's  environment  it  makes  sense  to  capi¬ 
talize  on  bigger,  cheaper  computers,  if  this  results  in  less  time  spent 
in  the  construction  of  the- models,  and  more  time  spent  in  the 
analysis  of  the  modeling  results  This  Is  the  approach  taken  when 
using  the  Combat  Information  Flow  Model  to  develop  a  new  model, 
where  the  en^hasis  Is  on  quick  configuration  of  the  model  and  ease 
of  understanding  and  manipulations  of  the  simulation  output. 

4.  THE  COMBAT  INFORMATION  FLOW  MODEL 
NOD  E/LINK/MESSAGE  STRUCTURE 

The  Combat  Information  Flow  Model  (CIFM)  is  particularly 
wefl  suited  to  the  task  ol  modehng  BM/C3!  oriented  systems.  Original¬ 
ly  developed  by  and  Jn  use  at  United  Technologies  Advanced  Sys¬ 
tem^  Division  in  San  Diego,  CA.  CIFM  is  being  used  by  United  Tech- 
nolcijtes  Systems  Analysis,  in  McLean.  VA,  and  others  in  UTC  on  a 
number  of  projects.  Thus  a  large  and  growing  community  of 
modjiers  and  analysts  will  have  a  common  understanding  of  the 
model  CIFM  has  the  following  inherent  advantages  over  alternative 
simulation  approaches: 

1.  A  major  portion  of  the  code  (cased  the  CIFM  Framework) 
for  each  application  is  written,  tested  and  debugged,  and  does  not 
have  to  be  retested  for  each  new  modeling  task.  Its  features  (input 
and  output  formats,  user  friendliness,  models  of  physical  phenomena, 
etc.)  are  common  to  each  model  application.  Because  of  the  large 
amount  of  code  on  hand,  already  written  and  tested,  models  can  bo 
constructed  quickly. 

2.  Modules  written  for  one  model  can  be  transferred  directly 
to  other  models.  Because  there  Is  a  CIFM  testbed  model,  and  be¬ 
cause  CIFM  Is  being  used  on  a  number  of  other  projects,  there  are 
many  mobiles  already  developed  that  can  be  used  either  as  they  are 
or  wah  minor  modifications. 


3  A  person's  knowledge  of  one  simulation  wiB  apply  to  other 
simulations,  resulting  in  a  significant  reduction  in  the  time  required 
(learning  curve)  to  begin  writing  code  for  a  given  model 

In  combination,  these  advantages  provide  a  modeling  en¬ 
vironment  which  is  oriented  toward  reducing  the  model  development 
time  associated  with  an  analysis  requirement,  and  providing  a  tool 
that  the  analyst  win  find  Is  both  robust  and  easy  to  use  The  emphasis 
is  on  solving  problems  well  and  quickly,  rather  than  the  simulation  as 
an  end  product. 

4.1.  The  History  of  CIFM 

CIFM.  is  based  upon  modeling  concepts  that  have  been 
proven  and  tested  in  two  iarge-scale  and  long-term  modeling  efforts. 
First,  the  Ship's  Combat  System  Simulation  (SCSS)  was  initiated  In 
the  fate  1960’s  to  study  the  abffity  of  a  ship  and  task  force  to  survive 
a  massive  ant'-ship  attar*.  It  was  the  first  model  that  attempted  to 
faithfully  model  the  ship's  combat  system  and  its  ability  to  react  to  a 
mass  attack.  UnJfce  previous  anti-ship  missile  defense  simulations, 
'the  combat  system  was  shown  to  be  a  major  player  in  the  sirccesslul 
employment  of  the  hard-kill  weapons.  The  surge  of  information 
generated  as  the  attack  began,  led  to  numerous  information  bot¬ 
tlenecks,  as  well  as  Information  being  either  lost  or  distorted.'AJso, 
because  of  the  Incorrect  time  sequence  processing  of  the  informa¬ 
tion,  the  human  operators  were  often  supplied  information  that  would 
lead  to  incorrect  decisions  rf  blindly  followed.  SCSS  is  staj  being  used 
throughout  the  US  Navy  for  ship  combat  system  studies  SCSS,  un¬ 
fortunately,  was  not  general  enough  to  handle  ECM  and  ESM  correct¬ 
ly.  Deceptive  Jamming  was  particularly  difficult  to  simulate.  SCSS  was 
also  buat  to  simulate  one  or  many  independently  operating  combat 
systems  (operating  in  the  anti-air  warfare" area),  with  no  provision  *n 
the  structure  to  allow  different  warfare  areas  ol  a’ combat  systems  to 
communicate  or  allow  communications  between  combat  systems.  Jet 
alone  have  a  command  and  control  structure  superimposed. 

The  second  simulation  employing  concepts  that  are  fuBy 
developed  In  CIFM  was  the  System  Level  A!r-to-Alr  Tactical  Simula* 
ton  (SIAATS),  built  In  1977  to  evaluate  the  Advanced  Medium  Range 
Air-to-Alr  Missile  (AMRAAM)..  It  modeled  air-to-air  combat  with  enough 
fidelity  that  the  ulifity  of  AMRAAM  versus  SPARROW  could  be 
evaluated.  SLAATS  also  modeled  the  air  tc  air  avionics  of  the  F  14,  F 
15,  F-16  and  F-18,  and  provided  dynamic  simulations  ol  AMRAAM, 
SPARROW  and  PHOENIX  Additionally.  SIAATS  provided  a  realistic 
threat  model.  The  model  structure  was  enhanced  to  allow  a  much 
more  flexible  information  flow  to  be  accommodated,  in  this  Simula 
tion,  a  system  could  easily  communicate  with  other  systems  and  a 
command  and  control  structure  could  be  imposed  on  a  group  of  sys 
terns  This  simulation,  like  SCSS.  could  not  handle  deceptive  ECM 
easily  and  had  a  very  rigid  method  of  imposing  C3  structures 

Jn  its  present  configuration,  in  use  since  1983  by  United 
Technologies  Advanced  Systems  Divisron  m  San  Diego,  CIFM  has 
solved  the  problems  of  simulating  deceptive  jamming  in  a  realistic. 
y8t  simplified  manner,  and  incorporating  systems  into  hierarchical  C1 
structures  bi  any  complexity  These  structures  can  be  modified 
dynamically  withm  the  model  if  desired.  Therefore,  CIFM  can  faithfully 
mode!  the  effects  of  destruction  or  reEaMity  failure  in  parts  of  the  C3 
structure  and  a  subsequent  reconfiguration  of  the  network  to  aEow 
the  system  to  operate  at  some  degraded  level  ot  effectiveness 
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Uruted  Technologies  Systems  Analysis,  in'Mdean  Virginia, 
has  used  the  present  CiFM  configuration  to  analyze  the  BM/CT  re¬ 
quirements  for  the  European  Theater  Tactical  BaiSstic  Missile  Defense 
Archftecture.  CIFM  has  also  been  employed  to'study  the  fire  control 
and  guidance  algorithms  used  in -the  Space  Based  Kinetic  KSI 
Vehicles  portion  of  the  Strategic  Defense  initiative.  Efforts  Tire  under¬ 
way  to  also  apply,  CiFM  to  such  areas  as  helicopter  operations’ and 
,  AntFSubmartneWartare. 

CIFM  is  an  established  modeling  method  that  has  undergone 
two  mapr  revisions,  and  each  time  the  best  features  of  the  previous 
version  have  been  retained. 


The  CIFM  Framework  is  the  large  body  of  code  that  is  al¬ 
ready  written  and  is  common  to  £0  applications.  The  CIFM 
Framework  acts  as  an  interface  between  the  programming  language 
compiler  (SIMSCRIPT  II 5),  and  the  application  code,  much  tke  an 
operating  ^system  provides  ary  interface  between  the  computer 
hardware  and  a  user  at  the  Terminal.  The  Framework  is  highly  struc¬ 
tured.  using  object  oriented  coding  practices,  and  supplies'  the  stand¬ 
ardization  necessary  for  ease  of  model  configuration  and  common 
element  description  formats.  The  Framework  contains  all  the  connec¬ 
tions,  pointers,  etc ,  necessary  to  properly  connect  the  elements  of 
tho  simutation  as  they  are  developed, -Elements  of  the  system  are 
defined  as  nodes,  and  the  Framework  contains  tho  support  structure 
necessary  so  that  each  new  node  can  be  designed  by  defining  tho 
parameters  in  a  structured  template.  Tho  CIFM  framework  also  con¬ 
tains  a  number  of  special  nodes  caned  ’Monitors,'  that  wiB  be  dis¬ 
cussed  in  the  next  section. 

4.2.1.  Node*. 

The  basic  construct  or  bu3ding  block  ol  CIFM  is  tho  nodo. 
Each  node  can  bo  thought  of  as  having  an  input  processor,  a 
processing  section  and  an:output  processor  (See.  figure  below).  In 
creating  a  model,  tho  modeler  Is  usuatty  simulating  the  actions  ol 
various  systems  such  as  radars,  computers,  vehfc  *s,  humans,  etc. 
Each  node  Is  a  modular  construct  and  Is  conceived  and  Implemented 
as  an  entity  separate  from  other  nodes  in  the  model.  Tho  inclusion  or 
deletion  of  a  nodo  does  not  affect  the  rest  ot  tho  model,  and  tho 
design  of  a  nodo  does  not  require  consideration  of  tho  other  nodes, 
other  than  their  functional  relationshps  In  tho  real  world  The  nodes 
may  be  constructed  and  tested  In  any  order,  and  they  need  not  aB  be 
constructed  In  order  for  tho  model  to  begin  working. 


The  Input  and  output  processors  of  a  nodo  are  coBectively 
referred  to  as  the  node’smessage  processor.  Tho  message  proces¬ 
sors  for  different  nodes  have  an  identical  structure  tout  perform  dif¬ 
ferently  because  of  the  implementation  of  node-specific  messages 
for  that  node.  Tho  structured  approach  to  coding  is  illustrated  by  tho 
fact  that  a. node  template  has  been  designed  as  part  of  CIFM  that  can 
be  used,  as  astartmg  point  for  writing  any  node.  This  template  con¬ 
tains  aB  the  code  that  is  common  to  aB  nodes,  and  highlights  the  sec¬ 
tions  that  must  be  written  by  the  programmer, 

4  2.2.  Links. 

When  large-scale  systems  are  being  modeled,  the  way  In 
which  their  elements  Interact  is  usually  of  critical  Importance,  tn 
CiFM,  these  Interactions  are  accomplished  via  links,  which  define  the 
paths  over  which  the  interactions  can  occur.  After  the  user  creates  a 
link,  the  nodes  that  are  linked  can  communicate,  whae  nodes  that  are 
not  Inked  cannot  communicate  directly  but  can  go  through  a  special 
node  such  as  the  Radiation  Monitor  (see  next  section).  It  should  be 
noted  that  the  Inks  are  not  created  when  the  nodes  are  constructed, 
but  rather  they  are  created  when  a  particular  run  Is  made.  This  means 
that  systems  can  be  easily  reconfigured  on  a  run-to-run  basis  by 
merely  changing  the  Irvul  data  files. 

4.2.3.  Messages. 

In  CIFM,  Information  is  transferred  among  the  elements  by 
means  of  messages.  The  message  construct  fs  very  flexible  and  Is 
designed  to  car, 7  any  amount  ot  any  type  of  information  Messages 
are  transferred  according  to  ihe  link  structure  In  place  at  the  time  tho 
message  Is  being  generated.  A  CIFM  model  Is  completely  driven  by 
the  message  traffic  that  occurs  within  it.  AB  activity  Is  tho  result  of  ac¬ 
ting  upon  a  message  in  the  most  general  sense,  and  thus  it  Is  ex¬ 
tremely  weB  suited  to  investigating  C3I  oriented  systems  where  the 
Issue  Is  evaluating  the  effects  of  changes  In  the  connectivity  and  mes¬ 
sage  patterns  within  combat  systems. 

5.  MONITORS 

This  section  deserves  five  special  entities  In  the  CIFM 
framework  called  Monitors.  Monitors  are  unique  nodes  that  appear  in 
almost  evety  application  and  perform  a  number  ol  important  and  tar- 
reaefcog  functions.  The  use  ot  thoso  monitors  helps  make  CIFM  tho 
unique  and  capable  model  that  H  is.  because  they  are  already  written 
and  debugged,  and  they  alleviate  much  ot  the  work  normally  done  m 
developing  a  new  simulation.  The  foBowmg  subsections  provide  a 
description  of  each  of  the  CIFM  monitors, 

5.1.  Radiation  Monitor 

In  modeling  Information  How  In  large  scale  combat  situations, 
one  ol  the  most  important  phenomena  to  simulate  Is  electromagnetic 
radiation.  CIFM  Is  designed  with  this  try  mind  and  lias  a  special  node 
cased  the  Radiation  Monitor  to  keep  track  of  aB  electromagnetic 
radiation  present  in  the  simulated  world.  The  word  'node,*  m 
reference  to  the  Racfiatton  Monitor,  is  somewhat  misleading  becauso 
the  Radiation  Monitor  does  not  represent  a  real  object.  The  Radiation 
Moator  stands  alone  (not  fcnked  to  any  other  nodes)  and  «$  not  part 
ot  the  *Real  World  *  It  can  be  thought  of  as  an  Invisible  entity  that 
knows  the  levels  ol  aB  kinds  ot  electromagnetic  radiation  at  al  points 
In  space. 
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The  Radiation  Monitor's  concerned  with  only  certain  kinds  ot 
nodes:  those  that  emir  electromagnetic  radiation;  those  nodes  that 
can  reflect  it;  and  those  that  sense  it.  The  Radiation  Monitor  keeps 
track  ot  the  activity  ot  ail  these  nodes,  and  keeps  track  vof  all  the 
radiation  and  propagation  associated  wih  them.  It  performs  a#  re¬ 
quired  calculations  to  determine  reflections, and  properly  degrades 
the  signal  strength, ot. the  emission,  accounting  tor  the  propagation 
losses  from  the  natural  propagation  ot  radiation,  atmospheric  losses, 
and  reflection  of ,  the  energy  from" reflective  targets.;  Jamming,  both 
noise  and  deceptive,  is  also  handled  by  the  Radiation  Monitor. 

The  Radiation  Monitor  handies  radio  communications  as  wen. 
The  signal  is  subject  to  the  same  losses  as  regular  emissions,  but  a  ;- 
message  is  also  passed.  Messages  transmitted  in  this  manner  can  be 
jammed. 

5.2.  Motion  Monitor 

For  any  node  to  move  correctly  through  the  external  world, 
the  forces  and  moments  acting  on  that  node  must  be  correctfy  calcu¬ 
lated  and  property  integrated  over  time.  The  Motion  Monitor  Is 
deslgnod  to  carry  out  theso  calculations  over  alt  moving  nodes  w'unln 
the  system,  and  can  handle. both  three  and  six'  dcgree-of-freedom 
aerodynarrics  when  the  problem  cans  for  them.  Depending  on  the 
degree  ot  fideEty  required  for  the  underlying  analysis,  and  the  level  of 
sophistication  of  the  equations  ot  motion,  deferent  Integration 
schemes  are  available. 

5  3.  Intercept  Monitor 

In  most  applications  ot  C1FM,  there  are  a  number  ot  situa¬ 
tions  where  two  objects  wfl!  come  close  to  each  other  with  the  intent 
of  one  to  do  damage  to  the  other  In  some  way.  The  intercept  Monitor 
keeps  track  of  the  motion  of  al  objects  In  the  simulation xand  per¬ 
forms  a  number  of  functions  when  they  are  dose  enough  to  Interact. 
Tormina!  target  detection  anchor  fuzing  Is  handled  In  the  Intercept 
Monaor,  along  with  any  munitions  effects  that  might  be  present  Kai 
probabilities  are  calculated  and  property  weighted  random  draws  are 
used  to  determine  losses  In  the  appropriate  situations.  When  one  or 
both  of  the  objects  involved  In  the  Intercept  are  destroyed,  tiie  Inter¬ 
cept  Monitor,  removes  the  kffled  objects,  cleans  up  the  associated 
memory  locations  and  pointers,  and  does  the  tabulation  updates  re¬ 
quired  for  the  given  output  specifications. 

5.4.  User  Interface  Monitor 

One  of  the  key  teatures  Included  h  ClFM  Is  a  factwy  to  a&ow 
the  user  to  communicate  with  and  affect  a  run  in  progress.  This  is 
called  the  User  Interface  Monitor.  It  is  a  node  in  the  same  sense  that 
the  Radiation  Monitor  is  a  node,  that  is.  ft  stands  atone  and  fs  not 
part  of  the  'Real  World,'  In  a  batch  run,  tho  User  Interface  Monitor 
remains  dormant,  wMe  in  an  interactive  run  ft  can  be  accessed  perl* 
odtcaSy  to  interact  with  the  rutu  By  using  this  node,  the  user  can  In¬ 
terrogate  any 'node  to  see  fts  characteristics,  send  a  message  to  any 
node,  and  see  other  characteristics  of  the  run  in  progress.  In  addi¬ 
tion.  the  value  of  any  single  variable  in  the  simulation  can  be  output 
to  the  screen.  This  capabftfty  is  particularly  valuable  when  debugging 
additions  to  the  model 

The  User  interface  Monftor  has  been  designed  to  be  par¬ 
ticularly  user  friendly,  ft  ts  totaty  menu  driven,  contains  error-check¬ 
ing  rootles  so  tiiat  unreasonable  values  will  not  be  accepted,  and  is 
fiextote  In  the  way  ft  wffi  accept  commands. 


6.  INPUT  AND  OUTPUT  STRUCTURES 

Input  and  output  features.designed  (or  ease  of  use  and  un¬ 
derstanding  are  integral  and  Important  parts  ot  ClFM.  Because  these 
features,  are  In  the  C!FM  Framework,  they  are  part  of  the  structure 
that  is  common  to  aft  ClFM  applications,  and  thus  a  great  deal  of 
consistency  exists  among  the  models^  This  is  important  because  a 
person  can  carry  his  or  her  knowledge  of  running  one  model  oyer  to 
a  new  model,- and  start  out  well  into  the  learning  curve  for  the  new 
application/ 

6.1.  Type  and  Run  Data 

There  are  two  major  types  of  data  used  in  a  ClFM  model, 
type  data  and  run  data.  Type  data  is  data  winch  is  associated  with  a 
particular,  type  of  system  (node)  and  does  pot  change  from  run  to 
run.  it  can  be  thought  of  as  a  built-in,  or  "design  characteristic  ol  a 
particular  devise.  For  example,  the  maximum  number  of  missiles  that 
can  Jit  on  a  certain  kind  of  launchor  would  be  type  data'.  On  the  other 
hand,  run  data  Is  data  that  Is  not  buffi  into  a  system,  and  ft  can 
change  for  any  run.  An  example  in  this  case  would  be  the  number  of 
missiles  that  are  actually  loaded  on  a  certain  launcher  at  the  begin¬ 
ning  ol  1  scenario.  Clearly,  this  could  change  in  different  situations  of 
Interest,  whHe  the  launcher  itselt  remains  the  same. 

The  Input  structure  for  a  ClFM  model  Is  broken  into  several 
major  Mes.  The  Type  Data  Base  is  a  iae  containing  a  collection  of 
type  data  that  is  to  be  used  for  tho  run.  Tho  User  input  Fite  contains 
the  run  data  for  tho  given  run  and  may  contain  parameters  tiiat  wai 
supersede  tho'elements  of  the  Type  Data  Base.  The  third  major  input 
(Jo  Is  the  Keyboard,  corresponding  to  tho  keyboard  ot  tho  user's  ter¬ 
minal.  The  Input  structure  tor  any  app&catlon  is  essentiafy  the  same, 
and  this  saves  time  In  developing  a  new  model. 

Two  Interesting  and  useful  features  have  been  buffi  Into  tho 
Input  fae  structure.  One  Is  that  the  Type  Data  Base  may  ccntah  as 
much  data  as  desired,  but  only  those  data  which  have  a  possibility  of 
being  used  will  bo  read  Into  the  model  at  execution.  The  other  is  that 
type  data  parameters  that  are  in  the  User  Input  Fife  wffi  be  read  into 
the  model  before  the  Type  Oata  Base  Is  aocessed.  This  feature  can 
bo  used  to  supply  data  to  the  model  that  do  not  exist  in  the  Typo 
Data  Base,  ft,  howover.  versions  ot  a  certain  section  of  data  exist  in 
both  tho  User  input  File  and  the  Type  Data  Base,  then  the  versfon  In 
the  User  Input  FUe  wJI  supersede  the  version  in  the  Type  Data  Base 

The  ClFM  Framewotk  uses  a  default  condition  of  three  output 
f  des  The  Screen  is  the  screen  ot  the  user’s  ternvnal  The  Error  File  is 
a  fie  containing  aft  of  the  errors  discovered  during  the  execution  of 
the  program.  The  Standard  Output  F4e  is  a  file  that  contains  the  nor 
mat  informative  output  and  the  results  ol  the  run.  The  Final  Report 
File  »s  a  file  that  contains  selected  system  characteristics  written  m  an 
individual  event  or  summed  form,  in  a  given  execution  stream. « is 
possible  to  associate  the  Error  File  or  the  Standard  Output  File  (or 
both)  with  the.  Screen,  so  that  all  the  output  goes  to  the  user's  ter 
minal  screen" Considerable  latitude  exists  in  ClFM  to  easily  generate 
custom’output  files  to  meet  the  needs  of  the  particular  analysis  being 
undertaken. 


ClFM  also  includes  a  Simulation  Status  Morvtcr  which  can 
accumulate  simulation  data  and  generate  statistics. 
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7.  TESTING  AND  INTERACTION  OPTIONS 

CIFM  las  buBt-in  lest  and  debugging  laddies  which  allow  the 
user  to  both  interact  with  the  model  as  it  runs  and  to  test  any  part  of 
the  model  in  Isolation  from  the  rest  ol  the  nodes  in  the  model  being 
oeveiopco,  "■ 

.7.1.'  Test  Node, 

The  Test  Node  is  a  special  node  in  ctFM„tt  Is  specifically 
designed  to  be  inserted  in  place  ol  any  node  in  a  system,  in  ’such  a., 
way  as  to  emulate  the  chosen  node.  In  this  way,  the  frtdng  structure 
and  message  How  to  and  from  the  emulated  node  can  be  tested.  This 
provides  a  last  and  efficient,  method  tor  testing  large  and  complex 
systems.  ^ 

7.2.  Built-In  DetnncIr’C  Facility 

Inc  tided  In  CIFM  Is  the  capabasy  to  generate  a  detailed  trace 
ol  messages  and  routines  which  aids  in  the  debugging  process.  The 
information  desired  is  specfiod  In  the  User  Input  File  by  Indicating  the 
name  ol  the  node  to  bo  analyzed,  the  type  ol  output  desired,  and  the 
start  and  end  times  during  the  simulation  when  the.lnlcrmation  Is 
needed.  There  are  two  possbio  outputs  which  can*  bo  generated 
using  this  tacTty.  Ono  output  shows  when  the  routines  associated 
wnh  the  specified  node,  are  caled  and  the  other  output  shows 
detailed  intonmation  that  alows  the  usor  to  trace  through  selected  ah 
gorithms  Impkimeiyed  In  the  code. 

7.3.  User  Interlace  Monitor 

The  User  interface  Monitor  was  developed  to  a8ow  the  user 
to  interact  with  Ihoslmulation,  and.this  has  proved  to  be  ot  great 
vabo  in  the  debugging  process.  The  user  has  the  capability  to  run 
the  sanitation  lor  a  specified  period  ot  time,  stop  it.  and  then  ox- 
amino  any  variables  ot  Interest,  Values  can  bo  changed  (nteracthely 
and  Iho  nodal  can  bo  roslarted  whero  «  kill  ell.  This  capability  saves 
a  tremendous  amount  ot  time  when  debugging  a  new  node  or  when 
trying  to  ascertain  the  effects  of  new  nodes  on  other  nodes. 

8.  IMPLEMENTATION  DETAILS 

As  a  model  Is  being  constructed  using  CIFM.  care  must  be 
taken  to  Insuro  that  tho  resulting  model  will  bo  usabio  to  the  analysts- 
that  might  need  It  over  the  duration  ol  the  project  and,  even  more  im¬ 
portant,  over  tho  desired  Wetirna  ot  tho  model  In  addition  to  capitaiz- 
tig  on  tho  robust  structure  already  in  tho  CIFM  Framework,  attention 
must  bo  paid  to  coding  practices  In  the  eppfcabn  specific  code,  and 
to  the  documentation  that  w8  accompany  tho  model  throughout  its 
Uetimo.  To  this  end,  tinted  Technologies  fotows  established  and  el- 
tectivc  coding  and  documentation  standards  m  the  development  and 
documentation  ol  CIFM  models. 
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A  FUNCTION-BASED  DEFINITION  OF(C2)  MEASURES  OF  EFFECTIVENESS 
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Abstract 

The  perennial  problem  of  defining  Measures  of  Effectiveness 
and  Measures  of  Performance  (MOE/MOP)  has  consistently  failed 
to  differentiate  between  the  two  In  any  succinct  way.  This  may  be 
due  to  the  lack  of  an  integrating  concept  of  System  Analysis  In 
which  to  embed  the  MOE/MOP  set. 

As  a  result  of  an  application  of  an  analysis  of  hierarchical  ob¬ 
jectives  (Rahmallan)  for  Antisubmarine  Warfare,  a  Systems  Anal¬ 
ysis  mctltodology  reflecting  the  spirit  of  the  Mission  Oriented  Ap¬ 
proach  (Signori)  has  been  devised.  In  the  process,  a  simple,  unambi¬ 
guous  definition  of  MOE  has  evolved,  to  wit,  the  Probability  of 
achieving  the  Mission  Objective  Functton(s),  given  a  set  of  constrain¬ 
ing  or  prior  conditions.  All  non-probabilistlc  metrics  (such  as 
throughput,  power,  gain,  speed)  arc  defined  as  Measures  of  Perform¬ 
ance  derived  fromNSyslcm  Parameters  (such  as  size,  color,  fuel 
capacity). 

This  distinction  between  MOE  and  MOP  is  simple  and  defin¬ 
itive.  ft  also  provides  a  direct  relationship  between  MOE  and 
Mission  Objective  Functions.  Realizing  that  decision  nuking  is  the 
Command  Objective  Function  provides  a  structure  for  relating  C2 
MOEs  and  MOP’S  to  Force  and  System  MOEs. 


INTRODUCTION 

Within  the  Space  and  Naval  Warfare  Systems  Command,  the 
Warfare  Systems  Architecture  and  Engineering  (WSA&E)  Direct¬ 
orate  (SPAWAR-30)  directs  the  development  of  architectural  de¬ 
scriptions  and  assessments  of  current  and  future  Naval  Warfare  Sys¬ 
tems  under  the  sponsorship  of  the  Deputy  Chief  of  Naval  Opera¬ 
tions  for  Naval  Warfare  (OP-07).  In  collaboration  with  the  Anti¬ 
submarine  WarfarC  Directorate  (SPAWAR  PD-80),  the  ASW  Archi¬ 
tecture  Division  (SPAWAR-315)  has  solicited  the  Naval  Ocean 
Systems  Center  to  lead  a  team  of  Navy  Laboratories  to  address 
ASW  Architecture.  The  procesi  is  initiated  by  the  issuance  of  a  Top 
Level  Warfare  Requirement  (TLWR)  by  OP-07.  In  response,  the 
Architecture  team  is  attempting  to  devise  a  means  of  providing  a 
traceable  accounting  of  the  relationship  between  system  perfor¬ 
mance  and  the  TLWR.  This  has  given  rise  to  the  development  of  a 
methodology  for  Architectural  description,  modelling  and  assess¬ 
ment  which  is  on-going.  A  by-product  of  this  methodology  is  a 
function-based  definition  of  measures  of  effectiveness.  This  paper 
focusses  on  how  to  utilize  that  definition  to  establish  C2  measures 
of  effectiveness. 

After  a  review  of  some  motivating  concepts,  a  summary  of  the 
methodology  will  be  presented.  The  process  results  in  a  general 
definition  of  MOEs  and  MOP'S.  This  will  be  followed  by  a 
discussion  of  the  role  of  Command  decision  making  in  the  execution 


of  functions.  The  definition  of  a  canonic  C2  MOE  is  supported  by  an 
example  and  this  provides  motivation  for  application  of  the 
definition  to  future  analyses, 

BACKGROUND 

There  appears  to  be  a  concensus  among  the  C3  community  that 
'  the  justification  for  C3  systems  must  be  based  on  the  combat  or  mis¬ 
sion  outcome.  In  other  words,  the  effectiveness  of  decision  making 
(and  decision  support  systems)  has  no  meaning  outside  the  context  of 
a  mission  or  purpose.  Conversely,  the  historical  approaches  to 
modelling  and  assessment  of  operational  systems  have  implicitly 
assumed  "perfect  C3".  This  results  in  optimistic  forecasts  of  perfor¬ 
mance,  not  an  accurate  model.  In  other  words,  the  expected  outcome 
of  missions  can  not  be  property  modelled  unless  the  effect  of  decision 
making  is  Included.  These  two  complementary  ideas  suggest  a  syner¬ 
gistic  relationship  between  mission  analysis  and  decision  analysis. 

In  fact,  that  relationship  is  one  of  cause  and  effect;  the  mission 
Is  not  executed  unless  it  is  initiated  by  a  decision  to  carry  it  out  In 
other  words,  it  is  the  role  of  Command  (decision  making)  to  initiate 
required  mission  functions.  This  involves  recognizing  which  func¬ 
tions  arc  required  or  will  be  effective  (or  appropriate  or  author¬ 
ized)  and  allocating  available  resources  under  Ids  control  to  carry 
them  out.  Of  course,  the  Initiation  must  be  accomplished  in  a  time¬ 
ly  manner,  that  is,  early  enough  for  the  mission  to  be  carried  out 
before  the  cncnry  accomplishes  hi»  objectives,  but  not  so  early  that 
more  effective  alternatives  might  be  pre-empted.  Figure  1  high¬ 
lights  three  motivating  concepts,  just  described,  which  will  be 
Incorporated  In  the  approach. 


MOTIVATING  CONCEPTS 


EFFECTIVENESS  OF  DECISION  W*WNQ  HAS  NO  MEANING 
CUTSJOE  T>tE  CCWTEXTOF  A  MISSION  Oft  PURPOSE 


EXPECTE0  OUTCOME  OF  MiSSIONS  CAN  NOT  BE  MOOEUJEO 
UNTIL  THE  EFFECT  OF  OECSPN  MAKING  IS  M00EU.E0 


THE  ROLECF  COMMAND  (DECISION  MAKNG)  IS  TO 
RECOGNIZE  AND  MT1ATE  REQUIRED  MISSION  FUNCTIONS 
AND  ALLOCATE  RESOURCES  TO  THEM 

IN  ATftiaV  MANNER _ 


Figure  1.  Motivating  Concepts 


Another  concept  which  is  depended  upon  heavily  is  one  of  a 
hierarchy  of  objectives  utahmatian)  Although  it  is  not  an 
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original  idea,  Rahmatian  provides  a  simple  picture  (Figure  2 )  of 
the  interlocking  role  of  the  objectives  (See  note  1).  From  an  arbi¬ 
trary  level,  "what"  is  done  is  done  for  a  higher  level  purpose, 
("why")  and  "how"  it  is  done  becomes  a  lower  level  "what"  whose 
purpose  ( "why")  is  at  the  original  level.  The  right  side  of  figure  2. 
recasts  the  hierarchy  of  objectives  in  terms  of  Missions,  Functions 
and  Tasks.  For  a  particular  Fora  ir  System,  its  functions  are  what 
it  does  in  order  to  accomplish  its  i.  'sion,  Its  tasks  are  its  subfunc- 
tiono,  which  are  performed  by  its  parts  or  subsystems. 


HIERARCHY  OF  OBJECTIVES 


Why?:  Purpose 
f  What?  Action  j 
How?:  Mean$*ndM«hoc» 
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Figure  2.  Hierarchy  of  Objectives 


The  Navy  states  its  Mission,  Functions  and  Tasks  in  Naval  War* 
fare  Publication  (NWPM,  Strategic  Concepts  of  the  U.S,  Navy.  By 
law,  the  Mission  of  the  Navy  is  to  "be  prepared  to  conduct  prompt 
and  sustained  operations  at  sea  in  support  of  U5.  national  inter¬ 
ests'’.  The  Functions  of  the  Navy  arc  to  perform  Power  Projection 
and  Sea  Control.  Recently  the  Navy  has  been  assigned  the  job  of 
Sealift  and  an  unstated  objective  has  always  been  to  defend  the 
United  States.  NWP-1  goes  on  to  state  that  the  Tasks  of  the  Navy 
consist  of  Warfare  Tasks  and  Support  Tasks,  Among  theAVarfare 
Tasks  Is  Antisubmarine  Warfare  (ASW),  Based  on  the  hierarchy 
of  objectives,  therefor,  the  Mission  of  ASW  Forces  is' to  conduct 
ASW  operations  in  support  of  Power  Projection,  Sea  Contiol,  Sealift 
and  Defense  of  the  United  States.  What,  then,  are  the  Functions  of 
ASW  Forces?  This  is  the  purview  of  the  ASW  TLWR  and  is  the 
basis  of  the  functional  analysis  embodied  in  the  methodology. 


METHODOLOGY 

The  approach  (Figure  3)  consists  of  performing  a  functional 
decomposition  in  each  of  three  context-setting  domains  (Mission, 
Organization,  and  Resource).  This  decomposition  Is  drfvcn  by  the 
Mission  Success  Criteria  (MSC)  and  Required  Capabilities  (RC) 
established  by  the  TLWR.  As  we  shall  see  later,  the  MSCs  and 

Note  1.  This  simple  picture  masks  the  co m pi exhy'o fthe  1  rue 
interrelationships  of  functions.  A  true  functional  decomposition  is 
not  a  pure  tree  and  may  not  be  strictly  hierarchical  Rather  than  a 
tree,  a  functional  structure  is  more  properly  represented  by  a  graph, 
If  it  is  hierarchical,  a  multiplicity,  of  functions  at  oneTcvcl  may 
support  or  be  supported  by  a  multiplicity  of  functions  at  another 
level.  Then  again,  it  may  not  be  hierarchical,  in  that  there  may  be 
cyclical  or  mutually  supportive  purposes,  such  as  Sinking 
submarines  in  order  to  protect  supply  ships*  which  provide  logistic 
support  in  order  to  sustain  operations  to  sink  submarines.  The 
interdependence  or  lack  of  strict  ordering  of  functional 
relationships  does  not  negate  the  usefulness  of  the  concept  They 
will  resul  t  in  simultaneous  and  higher  order  cqua  tions. 


1  RCs  actually  establish  the  initial  tiers  of  functions.  The  functions 
withm  these  domains  (Warfare  or- Support  Mission  Functions, 
Ccmmand/Deasion  Functions,  and  Equipment  or  Personnel  Func¬ 
tions,  respectively)  are  mutually  supportive  in  achieving  the  goals 
of  the  Mission  and  establish  a  hierarchy  of  objectives  within  each 
domain  as  well  as’.icross  them.  Realizing  that  the  achievement  of' 
the  objective  is  the  criterion  of  success  establishes  a  one-to-one 
correspondence  between  functions  and  metrics.  In  fact,  this  corres¬ 
pondence  was  recognized  while  reviewing  the  MSCs  and  RCs.  In 
turn;  the  relationship  among,  functions  also  corresponds  to  the 
mathematical  relationship  (equations)  among  metrics  at  the  same 
level.  This  concept/too,  has  its  roots  in- the  relationship  between 
the  MSCs  and  RCs  of  the-  ASW  TLWR,  as  we  shall  sec.  This 
suggests  the  potential  for  finding  a  relationship, for  aggregating 
metrics  for  resources,  organizations  and  missions  to  the  achievement 
of  the  TLWR  objectives.  o. 


ARCHITECTURAL  PROCESS 


Figure  3.  Architectural  Process 


Figure  4  summarizes  the  elements  of  the  ASW  TLWR.  For 
twenty-two  stressing  cases,  the  mission  was  stated  in  terms  of  the 
type  of  ASW  Mission,  Area  (intcrdictivc)  or  Local  (protecting  other 
forces),  and  the  nature  (peace,  crisis  or  war);  region  and  timeframe 
of  the  conflict.  Thus  a  typical  Mission  context  might  be  to  "conduct 
Area  ASW  in  the  Norwegian  Sea  during  the  first  pltasc  of  global 
conventional  war.  Tlvjn  the  Mission  Success  Criteria  for  that 
Mission  arc  stated,  such  as,  attritc  a  percentage  of  the  expected 
Order  of  Battle.  These  arc  the  firm  ’Top"  Level  Warfare  Require¬ 
ments.  The  Required  Capabilities  were  devised  to  exhibit  a  degree 
of  credibility  to  the  potential  of  achieving  the  MSCs.  The  RCs 
arc  selected  factors  in  an  equation  relating  several  performance 
factors  to  the  MSCs.  Examples  of  RCs  are  Kill  probabilities  given 
Detection,  Oassification  and  Localization  or  the  Area  that  can  be 
searched  to  achieve  a  specified  Detection  probability.  The  equa¬ 
tion  that  aggregates  the  RC  metrics  to  the  MSC  metrics  is  called 
the  audit  trail 
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Figure  4  ASW  Missions,  Functions  and  Tasks 
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fatt^£x$$SCf*ad?Cst=dc&s?t!c=£z&ci  &zxs£a 
trails  reveals  most  can  be  staled  in  terms  cc  6e  pecfcjctS;/ ef 
saceessfe^accccygfa&s^afeac^ce.  T&sqgss^afcaixsj 
defines  its  own  extnc,  kHA  is  tie  profeabtEiy  of  a  successful 
03tcone  of  performing  flc'feaeaca  Coetrrsdy,  aprocabebrr 
metric  defines  the  outcome  cf  its  sctoedfeadaSB.  Fcceurpciie 
probability  of  detection  identifies  the  detection  event  as  tie 
outcome  cf  the  search  function.  la  lias  way,  these  functions  and 
their  rdated  metrics  are  inseparable.  5y  mdbcticc,  snbfeaetiacs 
have  their  related  (subtaetrics.  Tie  RCs,  ticricr,  define  a  set  of 
subfcrsrtionsfocticfcncficesdefinedfcylieMSCs.  These  sobfcac- 
tions  car be  associated  with  the  Task  designation  a  tie  hierarchy 
of  object!  ves 

When  a  set  of  sabfcnctions  is  carried  out  in  scene  prescribed 
Banner,  we  call  that  a  procedure.  This  represents  the  impiemerta- 
tion  of  the  higher  order  function  in  terms  of  its  subfcueticcs.  If  this 
procedure  is  modelled,  the  resulting  equation  or  simulation  pre¬ 
scribes  the  relationship  of  the  lower  level  metrics  to  the  higher 
levdoncs.  Kgurc  5  shows  some  simple  examples  cf  this  epavenfea. 
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Figure  6.  Hierarchy  of  ASW  Misswes  and  Fractious 
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Figure  5.  Relationship  of  firnctions  and  Metrics 


Although  the  audit  trail  only  relates  two  levels  of  functions 
and  metrics,  further  examination  of  the  nature  ol  the  requirements 
reveals  more  relationships.  The  twenty-two  stressing  cases 
clustered  into  three  groups.  One  dealing  with  Area  ASW  in 
peacetime,  low  conflict  or  crisis  situations,  one  for  Area  ASW  in 
global  conventional  war  (nuclear  war  has  not  been  included  here) 
and  one  involving  Local  ASW  in  war.  There  is  an  increasing  scope 
of  operations  implied  In  these  tiucc  groups  as  well  as  a  correlation 
with  the  size  or  aggregation  of  forces  involved.  When  the  represen¬ 
tative  functi'ViS  associated  with  the  metrics  for  these  groups  arc  dis¬ 
played  as  in  figure  6,  a  pattern  emerges  of  a  hierarchy  of  objectives, 
the  lop  of  which  depends  on  the  relevant  group  of  situations  or 
missions.  (The  top  of  each  group,  of  course,  supports  higher  level 
objectives  but  these  arc  beyond  the  scope  of  ASW.)  This  hierarchy 
represents  adccomposition  of  Warfare  Functions  within  the  Mission 
Domain  of  our  architectural  approach.  A  later  section  will  address 
the  Command  Function  decomposition  within  the  Organizational 
Domain.  The  System  Functions  that  arc  defined  in  the  Resource 
Domain  are  implementations  of  the  Warfare  and  Command 
Functions.  These  System  Functions  arc  supported  by  Equipment 


Some  cf  the  factors  ci  the  audit  trad  equations  are  rot  slrted  in 
terms  cf  probabilities.  Some  of  these  can  be  retouched  in  prebai*- 
Estic  form  be  1  some  can  not.  The  latter  often  represent  characteris¬ 
tics,  such  as  speed,  that  are  normally  not  evert  coerced  so  probabil¬ 
ities  arc  not  appropriate  metis-  O&ers,  sod*  as  throughput,  may 
involve  events,  bat  do  rot  represent  success  or  feSerc,  at  least  not  at 
that  levd  of  aggregation.  This  suggests  a  dichotomy  of  metrics  into 
two  dasscs,  one  of  wisdi  b  defined  by  the  probabchsy  of  successful 
accomplishment  of  afunction. 


MEASURES  OF  EFFECTTVEXESS 

Following  this  suggestion  leads  to  the  definitions  of  Measures 
of  Effectiveness  shown  in  figure  7.  This  way  of  differentiating 
anvng  MOEs  and  MOPs  b  meant  to  emphasize  the  mission  orienta¬ 
tion  of  the  MOE.  In  fact,  in  this  approach,  the  Mission  (or  Function) 
defines  the  MOE.  The  MO?  dass  then  provides  for  the  collection  of 
metrics,  such  as  gains,  rates,  capacities  and  delays,  that  arc  not 
probabilities  of  successful  outcomes  of  functions.  A  third  dass  of 
metrics  represent  physically  measurable  parameters.  MOPs  arc 
the  consequence  of  a  configuration  of  physical  dements.  MOEs  are 
the  result  of  a  combination  of  physical  parameters,  MOPs  or  other 
MOEs. 
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J^forcoostiainaofixHwastihgresocrcesJ  This  notion  of  coodi- 
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MOE  2nd  Fcxtca  Foe  tuayic  what  is  the  probability  of  ddfo 
ticn,  g?«»  peacetime  mission  to  the  Norwegian  Sea  in  summer 
cnJiiKSJ?  Wfega  the  acoocpBshcacai  of  a  feactioq  depends  on  the 
acccespiisbmect  of  its  susfunctioss^  the  event  mast  occur  in  the 
intersection  of  thesnbeventt.  eiampie;  kiDing  an  enemy  sub¬ 
marine  involves  detecting,  classifying,  localizing,  attacking  AND 
inflicting  lethal  damage.  given  thee  is  an  enemy  ssbmariM  within 
prosecution  range.  Then  the  definition  of  conditional  prohabffify 
can  be  used  to  wn!e  the  MOEs  as  chains  of  conditional  pcobabD- 
ihes,  although  analysts  are  usually  guilty  of  improper  notation. 
Aproper  aodit  of  the  conditional  events  may  be  critical  to  the 
analysis.  In  complex  analyses  involving  concurrent  or  complemen¬ 
tary  objectives,  the  celculas  of  conditional  sett  arid  conditional 
probabilities  that  has  been  devised  by  (CoodnurO  and  (Calabrese) 
win  be  needed  jo  mace  these  relationships. 

The  aggregation  of  probabilities  is  not  a  new  idea.  It  is  very 
common  in  the  assessment  of  operational  effectiveness.  But  the 
hierarchy  of  objectives  provides  a  way  of  formalizing  the 
approach.  The  role  of  functions  in  the  hierarchy  will  provide  the 
setting  for  examining  the  effectiveness  of  C2  functions. 


ROLE  OF  DECISION  MAKING 

The  key  to  the  definition  of  C2  MOEs  b  the  role  that  decision 
making  has  as  a  function  in  the  hierarchy  of  objectives.  It  is  a 
function  that  occurs  at  every  level  of  the  hierarchy.  It  is  the 
function  that  must  occur  if  any  other  function  is  to  be  initiated.  In 
other  words,  it  enables  all  other  functions.  Figure  8  shows  this 
concept  In  an  adaptation  of  Rahnutian's  symbology  from  Figure  2. 
"What"  function  to  perform  b  determined  by  the  Decide"  function 
at  that  Unci.  "Why*  it  needs  to  be  performed  b  established  by  the 
higher  level  objectives)  and  is  the  motivation  for  the  decision. 
Dow*  has  the  same  meaning  as  before.  At  each  level,  the 
Decide*  function  Is  further  decomposed  into  the  Decision 
Functions*  that  arc  needed  to  make  those  decisions.  We  have 
called  them  Command  Functions  for  obvious  reasons  and  they  too 
will  play  a  role  in  the  definition  of  C2  MOEs  as  will  be  shown. 

The  box  in  the  lower  nght  corner  of  Figure  8  acknowledges  that 
this  approach  bears  a  strong  similarity  to  and  derivation  from  the 
Alpha  tech  TR-293  referenced.  The  FROG  acronym,  however,  is  the 
property  of  the  author.  Alpha  tech  used  "processes*  instead  of 
'functions",  butGORF  was  not  aesthetically  pleasing. 


Kgure  &  Dcrisaoa  as  the  Enaifeg  Fesctica 


An  ex2mpfe  of  a  fimsfonal  decomposition  that  exxeporates  the 
Dcdde"  function  is  shown  in  Figure  9.  Starting  with  the  objective 
to  limit  losses,  it  foBoio  that  we  can  accomplish  that  by  counter¬ 
ing  the  weapon  cr  the  enemy  platform.  Supporting  functions  are 
SurrdHance  and  cueing.  The  large  Decide"  diamond  represents 
the  choice  among  these  and  /or  when  to  execute  them.  The  nod 
level  of  decomposition  b  shown  as  ovals  within  the  four  boxes 
representing  the  first  tier  functions.  The  smaller  diamonds  repre¬ 
sent  a  choice  among  the  lower  level  functions,  such  as  whether  to 
attadc  or  evade  the  platform  or  both.  Thb  process  can  be  extended 
ad  infinitum.  The  branching  paths  among  the'diamonds  represents 
a  hierarchy  of  decisions  that  are  involved  in  controlling  the 
activity  of  the  organization  and  resources  whose  objective  b  to 
limit  losses. 

WARFARE  FUNCTIONS 


figure  9.  Warfare  Function  Decomposition  with  Decide 


There  Is  also  a  decomposition  of  the  Decide"  function  that 
supports  the  decision  making  at  each  level,  figure  10  depicts  a  two- 
tier  decomposition  of  'Command  Functions".  These  functions  are 
related  to  the  functions  normally  found  in  any  concept  model  of 
decision  making,  such  as  the  Lawson  model  or  SHOR  paradigm,  ct 
al  Wc  often  refer  to  it  as  POA&E,  for  Plan,  Observe,  Assess  and 
Execute  The  basic  structure  is  intended  to  be  a  refinement  of  the 
HEAT  whirlygig  mode).  A  more  detailed  description  of  the 
functions  to  the  third  tier  is  another  product  of  the  methodology 
development  mentioned  above.  The  POA&E  b  shown  here  In  order 
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HgurclCL  Command  Function  Decomposition 


C2  MEASURES  OF  EFFECTIVENESS 

Following  the  definition  of  MOE  established  earlier,  the  MOE 
for  decision  nuking  must  involve  the  probability  of  nuking  a 
decision.  Figure  11  presents  a  canonic  form  for  an  MOE  that  reflects 
the  essence  of  the  outcome  of  the  decision  process,  which  is  to 
initiate  a  function  with  resources.  The  necessary  conditions  for 
making  the  decision  arc  also  used  to  “condition"  the  MOE. 
Authority  is  required  for  each  of  the  elements  of  the  derision;  the 
function  initiation  and  the  resource  allocation.  In  addition, 
resources  must  be  available  and  information  b  needed  to  recognize 
that  a  situation  exists  which  calls  for  the  initiation  of  the  function 
and  other  information  is  needed  to  know  which  resources  arc 
available  to  assign  to  the  task.  Finally,  the  MOE  b  conditioned  on 
whether  the  Mission  context, (current  situation)  actually  calls  for 
the  function  as  being  appropriate.  This  last  condition  accommo- 
dates  the  concept  of  the  "accuracy*  of  the  derision,  which  is  often 
mentioned  as  a  C2  metric 


brother  dass^G  metric  b  timeliness.  Tfcb  is  represented 
hy  the  requirement  to  initiate  the  function  in  time  to  meet  or  exceed 
the  goal.  The  MOS.for  the  mission  oriented  function  will  be 
dependent  on  and  conditioned  oo  the  rime  that  it  b  sn&iiid.  If  the 
time  of  tins  initiation  b  within  the  "window  cf  opportunity" ,  we 
say  that  the  derision  was  timely.  In  fact  the  probability  of 
*xcmp5sHng a  function  b  a  variable  function  of  time.  Thbbabo 
.  true  of  the  probability  of  maSsng  a  derision.  Since  the  Mission 

MOB  b  dependent  on  the  derision  MOE,  their  time  factors  will  also 

be  related.  Futcreworicb  intended  to  address  thb  relationship. 

A  third  of  l-mentioncd  C2  metric  b  completeness.  No  aspect  of 
the  proposed  C2  MCE  addresses  thb.  1  am  not  sure  that  complete¬ 
ness  js  a  necessary  metric.  It  usually  applies  to  the  information 
available  to  the  derision  maker.  The  issue  here  b  sufficiency  of 
irionrubon.  not  absolute  completeness-  Completeness  may  be  an 
MOP  by  the  definition  above  and  may  be  useful  in  assessing 
equipment  performance? 


IMPACT  OF  C2  MOE  ON  ANALYSIS 

Figures  12  through  14  provided  example  of  how  the  C2  MOE 
fits  into  an  analysis.  In  Figure  12,  the  normal  Probability  of  Kill  is 
calculated  as  the  product  of  the  Conditional  Probabilities  of 
.Detection,  Classification,  Localization  AND  Kill.  When  this  is 
aggregated  over  all  the  targets,  the  Mission  Success  for  Attrition  b 
realized.  The  Probability  of  Detection,  in  addition  to  being 
conditioned  on  the  presence  of  a  target,  as  was  mentioned  earlier,  is' 
also  conditioned  on  the  initiation  of  the  Search  function.  The 
Probability  of  Initiating  a.od  Allocating  Resources  to  Search  is  the 
C2  MOE  in  this  case.  It  is  shown  to  be  conditioned  on  whether  or  not 
a  cue  has  been  received.  This  reflects  the  difference  in  likelihood 
of  a  decision  maker  initiating  a  search,  depending  on  whether 
there  b  information  available  to  limit  the  search  area.  The 
Probability  of  Detection  will  be  the  product  of  the  detection 
probability  conditioned  on  the  search  and  the  search  derision 
probability.  Note  that  the  conditional  detection  probability  is 
also  dependent  on  the  availability  of  cueing  information.  This 
suggests  a  magnification  pf  the  effect  of  a  cue  since,  not  only  is  the 
detection  probabiMy  increased,  the  decision  probability  is  also 
higher. 


aggregation  of  warfare  METRICS 

fMQE'sl 


A  CANONIC  FUNCTION  -  BASED  C2  MOE 


PROBABILITY  OF  D£CK>3JO  TO 

WfTtATE  FUNCTION 
WITH  RESOURCES 

(AT  A  R«£  TO  EXCEED  THE  GOAL) 


GIVEN 

AUTHORITY  TO  MT1ATE  FUNCTIONS 
AUTHOfilTYTO  CONTROL  RESOURCES 
^FORMATION  NQECEDTO  WAKE  UOSCti 
RESOURCE  AVA1A0U;  TO  PERFORM  FUNCTION 

(SITUATION  CA11S  FOR  THE  CCCSION) 


Figure  11.  Canonic  Definition  of  C2  MOE 
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Figure  12.  Impact  o(C2  MOE  on  Warfare  Analysis 


In  Figure  13,  lire  classical  role  ol  the  sonar  equation  in 
cterminmg  Ihc  probability  ol  detection  is  shown  schematically 
his  also  provides  a  representation  o(  ibe  role  of  Ihc  definitions  for 
10P  and'  physical  parameters-  as  noted  by  Ihc  small  numerals  in 
he  figure. 
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explicit  and  provides' the.  potential -for  examining  dynamic 
organizational  issues- 


figure  13.  Standard  Analysis  of  Detection  Probability 


The  Canonic  Function-Based  C2  Measure  of  Effectiveness 
satisfies  the  motivational  concerns  shown  in  figure  1.  The  MOE  is 
embedded  in  the  Mission-driven  hierarchy  of  objectives  so  that  the 
function  to  be  performed  provides  the  context  for  assessing  the 
effectiveness  of  the  decision  making.  The  MOE  is  also  embedded  in 
the  aggregation  equation  for  the  operation  so  that  the  overall 
effectiveness  is  dependent  on  the  outcome  of  the  decision  process, 
finally,  the  MOE  reflects  the  purpose  of  decision  making  directly, 
which'  is  to  allocate  resources  to  perform  functions  in  a  timely 
manner.  The  canonic  form  provides  a, common  definition  for  all 
cases  and  a  means  for  orienting  the  analyst  to  the  essential 
conditions  to  be  accounted  for,  which  arc  information  and  resource 
availability  and  authority  to  carry  out  the  assigned  Missions, 
Functions  and  Tasks. 
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figure  14  is  a  pictorial  representation  of  the  decision  making 
process  (POA&E)  and  its  requisite  conditions  that  provide  the  basis 
for  the  decision  outcome.  A  variable  not  mentioned  previously  is 
the  human  factor  element.  As  we  know,  this  will  hive  a  major 
influence  on  the  Probability  of  Deciding. 

DECraON  MAKlMG.MHIRIBtfflONS.TO  EffECTIVEHESS 


figure  14.  Decision  Making  Product  Relationship 


SUMMARY 

The  final  example  only  shows  the  role  a  derision  probability 
has  on  the  outcome  of  a  single  mission  function.  Consider  that  the 
concept  is  intended  to  apply  to  the  initiation  of  each  and  every 
function  involved  fn  the  operation.  While  it  may  be  highly  likely 
that  the  right  derisions  will  be  made  when  the  conditions  arc  right 
and  the  Information  and  resources  are  available,  the  large  number 
of  derisions  that  arc  involved  implies  that  even  small  differences 
from  unity  will  accumulate  to  deflate  the  overall  effectiveness  of 
the  Force.  The  proposed  MOE  provides  the  analytical  means  to 
account  for  the  effect  of  ‘imperfect  C2\  It  also  provides  the  means 
to  couple  the  availability  of  information  and  resources  to  the 
mission  outcome,  from  an  organizational  perspective,  the  effect  of 
delegation  of  authority  to  initiate  action  or  control  resources  is 
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ABSTRACT 

<Wc  report  here  progress  on  research  conducted  to  relate  the 
performance  of  Battle  Management  functions  to  overall 
system  effectiveness*  .  We  describe  a  method  that  capf 
lures  this  relationship  by  expressing  the  operation  of  a 
BMC**  system  in  terms  of  a  time- varying  finite-state 
Markov  chain. 

We  also  present  several  analysis  methods  based  on 
two  important  sensitivity  measures  that  are  derived  from 
this  relationship:  pseudo-costates  and  System  Effective¬ 
ness  Derivatives.  These  two  measures  offer  interpreta¬ 
tions  that  permit  the  identification  of  time  epoches  during 
a  conflict  when  the  BMC3  system  under  study  is  most 
sensitive  to  both  favorable  and  unfavorable  function  out¬ 
comes,  and  to  processing  bottlenecks.  These  measures 
support  diagnostic  analysis  of  BMC3. systems,  and 
should  prove  useful  <in  the  development  of  more  efficient 
Battle  Management  systems. 


SECTION  1.  INTRODUCTION 


1.1  OBJECTIVE  OF  THIS  PAPER 

We  present  in  this  paper  a  method  to  relate  the  per¬ 
formance  achieved  by  Battle  Management  functions  to  the 
consequent  effectiveness  achieved  by  the  larger  military 
system  served  by  those  functions.  The  quest  for  such  a 
relationship  is  by  no  means  new,  having  been  the  subject 
of  intense  research  over  the  last  ten  years  (1, 2, 3, 8J,  and 
the  motivation  for  working  groups  sponsored  by  the 
Military  Operations  Research  Society  (MORS)  14-7],  and 
represented  at  MJT/ONR  and  the  JDL  C2  Symposia  [8- 
1  lj.  While  several  of  these  earlier  efforts  sought  a  theory 
for  Cz  systems  at  large,  wc  seek  here  a  more  modest  goal: 
a  method  to  relate  function  performance  to  system  effec¬ 
tiveness. 


There  arc  two  critical  distinctions  between  earlier 
efforts  and  the  method  wc  develop  and  present  here.  First, 
our  method  aims  to  describe  behavior  without  prescribing 
how.  BMC**  systems  should  conduct  operations  to  maxi¬ 
mize  some  measure  of  effectiveness.  Second,  our  empha¬ 
sis  is  on  performance  measures  for  automated  functions, 
meaning  that  our  method  need  merely  describe  the  behav¬ 
ior  of  those  portions  of  a  C2  system  that  have  a  nrc- 
PIQgrammgd-dKisiQn  .logic.  This  second  distinction  is 


The  research  described  here  was  conducted  for  Dr.  Doyle 
Thomas  at  the  U.S.  Army  Strategic  Defense  Command 
(USAS  DC)  under  contract  DASG60-87-C-0004  to  Unisys 
Corp.:  "Performance  Measures  for  System  Battle 
Management  Controller 


important  because  automated  functions  exercise  only  a 
finite  number  of  decisions,  thereby  permitting  us  to  model 
both  the  determinants  and  consequences  of  decisions  in  a 
succinct  manner. 

The  systems  of  interest  to  us  here  bear  strong 
similarities  to  assembly  lines  (admittedly,  stochastic  as¬ 
sembly  lines)  where  Battle  Management  functions  operate 
in  concert  to  advance  the  larger  military  system  from  one 
state  to  the  next  during  a  conflict  We  illustrate  this 
analogy  in  Figure  1  from  the  point  of  view  of  threats  be¬ 
ing  engaged  by  a  defense  system.  The  circles  in  this  fig¬ 
ure  denote  functions  performed  against  threats,  the  arcs 
indicate  potential  outcomes  from  any  function,  and  flows 
along  these  arcs  represent  the  threats  undergoing  process¬ 
ing  by  this  system.  The  processing  on  any  assembly  line 
is  always  prone  to  some  error  or  incomplete  work,  and  so 
it  is  in  this  example.  Nevertheless,  there  is  a  general  pat¬ 
tern  to  the  processing  and,  more  to  the  point,  the  BMC3 
system  must  successfully  advance  each  threat  through  a 
requisite  set  of  processine  states  to  achieve  a  successful 
engagement.  Thus,  we  might  ponder  how  an  improve¬ 
ment  in  performance  at  some  stage  in  this  assembly  line 
leads  ultimately  to  an  improvement  in  effectiveness  for 
the  larger  system.  Indeed,  a  corollary  to  this  inquiry  is  the 
question  "where  are  improvements  in  performance  most 
needed?"  The  research  described  here  seeks  answers  to 
these  questions. 

1.2  THE  ELEMENTS  OF  THE  PERFORMANCE 

MEASUREMHTHOD 

The  method  wc  describe  encompasses  a  quantitative 
relationship  between  function  performance  and  system 
effectiveness  and  analysis  methods  for  computing 
sensitivity  measures  from  these  relationships  The  rela¬ 
tionship  captures  the  operation  of  an  arbitrary  BMC3 
system  as  a  time-varying  finite-state  Markov  chain,  and  is 
accompanied  by  a  set  of  principles  for  assembling  a  state- 
equivalent  model  for  a  Battle  Management  system.  The 
analysis  methods  quantify  key  sensitivity  relationships 
between  function  performance  and  system  effectiveness 
using  state-transition  statistics  collected  for  the  BMC3 
system  of  interest.  We  direct  the  reader  to  (13]  for  a  com¬ 
plete  description  of  the  methodology. 

1.3  ORGANIZATION  OFTHIS  PAPER 

The  remainder  of  this  paper  spans  five  sections 
Wc  develop  the  relationship  between  function  performance 
and  system  effectiveness  in  Section  2,  and  present  associ¬ 
ated  analysis  methods  in  Section  3.  Wc  present  in  Sec¬ 
tion  4  the  objectives  and  the  test  conditions  for  experi¬ 
ments  we  conducted  to  demonstrate  the  method,  and  pre¬ 
sent  computational  results  in  Section  5.  We  conclude  this 

Er  with  remarks  on  the  methodology,  and  comment  on 
c  modeling  directions  in  Section  6. 
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SECTION  Z,  A  QUANTITATIVE  RELATIONSHIP 
BETWEEN  PERFORMANCE  AND  EFFECTIVENESS 

2.1  BMC3  PERFORMANCE  WmilN  DYNAMIC 

MHJTARY  SYSTEMS 

Consider  a  military  system  that  can  be  in  any  one 
of  a  number  of  states  S  at  any  time  during  a  conflict.  We 
defer  the  question  just  what  constitutes  the  'state'  for  this 
system,  except  to  note  that  it  can  denote  the  current 
disposition  of  each  object  of  concern  to  the  system 
(threat,  sensor,  weapon.  Battle  Management  node,  asset  at 
risk,  etc.),  or  it  can  denote  a  statistical  measure  of  current 
dispositions  taken  over  objects  in  the  aggregate.  We  will 
consider  this  issue  in  more  detail  later  in  this  section. 
Nevertheless,  we  introduce  the  distinction  here  between 
Kiminai  and  intermediate  states;  the  former  denoting  the 
set  of  sates  that  are  reached  by  the  system  at  the  end  of 
the  conflict,  and  the  latter  denoting  the  set  of  sates  that 
the  system  can  reach  any  time  prior  to  the  end  of  the  con¬ 
flict.  We  also  introduce  the  notion  of  desirable  and  unde¬ 
sirable  terminal  sates  to  denote  sates  that  the  CT  system 
would  like  to  reach  or  avoid,  respectively,  at  the  end  of  the 
conflict. 

We  also  assume  this  system  exercises  a  set  of 
functions.  Ft,  at  every  time  period  to  mainain  the  system 
within  a  desired  set  of  sates.  Were  wo  to  carefully 
monitor  the  activity  of  a  function  at  a  particular  instant  in 
time  we- would  discover  that  the  function  achieved  a  Cer¬ 
tain  processing  throughput,  produced  a  certain  set  of  deci¬ 
sion  outcomes,  and  perhaps  even  committed  a  ccrain 
number  of  'errors'  in  its  decisions.  We  use  the  notional 
term  operating  condition'  to  refer  to  these  activities  as  a 
whole,  and  let  f,  denote  the  operating  "condition  of  func¬ 
tion  f  at  time  t. 

We  assume. that  this  system  seeks  a  sequence  of 
states  throughout  the  duration  of  a  conflict  that  minimizes 
an  expected  cost  inclined  at  the  end  of  the  conflict; 


MINEfJJ  =  23  p^Og-^i) 

i  e  S 


Pj(i):  the  probability  that  the  system  is  in  state  i 
at  the  end  of  the  conflict;  and 

gq<0:  the  cost  to  the  system  if  it  is  in  state  i  at 
the  end  of  the  conflict. 

In  short,  this  system  faces  a  terminal  cost  optimal  control 
problem.  (We  state  without  proof  that  the  general  case 
where  the  cost  is  also  accumulated  at  every  time  step  can 
be  reduced  to  the  terminal  case  problem;  we  direct  the 
reader  to  [12]  for  details ) 

The  reader  should  note  that  we  have  not  imposed 
any  restriction  on  the  functional  form  of  the  cost  function, 
BIT):  this  term  can  be  a  scalar  or  a  Vector,  linear  or  non¬ 
linear. 

We  express  the  system  state  dynamics  in  terms  of 
. transitions: 


Pt+1  ~  Pt(Pi>Fi)p[ 


(2-2) 


where  Pt(p,,  F,)  represents  the  stale  transition  probability 
matrix  for  fime  t,  and  the  initial  state  distribution,  pn,  is 
given.  P,(p.,  Ft)  is  square. and  of  dimension  equal  to  1SI. 
and  is  functionally:  dependent  on  the  current  state 
probability  distribution,  p.,  and  on  the  current  operating 
conditions  of  the  functions  acting  on  those  states,  Ft.  (In 
the  interests  of  brevity,  we  will  express  this  matrix  sim¬ 
ply  as  Pt,  and  refer  to  the  arguments  only  when  the  dis¬ 
cussion  requires.) 

We  introduce,  the  vector  Jy  to  denote  the  terminal 
cost  to  the  system  on  a  statc-by-state  basis: 


Jt 


(2-1) 


gTd)' 

Sl<2) 

SlC'lSI), 


'(2-3) 


where; 


tiie  states  that  the  system  can  reach  (with 
ISI  denoting  the  number  of  possible  states) 


The  reader  will  note  that  the  righthand  side  of  Equation  2- 
2  can  be  re-written  in  vector  form  as  pV  •  JT  where 1  de¬ 
notes  the  transpose.  We  also  introduce  the  vector  Jt  to 
denote  the  cost-to-go  from  time  t  on  a  state-by-state  basis, 
and  .compute  the  values  within  this  vector  through  the 
following  jxickward-moving  recursion  beginning  at  time 
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Jt  =Ft'Jt+l 


04) 


We  can  partition  die  stales  that  can  be  reached  from 
an  arbitrary  state- i  attime  t  into  a  desirable  set,  D,(i), 
and  an  undesirable  set,  Ut(i),  where: 

V«>  S  J1+](j  Ij  €  D,(i))  (2-5) 


Jt®  5  h* lO  I j  e  U,(i))  0-6) 


The  reader  will  note  that  we  use  the  categories  'desirable' 
and  undesirable'  in  terms  of  intermediate  states  that  are 
reached  from  a  particular  (reference)  state  at  a  particular 
time  in  the  conflict. -The  implication  here- being  that  a 
desirable'  transition  from  a  particular  state  is  more  likely 
to  put  the  system  on  a  trajectory  towards  a  desirable  ler- 
mioal  slate  than  would  an  'undesirable'  transition.  This  is 
not  to  imply,  however,  that  the  intermediate  states  reached 
from  a  desirable  transition  are  necessarily  desirable  termi¬ 
nal  states  in  their  own  right. 

We  seek  a  measure  to  account  for  the  chancy.  in  the 
cost-to-go  from  a  state  were  the  BMC3  system  slightly 
more  successful  arranging  favorable  state  transitions  from, 
that  state.  We  introduce  the  term  the  nseudo-nmiatp  to 
represent  this  measure;  the  pscudo-costate  represents  the 
derivative  of  the  effectiveness  measure  with  respect  to  the 
likelihood  that  the  system  will  make  a  transition  to  a  de¬ 
sirable  state,  We  first  illustrate  the  derivation  of  pseudo¬ 
costate  for  a  state  that  has  only  two  exit  transitions,  and 
then  derive  the  expression  for  pscudo-costate  for  the  more 
general  case. 

Let  us  suppose  that  the  system  is  in  stale  i  at 
time  r.and  can  reach  one  of  only  two  states  i  and  k  at 
the  next  time  period  .with  probabilities  a  and  (1- a),  re¬ 
spectively.  The  value  of  the  cost-to-go  from  state  i  at 
•time  t  is  given  by; 


J;(t)  “  O^t+l©  (1  -  (X}J \+\(k)  (2-7) 

Let  us  suppose  that  Jt(k)  >  it(i)  >  ;  state  j  is 

the  desirable  state  to  reach  from  state  1  at  time  t,  while 
siatc  k  is  the  undesirable  state  to  reach  from  i.  Suppose 
that  the  BMC-1  system  can  increase  by  e  the  probability 
that  the  system  will  go  from  state  t  to  state  j.  From 
inspection,  the  net  change  in  the  cost-to-go  from  state  t 
is; 


AJ,(i)  =  7  (j[-;(j)  -  J,+1(k)) 

leading  to  the  following  expression: 


(2-8) 


r,®  = 


m 

da 


Orel©  -  Vl©)) 


P-9) 


where  rt(i)  denotes  the  pseudo-costate  from  state  i  at 
ume  -h 

Jn  general,. the  system  may  be  able  to  reach  an 
arbitrary  number  of  states  from  a  particular  state.  The 
value  of  the  pseudo-costate  for  any  state  is  the  value  of  the 
average  cost-to-go  from  desirable  states  minus  the  value  of 
the  average  cost-to-go  from  undesirable  states,  on 


j.C  D,(i) 


Xw 

i«  U,® 


(2-10) 


where  Pt(i  j)  denotes  the  probability  that  the  system  will 
go  from  state  i  at  time  t  to  slate  j  by  time  t+1. 

Let  us  suppose  that  we  have  observed  the  behavior 
of  a  system  for  nominal  operating  conditions  of  the  func- 
uons  with  the  state  transition  probability  matrices  Pn, 
pb  •••  Pt-i:  associated  with  this  system  is  a  nominal 
value  of  the  effectiveness  measure  J  =  EfgT(Xx)).  We 
would  like  to  establish  the  derivative  of  J  with  respect  to 
the  operating  condition  for  function  f  at  lime  i.  The 
value  of  the  derivative  wc  seek  is  expressed  by  the 
following  equation:. 


<•*,  mil!. 


daJi) 

P,<9-~f\(')  (2-H) 


where  Sf  denotes  the  system  states  that  permit  the  opera¬ 
tion  of  funcuon  f,  and  a,(i)  denotes  the  likelihood  that 
transitions  out  of  state  i  at  lime  t  will  be  desirable 
The  change  in  the  perfoimance  of  function  f  at  ume  t 
leads  to  an  immediate  change  in  slate  transition 
probabilities;  this  immediate  effect  is  captured  m  the  first 
term  in  the  righlhand  side  of  the  equation  above.  The 
cnangc  in  state  transition  probabiliucs  at  umc  t  ?  yields 
changes  in  state  probability  distributions  in  future  time 
periods  That  lead  to  changes  in  the  state  transition 
probabilities  in  those  ume  periods  (due  to  tho  nonlinear 
nature  of  the  state  dynamics  model  in  Equation  2-2).  This 
persistent  effect  is  captured  in  the  second  term  in  the 
nghthand  side  of  the  equation  above. 

If  we  adopt  a  Matte  approximation  for  our  sys¬ 
tem,  replacing  Pt(pt,  F.)  with  simply  P,(F,),  we  can 
ignore  tho  persistent  effect  to  arrive  at  the  following 
approximate  relationship  between  function  performance 
and  system  effceuvcncss: 


a; 


X  p«® 


i  c  S 


3a,(i) 

3f, 


r,(i) 


(2-12) 


2.2  THE  CHOICE  OF  STATE  FOR  A  SYSTEM 

What  constitutes  the  state  of  a  BMC3  system?  In 
principle,  'Slate'  at  anyTimc  should  denote  the  disposition 
of  sash  object  of  concern  to  the  system  (a  threat,  a  sen; 
sor,  a  weapon,  a  Battle  Management  node,  an  asset  at  risk, 
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etc.).  This  is  impractical,  however,  for  a  system  involv¬ 
ing  thousands  of  objects  even'if  every  object  has  a  binary 
state. 

Ah  alternate  definition  of  state  emerges  when  ob¬ 
jects  are  collected  into  classes,  with  a  finite  number  of 
states  defined  for  each  class:  the  system  state  is  the  Carte¬ 
sian  product  taken  over  theseseparate  classes:  For  exam¬ 
ple,  .we  might  create  three  object  classes:  THREAT, 
SENSOR,  and  WEAPONfand  distinguish  objects  in  the 
class  THREAT  according  to  whether  they  have  been 
'detected', -'oacked  in  two  dimensions', 'tracked  in  three 
dimensions',  'assigned  to  a  weapon':  etc. "This  approach' 
does  not  presume  that  all  objects  within  a  single  class  are  - 
alike  since  we  can  always  define  the  states  within  that 
class  in  such  a  way  that  we  preserve  important  differences 
between  objects  appearing  therein. 

We  can  reduce  further  still  the  possible  values  of 
system  state  by  considering  only  the  statesthat  can  be 
reached  by  objects  belonging  to  a  single  class.  The  idea 
here  is  to  account  for  the-states  obtained  by  all  other 
objects  implicitly  within  the  parameters  of  the  Markov 
model  used  to  describe  the  behavior  of  the  system'.  While 
we  continue  to  lose  modeling  precision  with  this  exten¬ 
sion,  we  gain  both  computational  efficiency  and  the  abil¬ 
ity  to  assemblc'a  Markov  model  of  the  system  using 
fewer  sample  points  (i.c„  using  fewer  system-level  simu¬ 
lations  or  exercises)  than  would  otherwise  be  needed  to 
assure  statistical  significance. 

Under  this  definition,  S  denotes  the  set  of  states 
that  can  be  reached  by.  objects  under  consideration. 
Similarly.  Sf  denotes  the  set  of  object  states  that  meet 
necessary  conditions  for  processing  by  function  f,- these 
conditions  having  been  determined  by  the  rules  of 
operation  of  the  system: 

We  adopt  this  last  definition  of  state  in  this  paper 
when  we  examine  a  midcourse  ballistic  missile  defense 
(BMD)  system  in  Section  4.  We  model  explicitly  the 
states  obtained  by  RVs  -  these  being  the  primary  focus  the 
system  -  and  account  for  the  states  of  all  other  objects 
implicitly  within  the  transition  probabilities  computed 
from  repeated  simulation  of  that  system. 

We  have  necessarily  omitted  several  details  that 
should  be  considered  in  the  selection  of  ’state’  for  a  BMC? 
system.  In  particular,  we  have  not  considered  whether 
there  is  an  obvious  logic  that  one  can  use  to  define  the 
states  that  are  germane  to  a  set  of  automated  BMC2 
functions,  nor  have  we  considered  how  to  associated  func¬ 
tions  and  function  characteristics  (particularly  function 
enablement  and  function  outcomes)  to  stales  and  state 
transitions.  We  direct  the  reader  interested  in  pursuing  the 
method  further  to  (13)  for  our  own  reflections  on  these  is¬ 
sues. 


SECTION  3.  ANALYSIS  METHODS 

In  this  section  we  present  several  analysis  methods 
that  emerge  from  the  performance  measures  theory.  The 
first  method,  based  on  the  pseudo-costates  introduced  in 
Section  2,  provides  a  way  to  identify  processing  bottle¬ 
necks  and  critical  state  transition  timelines.  The  second 
method  is  based  on  a  measure  known  as  the  System 
Effectiveness  Derivative;  this  measure  identifies  lime  pe¬ 
riods  when  overall  system  effectiveness  is  most  sensitive 
to  changes  in  the  performance  of  any  one  function. 


3.1  COSTATE  ANALYSIS  ' 

In  this  subsection  we  provide  an  interpretation  of 
the  pseudo-costate  terms  we  introduced  in  the  previous 
section.  The  utility' of  Costate  Analysis,  depends  largely 
on  being  able  to  successfully  interpret  the  meaning  behind 
rising  and  falling  pseudo-costate  values  for  select  system 
states  over  time.  ‘  ' 

It  has  been  our  experience  that  the  pseudocostates 
for  many  states  typically  have  relatively  small  values  at 
the  beginning  of  thexonflict.  It  is  at  the  beginning  of  the 
conflict  that  a  BMCN  system  typically  has  sufficient  time 
to  recover  from  unfavorable  state  transitions  with  little  ill 
effect.  A  large  number  of  the  states  that  the  system  can 
enter  are,  therefore,  largely  indistinguishable  from  each 
other,-  thereby  yielding  relatively  small  pseudo-costate 
values.  This  phenomena  is  illustrated  in  Figure  2  where 
we  present  representative  pseudoxostates  for  select  stales 
that  can  be  reached  by  threats  engaged  by  a  ballistic  mis¬ 
sile  defense  system. 


CNCXMUENTIME 

Figure  2.  Representative  Pscudo-Costate  Profiles  Over 
Time 

The  profile  of  the  pseudo-costate  for  a  particular 
state  following  the  beginning  of  the  conflict  is  often  dis¬ 
tinguished  by  one  of  two  patterns.  The  first  involves  a 
monotonic  rise  in  value  followed  by  a  monotonic  decline 
in  value.  The  rise  in  value  occurs  when  the  time  required 
by  the  system  to  recover  from  an  unfavorable  state  transi¬ 
tion  and  reach  a  desirable  terminal  state  is  quickly 
approaching  the  time  available  for  recovery  (e.g„  time 
remaining  in  the  conflict).  The  costs-to-go  from  those 
intermediate  slates  that  are  reached  through  unfavorable 
transitions  grow  faster  than  the  costs-to-go  from  those  in¬ 
termediate  stales  reached  through  favorable  transitions, 
yielding  an  increase  in  the  value  of  the  pseudo-costate  for 
that  state.  Conversely,  the  value  of  the  pseudo-costatc 
will  decline  when  the  lime  required  to  advance  the  system 
from  an  intermediate  state  reached  by  a  favorable  transition 
toward  a  desirable  terminal  state  is  quickly  approaching 
the  time  remaining  in  the'conflict.  Alternatively,  the  de¬ 
cline  in  value  can  indicate  that  the  system  no  longer  has 
the  resources  needed  to  effect  favorable  changes  in  state. 
In  short,  monotonically  rising  and  falling  pseudo-costates 
reveal  critical  processing  timelines  for  the  system  under 
study. 

The  second  pattern  is  where  the  value  of  the 
pscudo-costalc  for  a  particular  state  rises  and  falls  over 
several  successive  time  intervals.  This  pattern  typically 
indicates  that  processing  bottlenecks  are  occurring  in  the 
system.  A  processing  bottleneck  prevents  the  system' 
from  capitalizing  on  a  favorable  transition  from  the  state 
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under  consideration.  This  reduces  the  distinction  between 
a' favorable  and  unfavorable  changes  in  state,  and  causes 
the  value  of  thepseudo^costate  value.to  decline.  The  re¬ 
moval  of  thehbotlleneck  provides 'an  environmen  t  where 
.  the  system  can  capitalize  on  a  favorable  change  in  state, 
thereby  causing  the  value  of  the  pseudo-costate  to  nse. 
The  oscillation  in  the  value  of  the  costate  for  the  state  in 
question  corresponds  to  the  periodic  formation  and  re¬ 
moval  of  processing  bottlenecks. 

3.2  THE  SYSTEM  EFFECTIVENESS  DERIVATIVE 
We  have  established  that  Battle  Management  func¬ 
tions  contribute  to  the  effectiveness  of  the  overall  system 
by  advancing  the  system  along  a  trajectory  of  intermediate 
states  to  a  terminal  state.  We  developed  a  Markov  model 
to  express  the  performance  of  Battle  Management  func¬ 
tions  in  terms  of  state  transitions  that  led  to  the  relation¬ 
ship  between  function  performance  and  system  effective¬ 
ness  presented  in  Equation  2-12.  This  relationship  can  be 
difficult  to  evaluate  in  practice,  however,  since  it  pre¬ 
sumes  we  know  how  a  change  in  the  operating  condition 
of  the  function  in  question  leads  to  a  change  in  the  proba¬ 
bility  that  the  system  will  be  advanced  to  a  favorable 
state.  Specifically,  this  expression  incorporates  the  partial 

derivative -jpn  where  at(i)  denotes  the  probability  that 

the  system  will  advance  to  a  favorable  state  if  it  is  in  state 
i  at  time  t. 

We  can  derive  a  sensitivity  measure  that  avoids  this 
derivative  altogether.  This  measure  expresses  the 
sensitivity  of  the  system  effectiveness;  measure  with  re¬ 
spect  to  the  probability  that  the  function  in  question  will 
advance  the  system  to  favorable  states.  We  refer  to  this  as 
the  System  Effectiveness  Derivative  (SED),  and  express  it 
through  the  following  equation: 


Xp.©1'.® 

i  e  St 

#)  =  — =; -  (3-2) 
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.The  USED  has  the  same  interpretation  as  a  time¬ 
line  sensitivity  measure  for  functions  that  pseudo-costates 
have  for  system  states.  -  Indeed,  oscillations  in  the  value  of 
the  USED  for  a  function  typically  signify  the  formauon 
and  removal  of  processing  bottlenecks  at  one  or  more 
functions  appearing  after  that  function  in  the  normal  pro- 
cessing'sequencc. 

SECTION  4:  DEMONSTRATION  OF  PRINCIPLE 

We  describe  in  this  section  the  analyses  we  con¬ 
ducted  to  demonstrate  the  utility  of  our  methodology. 
Specifically,  we  describe  the  BMC3  system  used  for  our 
study,  describe  the.  hypotheses  we  formulated  to  establish 
the  capabilities  of  our  method,  and  describe  the  procedure 
used  to  test  each  hypothesis. 

4.1  THE  EMC3  SYSTEM  MODELED 

The  BMC3  system  used  for  our  analysis  controls 
the  operation  of  a  midcoutse  ballistic  missile  defense  sys¬ 
tem.  The  system  is  partitioned  along  regional  lines  of 
authority,  with  overall  operations  within  any  one  region 
under  the  control  of  a  regional  battle  manager.  Each  re¬ 
gion  is  divided  into  two  sectors,  and  each  sector  has  its 
own  organic  sensors.  The  weapons  are  located  at  (ground- 
based)  Launch  Control  Complexes,  and  arc  under  the  direct 
control  of  the  regional  battle  manager. 

The  BMC3  system  performs  13  major  functions: 


tifi)  =  £p,(i)Tt(i>  0-1) 

i  G  S( 


where  Sf  denotes  the  system  states  that  permit  the  opera¬ 
tion  of  function  f. 

The  SED  is  an  aggregate  measure  of  sensitivity 
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since  it  presumes  that  -jjj- 


is  constant  for  all  states 
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that  permit  the  operation  of  function  I.  The  value  of  the 
SED  for  any  particular  function  at  any  lime  is  detemtined 
jointly  by  the  probability  that  the  system  in  in  a  state  that 
permits  the  operation  of  the  function,  and  by  the  magni¬ 
tudes  of  the  pseudo-costates  involved.  In  this  respect,  a 
comparison  of  values  of  SEDs  across  functions  reveals 
which  functions  are  the  major  contributors  to  system  ef- 
lectiveness  at  any  one  time. 


3.3  ,THF.  UNIT  SYSTEM  EFFECTIVENESS 
DERIVATIVE 

A  normalized  version  of  the  SED  is  the  Unit  Sys¬ 
tem  Effectiveness  Derivative  (USED),  and  is  given  by: 


1.  Multi-Sensor  Object  Count:  determines 
which  objects  were  seen  by  the  sensors  in 
each  sector  sensors  during  tho  last  surveil¬ 
lance  interval,  and  assigns  cvety.object  de¬ 
tected  to  a  sector; 

2.  Multi-Sensor  Correlation:  correlates  the  de¬ 
tection  reports  from  the  sector  sensors,  and 
assembles  and  maintains  sector  tracks  on 
objects; 

3.  Multi-Sector  Data  Fusion:  fuses  sector 
tracks  to  assemble/maintain  regional  tracks 
on  objects: 

4 .  Threat  Assessment:  classifies  the  lethality  of 
an  object,  determines  whether  the  object  is 
eligible  for  intercept,  and  places  objects  eli¬ 
gible  for  intercept  into  an  assignment  queue 

5.  Battle  Planning:  allocates  weapons  for  select 
time  intervals  and  selects  the  engagement 
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strategy  (e.g.,  shoot-shoot,  shoot-look- 
shoot,  etc.); 

6.  Engagement  Planning:  assigns  interceptors 
to  those  targets  present  in  the  queue  awaiting 
assignment,  and  .  instructs  the  weapon 
Launch  Control  Complexes  to  conduct  en¬ 
gagements; 

7.  Weapon  .Launch:  .schedules  interceptor 
launch  times  per  the  allocation  provided  by 
the  Battle  Planning  function,  and  executes 
the  launch  instructions  received,  from  die 
Engagement  Planning  function; 

8.  Sector 'Guidance  Assignment:  assigns  the 
responsibility  for  ihterceptor  guidance  up¬ 
dates  to  sectors; 

9.  Sensor  Guidance  and  Designation:  provides 
guidance  updates  to  interceptors  in  flight; 

10.  Sector  Kill  Observation  Assignment:  as¬ 
signs  the. responsibility  for  kill  observation 
to  sectors 

11.  Observation  Assignment:  a'ssigns  the  re¬ 
sponsibility  for  kill  observation  to  a  sector 
sensor; 

12.  Sensor  Kill  Observation:  observes  a,  com¬ 
pleted  interceptor/target  engagement;  and 

13.  Batde  Assessment:  accumulates  and  assesses 
statistics  on  engagement  outcomes. 


The  state  space  used  for  our  analyses  comprise  the 
states  that  can  be  reached  by  any  re-entry  vehicle  (RV)  as 
it  is  engaged  by  the  defense.  The  operations  of  this  mid- 
course  system  are/ captured  in  a  time-varying  Markov 
model  comprising  68  RV  states..  We  direct  the  reader  to 

[13J  for  further  details  on  the  state  definitions. 

4.2  HYPOTHESIS  1 

.  -The  purpose  of  our  first  hypothesis  is  to  determine 
whether  the  relation  between  function  performance  and 
system  effectiveness  expressed  in  Eq.  2-11  is  accurate.  Our 
hypothesis  is  that  this  relationship  is  accurate  in  the 
neighborhood  of  an  arbitrary  nominal  operating  condition. 

.....  The,, resolution  approach  for  this  hypothesis  is  to 
predipt  system  effectiveness  for  a  function  at  an  operating 
condition  that  is  slightly  different  from  a  nominal  condi¬ 
tion.  We  assume  we  know  perfectly  the  threat  state  tran¬ 
sition  probabilities  Tor  the  off-nominal  condition,  but  do 
not  know  the  cost1  of  leakage  at  that  off-nominal  condi¬ 
tion.  We  approximate  the  latter  using  the  average  cost 
statistics  computed  at  the  nominal  condition. 

,  Consider  both  a  nominal  and  an  off-nominal  oper- 
aung  condition  for  a  BMC->  system.  From  Eq.  2-1,  the 
svstem  effectiveness  measure  under  the  nominal  condition, 
J  is  expressed  in  terms  of  the  terminal  RV  state  distri¬ 
bution1  as: 


J"  -  =  X  Px®  •&?(') 

ic  S 


where  e-|(t)  is  the  average  cost  incurred  by  the  defense  for 
every  RV  appearing  in  state  i  under  the  nominal  condi¬ 
tion;  this ;  statistic  is  computed  from  a  Monte-Carlo  simu¬ 
lation  of  the.BMC-5  system  operating  at  the  nominal 
condition.  The  equation  for  the  state  dynamics  under  this 
nominal  condition  is  given  by: 


The  nominal  processing  sequence  conducted  by  this 
Battle  Management  system  is  illustrated  as  a  network  of 
queues  in  Figure  3.  Two  important  characteristics  of  this 
system  are  shown  here.  First,  most  of  the  functions  have 
a  finite  processing  throughput  rate  that  is  determined  by 
the  allocation  of  processing  capacity  provided  by  the  battle 
manager  responsible  for  that  function.  Second,  RVs  de- 
clared  to  be  alive  by  the  Kill  Observation  function  arc  re¬ 
ported  back  to  the  Threat  Assessment  function  for  subse¬ 
quent  lethality  assessment  and  weapon  assignment. 


the  BMC-*  System  Studied 


Phi  =  P,«)P"  (4-2) 


Similarly,  the  system  effectiveness  measure  under  the  off- 
nominal  condition,  J0,  is  expressed  as: 


J°  =  Xp>4®  (4-3> 

ic  S 


while  the  state  dynamic  model  is  given  by: 


Phi  =  P1<P°  *  F“)p°  (44) 


The -relationship  expressed  in  Eq.  2-1 1  implies  that 
the  following  estimate  of  the  effectiveness  measure  under 
the  off-noihinal  condition 
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*1  =  X  P  i(i)  ^T<i)  <4'9 


should  be  accurate  for  small  deviations  around  the  nominal 
operating  condition.-'  In  words,  we  compute  an  estimate  of 
the  effectiveness  measure  under  the  off ‘nominal  condition 
using  the  threat  state-  transition  probabilities  observed  for 
the  ^off-nominal  condition,  together  with  the  cost  of  leak¬ 
age  observed  for  the'nominal  condition. 

A  confirmation  of  oiir  hypothesis  has  two  implica¬ 
tions.  First,  we  can  conclude  that  the  relationship  be¬ 
tween  function  performance  and  system  effectiveness  is 
sufficiently  accurate  to  predict  changes  in  effectiveness 
within  the  neighborhood  of  a  nominal  operating  condl 
lion.  Second,  we  can  conclude  that  the  pseudo-costate 
statistics  derived  from  a  nominal  operating  condition 
accuratelj'  measure  the  change  in  system  effectiveness  if 
the  BMC-5  system  can  effect  favorable  changes  in  state 
with  higher  likelihood  than  it  is  achieving  under  the 
nominal  condition  , 

*13  HYPOTHESIS  n 

The  purposo  of  our  second  hypothesis  is  to  deter¬ 
mine  whether  the  Markov  approximation  used  in  Equation 
2-12  is  valid.  Our  hypothesis  is  that  the  Markov  approx¬ 
imation  is  valid  in  the  neighborhood  of  an  arbitrary 
nominal  operating  condition. 

The  resolution  approach  for  this  hypothesis  is 
similar  to  that  used  for  Hypothesis  I.  with  one  important 
difference:  wo  no  longer  assume  we  know  perfectly  the 
entire  threat  sate  transition  probability  matrices  at  the  off- 
nominal  condition.  We  assume  instead  that  wc  have  per¬ 
fect  knowledge  of  the  off-nominal  transition  probabilities 
for  just  those  states  that  arc  directly  affected  by  the  func¬ 
tion  under  study,  and  know  only  the  nominal  transition 
probabilities  for  all  other  states. 

To  make  this  clear,  consider  a  function  f  that  can 
act  upon  objects  that  appear  in' states  i)  and  in.  Amo- 
mentary  change  in  the  operating  condition  for  this  func¬ 
tion  at  some  time  interval  will  directly  affect  the  state 
transition  probabilities  for  those  two  states  at  that  time, 
and  will  indirectly  affect  the  transition  probabilities  for 
other  states  in  the  future.  We  ignore  the  latter  effects  by 
constructing  hybrid  transition  probability  matrices  for  ev- 
cry  time  period  that  incorporate  the  nominal  transiu'on 
probabilities  in  all  columns  with  the  exception  of  11  and 
J2.  and  incorporate  the  off-nominal  transiu'on  probabilities 
forcolumns  ij.and  i2-  Figure  4  depicts  the  construction 
of  a  hybrid  matrix. 


Figure  4.  The  Construction  of  a  Hybrid  TransiUon 
Probability  Matrix 


If  we  let  pT  (i)  denote. the  state  probability 
distribution  generated  at  the  end  of  die  battle  through  the 
use  .of  the  hybrid  transiuon  probability  matrices  in  equa¬ 
tion  4-3,  then  our  estimate  of  the  off-nominal  system  ef¬ 
fectiveness  measure  under  this  hypothesis  is  given  by: 


id  S 


A  confirmarion  of  our  hypothesis  will  lead  us  to 
conclude  that  the  SED  and  the  USED  measures,  which  are 
derived  using  the  Markov  approximation,  provide  a n 
accurate  esrimate  of  the  contribution  of  a  function  to  the 
system's  effectiveness  during  a  conflict 

4.4  IMPLEMENTATION  OFTHE  ANALYSES 

The  analyses  were  conducted  using  stau'stics  col¬ 
lected  from  a  Monte-Carlo  simulation  of  the J5MD  system 
described  earlier  in  this  secrion.  The  simulated  batUe  in¬ 
volves  650  re-entry  vehicles  (RVs)  and  350  decoys.  The 
system  effectiveness  measure  is  the  total  value  of  U.S. 
targets  destroyed  by  the  RVs.  This  effectiveness  measure 
is  nonlincar.in  the  number  of  RVs  leaking  through  the 
system  when  multiple  RVs  can  be  targeted  against  the 
same  defended  asset,  since  the  probability  that  the  asset 
survives  the  attack  is  the  product  of  the  probabilities  that 
it  will  survive  each  RV.  There  is  no  handover  of  track 
from  the  boost-phase  battle  to  the  midcourse  battle;  all 
RVs  and  decoys  in  the  simulation  arc  initially  undetected. 
The  simulation  provides  data  on  state  transitions,  leak¬ 
age,  and  asset  value  destroyed  for  a  state  equivalent  model 
of  the  system. 

We  tested  Hypotheses  I  and  II  using  statistics  col¬ 
lected  from  simulations  of  this  BMD  system  for  muluple 
values  of  a  key  parameter  in  the  Threat  Assessment  func¬ 
tion.  The  parameter  selected  was  the  lethality  threshold 
that  is  used  to  distinguish  lethal  objects  from  non-lethal 
objects;  this  parameter  can  bo  assigned  any  value  between 
0  and  1.0.  We  varied  this  parameter  from  0.2  to  0.8  in 
increments  of  0.1,  simulating  the  BMD  system  for  30 
replications  at  each  parameter  setting.  Stale  transition 
data  was  collected  every  5  seconds  of  engagement  time  for 
400  rime  intervals  at  each  replication,  yielding  400  state 
transition  probability  matrices  for  each  parameter  setting. 

We  used  both  a  variable  nominal  condition  and  a 
fixed  nominal  condition  for  these  hypotheses.  Under  the 
former,  we  set  the  nominal  value  of  the  lethality  threshold 
to  0.8,  predict  the  value  of  the  system  effectiveness  mea¬ 
sure  at  the  next  lower  ihresltold  setting  (0.7),  re-define  the 
nominal  condition  to  be  the  value  of  the  threshold  at  that 
next  lower  setting,  and  repeat  the  process  until  we  have 
examined  the  entire  range  of  parameter  values  under  con¬ 
sideration.  .The  purpose  here  is  to  determine  the'accuracy 
of  the  predictions  within  a  local  neighborhood  of  a  nomi¬ 
nal  point. 

Under  the  fixed  nominal  condition,  we  simply  set 
the  nominal  value  of  the  lethality  threshold  to  a  fixed 
value  (0.4  in  our  experiments)  and  estimate  the  value  of 
the  system  effectiveness  measure  at  all  other  threshold 
values.  The  purpose  of  this  approach  is  to  determine 
whether  the'hypotheses  are  valid  for  relatively  large  devia¬ 
tions  away  from  a  nominal  operating  condition. 
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SECTION  5. :  COMPUTATION  RESULTS 

5.1  INTRODUCTION 

In  this  section  we  present  the  results  of  the  analy- 
■ses  we  conducted  to  demonstrate  the  efficacy  of  our  per¬ 
formance  measures  method.  We  begin  with  the  computa¬ 
tional  results  developed  to' accept  or  reject  the  two  hy- 
potheses.we  presented  in  the  previous  section.  We  then 
present  the  results  of  sensitivity  analyses  we  conducted  for 
the  principle  functions  performed  by  .this'  BMD  system. 

5.2  COMPUTATIONAL  RESULTS  FOR  ‘  " 

HYPOTHESISI  "  \ 

The  computational  results  from  our,  first  set  of  ex¬ 
periments  confirm  Hypothesis  I.  Figure  5  compares  the 
value  of  the  effectiveness  measure  predicted  by  our  per¬ 
formance  measure  methodology  to  the  actuakvalue  for  the 
variable, nominal  threshold  condition;  The, extremely 
close  agreement  between  the  predicted  and  actual  values 
confirms  our  hypothesis  that  Eq.  2- 1 1  accurately,  captures 
the  relation  between  function  performance  and  system  ef¬ 
fectiveness.  The  implication  of  this  finding  is  that  the 
pseudo-costate  derived  for  a  particular  state  a  t  a  particular 
time  accurately  indicates  the  additional  effectiveness  that 
can  be  gained  by  the  system  if  it  is  better  able  to  effect 
favorable  state  transitions  from  that  state. 
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Figure  5.  Effectiveness  PredictM  by  the  Performance 
Measures  Methodology  for  the  Hypothesis  I  Experiments 
(Variable  Nominal  Condition) 

.  The  computational  results  from  this  first  set  of  ex¬ 
periment  also  suggest  a  finding  that  is  stronger  than  the 
one  implied  in  Hypothesis  I,  namely  that.the  linear  ap¬ 
proximation  is  valid  for  relatively  large  excursions  away 
from  a  nominal  operating  condition.  The  evidence  otshis 
;s  found  in  Figure  6  where  we  use  a  fixed  nominal  lethal¬ 
ity  threshold.  AJ1  predictions  fall  within  one  standard  de¬ 
viation  from  the  actual  values. 

5.3  COMPUTATIONAL  RESULTS  FOR 

HYPOTHESIS  II 

The  computational  results  from  our  second  set  of 
experiments  confirm  Hypothesis  II.  namely  that  the 
Markov  approximation  is  accurate  in  the  neighborhood  of 
an  arbitrary  nominal  operating  condition.  Figure  7  com¬ 
pares  the  value  of  the' effectiveness  measure  predicted  by 
our  performance  measure  methodology  to  the  actual  value 
for  a  variable  nominal  condition.  While  the  predictions 
yielded  by  this  experiment  are  relatively  accurate  on  the 


•  whole,  they  are  decidedly  inferior  to  the  quality  obtained  in 
the  previous  experiment,  indicating  that  the  Markov  ap¬ 
proximation  does  introduce  noticeable  modeling  errora 
Demtte  the  prediction  errors  observed,  all  predictions  fall 
within  1.5  standard  deviations  of  the' actual  values 
indicating  that  the  hypothesis  can  be  accepted  at  a  signifi¬ 
cance  level  of  p  =  0.10.  The  confirmation  of  Hypothesis 
II  implies  that  the  System  Effectiveness  Derivative  for  a 
funcuon  accurately  indicates  the  sensitivity  of  system  ef¬ 
fectiveness  to  a  change  in  the  performance  of  that  func¬ 
tion. 
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.  Figure  6.  Effectivencss'Prcdicted  by  the  Performance 
Measures  Methodology  for  the  Hypothesis  I  Experiments 
(Fixed  Nominal  Condition  =  0.4) 

The  computational  results  for  this  set  of  expert- 
sments  do  not  support  the  stronger  suggestion  that  the 
Markov  approximation  is  valid  for  relatively  large  excur¬ 
sions  away  from  a  nominal  operating  condiu'on.  The  evi¬ 
dence  for  this  conclusion  is  found  in  Figu.  e  8  where  we 
use  a  fixed  nominal  condition  (0.4)  to  predict  the  value  of 
the  effectiveness  measure  for  all  other  values  of  the 
lethality  threshold.  The  predictions  in  the  immediate 
neighborhood  of  tho  nominal  condition  fall  well  within  1 
standard  deviation  of  the  actuals,  but  the  predictions  for 
the  higher  values  of  the  lethality  threshold  tend  to  fall 
more  than  3  standard  deviations  away  from  the  actual 
values. 
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Figure  7  Effectiveness  Predicted  by  the  Performance 
Measures  Methodology  for  the  Hypothesis  II  Experiments 
(Variable  Nominal  Condition) 
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Figure  8.  Effectiveness  Predicted  by  the  Performance 
Measures  Methodology  for  the  Hypothesis  H  Experiments 
(Fixed  Nominal  Condition  =  0.4) 

5.4  COMPUTATIONAL  RESUUre  TOR 

REPRESENTATIVE  SENSITIVITY  ANALYSES 

Wc  present  in  Figure  9  time-profiles  of  the  SEDs 
for  the  principle  functions  performed  by  this  midcoursc 
BMD  system;  these  derivatives  were  computed  with  the 
value  oi  the  lethality  threshold  equal  to  OA  The  reader 
will  recall  from  our  discussion  in  Section  3  that  the  SED 
for  a  function  at  a  particular  time  measures  the  sensitivity 
of  the  system  effectiveness  measure  to  the  probability  that 
the  function  can  advance  the  system  to  desirable  interme¬ 
diate  states.  Under  the  definition' of  state  used  for  U.is 
study,  the  SEDs  in  Figure  9  represent  sensiuvity  to  the 
probability  that  the  function  in  question  can  advance  the 
threats  it  is  processing  along  desirable  state  transitions. 
Thus,  the  SED  for  the  Detection  function  measures  the 
sensitivity  of  the  system  effectiveness  measure  to  a 
change  in  the  probability  of  detection  within  a  single  5 
second  time  interval.  Similarly,  the  SED  for  the  Kill 
Observation  function  measures  sensitivity  with  respect  to 
a  change. in  the  probability  that  Kill  Observation  will 
complete  the  processing  of  an  outstanding  kill  observation 
request  within  a  single  5  second  interval.  The  profile  of 
the  SED  for  any  one  function  over  time  indicates  the 
periods  in  the  battle  when  that  function  exerts  its  largest 
and  smallest  contributions  to  system  effectiveness,  while 
a  comparison  of  SED  profiles  for  several  functions  indi¬ 
cates  the  major  contributors  to  system  effectiveness  during 
anyone  time.  interval. 

Several  important  observations  emerge  from  Figure 
9,  Detection  is  the  major  contributor  to  system  effective¬ 
ness  at  the  beginning  of  the  battle  when  the  majority  of 
objects  have  not  yet  been  detected.  Similarly,  the  En¬ 
gagement  Planning  and  Kill  Observation  functions  are  the 
major  contributors  to  system  effectiveness  during  the 
middle  of  the  battle  when  weapons  must  be  committed  to 
targets  that  have  regional  tracks  and  when  intercept  out¬ 
comes  must  be  assessed.  On  the  whole,  this  BMD  sys¬ 
tem  is  far  more  sensitive  to  a  change  in  the  rate  of  com- 
pleiion  of  the  Kill  Observation  function  than  it  is  to  a 
change  in  the  rate  of  completion  of  any  other  function. 
An  analysis  of  additional  statistics  collected  by  the  simu¬ 
lator  indicated  that  15-25%  of  the  RVs  assigned  to 
weapons  were  not  hit  on  the  first  shot,  thereby  placing  a 
premium  on  the  timely  execution  of  Kill  Observation  to 
provide  the  defense  sufficient  time  to  take  a  second  shot 
against  an  RV  that  has  survived  a  first  shot. 
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Figure  9.  System  Effectiveness  Derivative  Profiles  for 
Select  BMC3  Functions  (Lethality  Threshold  =  0.4) 

Another  important  observation  that  emerges  from 
Figure  9  is  the  pronounced  oscillation  in  SED  values  for 
select  functions  over  lime.  In  the  derivation  of  the  SED 
as  an  analysis  tool  we  noted  that  oscillations  often  signify 
the  occurrence  of  processing  bottlenecks  elsewhere  in  the 
system.  An  analysis  of  ihe  statistics  collected  by  the 
simulator  revealed  that  launch  requests  from  the  Engage¬ 
ment  Planning  function  atxived  at  the  the  Launch  Control 
Complexes  (LCCs)  faster  than  they  could  be  processed 
beginning  at  800, 1100,  and  1400  seconds;  the  LCCs  be¬ 
came  the  predominant  bottlenecks  in  the  system  begin¬ 
ning  at  those  time  periods.  Naturally,  the  BMD  system  is 
not  sensitive  to  small  variations  in  the  processing 
throughput  of  the  Engagement  Planning  function  when 
the  LCCs  have  more  requests  than  they  could  handle, 
thereby  yielding  SED  values  of  0  for  that  function  during 
those  time  periods.  Threat  Assessment  precedes  Engage¬ 
ment  Planning  in  the  overall  processing  sequence,  and  its 
SEDs  declincd  during  those  time  periods  as  well.  Its 
SEDs  never  quite  reached  zero,  however,  since  it  is  not 
directly -affected  by  processing  queues  at  thc'LCCs. 
Similarly,  Kill  Observation  ultimately  provides  feedback 
to  the  Threat  Assessment  function,  and  therefore  precedes 
Engagement  Planning  in  the  feedback  processing  se¬ 
quence;  its  SEDs  also  declined  during  time  intervals  indi¬ 
cated,  In  summary,  the  effect  of  processing  bottlenecks  at 
the  LCCs  propagated  with  diminishing  effect  back  up  the 
processing  chain. 

SECTION  6.  SUMMARY  AND  CONCLUSIONS 
6.1  SUMMARY 

We  have  presented  in  this  paper  a  method  to  relate 
the  performance  achieved  by  Batllc  Management  function 
to  the  consequent  effectiveness  achieved  bythe  larger 
miiiiarv  svstem  served  bv  those  functions.  The  method 


military  system  served  by  those  funcuons.  The  method 
encompasses  a  quantitative  relationship  between  function 
performance  and  system  effectiveness  and  analysis  meth¬ 
ods  for  computing  sensitivity  from  these  relationships 
The  relationship,  captures  the  operation  of  an  arbitrary 
BMC3  system  as  a  time-varying  finite-state  Markov 
chain. 


We  also  presented  several  analysis  methods  based 
on  the  pseudo-costates  introduced  m  Section  2  and  on  the 
System  Effectiveness  Derivative  (SED)  introduced  in  Sec¬ 
tion  3„  These  two  measures  offer  interpretations  that 
permit  the  identification  of  time  epoches  during  a  conflict 
when  the  BMC3  system  under  study  is  most  sensitive  to 
both  favorable  and  unfavorable  changes  in  state,  and  to 
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processing  bottlenecks.  These 
diagnostic  analysis  of  BMC3 
useful,'  in  the  development  of 
agement  systems. 


measures  therefore  support 
systems,  and.should  prove 
more  efficient  Battle  Man- 


6.2  FUTURE  MODELING  DIRECTIONS 

While  the  analysis  methods  described  here  localize 
the  major  contributions  to  system  effectiveness  to  the 
function, level,  complementary  modeling  methods  are 
needed  to  reveal  a  function  achieves  its  performance. 
Specifically,  methods  are  needed  to  evaluate  the  partial 

derivative  term-^r  ;  where  at(i)  denotes  the  probability 

that  a  threat  in  state  i  at  time  t  will  advance  to  a  favor¬ 
able  state,  and  ft  denotes  the  operating  condition  of  func¬ 
tion  f  at  rime  t.  We  noted  in  Section  3  that  the  expres¬ 
sion  for  the  relation  between  function  performance  and 
system  effectiveness  (Eqs.  2-11  and  2-12)  can  be  difficult 
to  evaluate  in  practice  since  it  presumes  we  have  sufficient 
knowledge  of  the  system  'plant*  to  compute  this  deriva¬ 
tive.  We  frankly  doubt  that  analytic  expressions  can  be 
found  in  practice  for  all  but  the  simplest  functions,  but 
hold  out  the  hope  that  empirically  derived  regression 
models  may  suffice  for  most  applications. 


(1) 


P) 


(3) 
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ABSTRACT 

A  generalized  concept  of  sjstcm  evaluation  and  an  au¬ 
tomated  0*1  evaluation  system,  OSAM,  are  described.  The 
goal  of  the  eraluation  concrpt  is  to  permit  comparison 
of  different  C3I  systems  with  similar  missions  or  goals. 
OSAM  is  deigned  to  facilitate  the  comparison  of  alterna¬ 
tive  C?I  implementations  throngh  the  use  of  several  inter¬ 
face  programs,  local  databases  and  modularity.  The  con¬ 
cept  of  i mplementction  independence  unites  these  two  ef¬ 
forts.  This  paper  discusses  implementation  independence, 
the  OSAM  system  itself  and  relevant  databases. 


INTRODUCTION 

An  appropriate  Command,  Control,  Communications 
and  Info.Tnation  (C3I)  system  can  greatly  enhance  the  ef¬ 
fectiveness  of  military  units  in  the  field  [I].  A  designer  may 
choose  from  many  options  and  may  be  concerned  with  per¬ 
formance  on  many  levels.  Hence,  C3!  system  development 
is  a  very  complex  task  which  could  be  greatly  facilitated, 
by  means  of  an  automated  C3!  analysis  tool  [2].  Two  dif¬ 
ficulties  facing  automation  are: 

1.  A  unified  approach  to  C3!  evaluation  that  will  allow 
the  comparison  of  dissimilar  systems  with  equivalent 
missions  Is  needed. 

2.  The  extensive  body  of  information  required  to  eval¬ 
uate  C3I  systems  is  not  currently  available  in  a  stan¬ 
dardized,  com puter- usable  form. 

A  consistent  approach  is  important  because  if  two  or 
more  C3!  systems  cannot  be  judged  against  each  other  on 
the  basis  on  the  same  Measures  of  Performance  (MOPs), 
Measure s  of  Effectiveness  (MOEs),  and  other  criteria,  it  is 
not  possible  to  compare  one  to  the  other.  If  information  Is 
not  in  a  standardized,  computer  usable  form  it  will  have 

*To  receive  correspondence. 


to  be  catered  sassaflr  fee  each  mhafioa.  TBs  sot  only 
increases  the  time  to  prepzre  a  but  also  introduces 

a  greater  chance  for  error. 

A  four  phase  C3!  system  performance  evaluation  ap¬ 
proach,  the  Overall  System  Analysis  Model  (OSAM).  is 
bring  developed  around  the  General  Simulation  System 
(GSS)  3)  to  overcome  these  cSScultics.  A  hey  dement  of 
this  new  approach  is  the  separation  of  the  environmental 
factors  and  the  chsoa  into  an  Implementation  Indepen¬ 
dent  Scenario  (IIS),  distinct  from  the  procedures,  equip 
meet  and  ^ther  implementation  details  of  the  simulation. 
A  second  major  concern  of  this  project  is  the  standardiza¬ 
tion  and  codification  of  information  required  for  C?1  per¬ 
formance  c. -luatton. 

The  the  concept  of  Implementation  Independence,  the 
guiding  principle  for  the  factorization  process  mentioned 
above  is  discussed  first.  Then,  the  OSAM  four  step  proce¬ 
dure  is  described  after  which  relevant  databases  and  files 
are  reviewed. 

IMPLEMENTATION-INDEPENDENCE 

The  basic  concept  of  implementation  independence  is 
to  modularize  the  simulation  model  so  that  1)  subsequent 
models  may  be  more  rapidly  developed  and  2)  the  per 
formance  of  different  system'.  ii»y  be  compared.  The  im¬ 
plementation  refers  to  the  eroupraent,  subsystems,  proce¬ 
dures,  and  protocols  that  comprise  the  particular  C3I  sys¬ 
tem  being  evaluated.  The-!*S  is  the  environment,  set'of 
external  stresses,  commend  end  control  (CJ)  expectations 
and  mission,  which  specifies  the  test  to  which  the  imple 
mentation  is  subjected.  This  tactorization  allows  two  or 
more  different  implementations  to  be  subjected  to  the  same 
test. 

The  concept  is  rather  straightforward,  but  requires  care 
in  practice.  The  distinction  between  the  US  and  the  im 
piementalton  is  not  completely  dear.  For  example,  shall 
very-high  level  error  checking  (e.g.  by  a  human  comman 
derj  be  considered  part  of  this  IIS  o;  ihe  implementation? 
Also,  new  systems  may  present  new  options  which  were 
not  previously  tested,  and  some  C3  functions,  such  as  tar- 
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grf  traders,  axrcj-  s3«ct  tied  to  tic  »2<r 

criHxr.  Tbsad^bM^kbeUdcc'str  ettoto 
m  dats®=  mi  ^c  IIS,  Sst  sad:  =»i  be  =a£c  inti 

arc  to  rtfi~3  ac^iHSj'  with  earner  jiixkiia- 

Tic  larger  tm^Sat/cs  are  jIm  factored  fcrticr  to  it- 
rrfiutr  codd  fewpataL  For  caa^f,'  tic  !!5  actuary 
txcol5  of  *  serttrg  (pifiksl  crirccsc:}.  C*  street  ere, 
CXtersa!  stress  fe-g.  e=c~rr  troop  ixovrnne-tSitxd  declroric 
writre).  iri  xrissfoa.  (hes^ca^areC^peSxcacc 
b  txo  sbslitjccj,  ooe  *illi  .w  oSragte  sad  cae  with  * 
dtfeste  «~w»-  Tbc  nod-isHty  of  tbc  IIS  tHow  tie 

scacd  mocrl  to  be  dc^cd  qatily  £-ca  tic  first.  Like¬ 
wise,  the  bifearatt&M  »  nodclvizd  with  respect  to. 
C*  ssIwytJess,  C*  cxU  and  paHtaxy  east*.  This  oot  only 
pcrcJts  npd  desp  c£  similar  ra odds,  befako  sJmpSfies 
modeling  dae  to  ibeefose  correspoadcece  between  actual 
systems  and  rrwdefs,  and  allows  ooe  (o.obtals  MOP*  a=d 
MOEs  for  these  modrdar  exits. 

To  ass  ere  foxg-tern  utiEty  arid  standardization,  tie 
principles  of  modular  classification  axe  weD-deSsed.  Also, 
tic  CSS  enTiroax>K< 'supports  this  iyp ex£  faciorixg  very 
well,  throagh  its  hierarchical  street  ore  axd  modularity. 

The  IIS  specifies  processes  that  must  occur  among  a 
given  set  of  entities.  These  are  define d  as  very-high  level 
GSS  modules,  refereed  eg  jet- to-be-defined  submodules. 
For  example,  a  module  may  specify  that  aa  average  of  10 
messages  per  hour  ofa  given  size  are  to  pass  from  Company 
A'  to  Company  B.  The  corresponding  module  in  the  IIS 
would  use  a  process  implying  a  communication  between 
Company,  A  and  Company  B,  bat  the  actual  behavior  of 
this  communication  process  would  sot  be  defined. 

General  system  modules  actually  predict  the  behavior 
of  0*1  subsystems  in  a  functional  manner.  For  example, 
for  a  communications  system,  given  certain  environmental 
conditions,  input  load,  and  degradation,  a  message  can  be 
expected  to  be  transmitted  with  a  given  delay  distribution. 
The  analyst  builds  a  specific  model,  which  specifies  perfor¬ 
mance  parameters  of  a  general  subsystem  model.  Further 
performance  characteristics  are  derived  from  the  stress  in* 
formation  it,  the  IIS.  Then  the  specific  model  will  predict 
the  performance  of  the  communication  between  Company 
A  and  Company  B. 

THE  OVERALLSYSTEM  ANALYSIS  MODEL 

The  Overall  System  Analysis  Model  (OS AM),  depicted 
in  Figure  1,  consists  of  four  major  subsystems.  Each  is 
capable  of  operating  independently  of  the  others,  commu¬ 
nicating  with  them  through  files  and  databases.  The  four 
subsystems  of  OS  AM  are: 

1.  Scenario  Translation 

2.  C3I  Model  Development  and  Selection 


Scenario  Translation  «  suxButcd  fnr  the  Scenario  Mod- 
«r,2  FOHTSAX  prtpra  tiidi  Idjs  to  picdwa  ia- 
r*szssAzticG  aipcdtst  rrpmcUfioa  of  a  given  sce- 
sa»,  the  IIS,  and  a  Es4  cf  exririex.  required  foe  any  C?I 
rnpVmcntatloQ,  the  Directory.  During  the  scenario  toss* 
latfoc  process,  coxxsricUka  mpwcttts,  mapping  in¬ 
formation,  axd  scenario  rnformarion  are  required.  The  Sce- 
vario  Jlodeler  extracts  required  bhnsdioa  from  various 
databases  to  cSaeste  uxstcessaxy  and  redundant  infor¬ 
mation.  ' 

The  (Pi  Model  Deveiopcxat.*3d  Select  ka  subsystem 
is  wed  to  develop  low- lev  cl  GSS  representations  of  CPl 
systems  and  subsyrtrm#-  These  models  are  built  using 
performaxce  data  and  structure  impSdt  in  (Pi  eoapocral 
spuri  Stations  and  xval cat  ions.  Since  C3!  subsystems  are 
essentially,  modular  in  nature  [l],  the  C3!  modeling  effort 
is  also  modular.  A*  new  (?I  subsystems  and  technologies 
are  developed,  it  will  be  necessary  to  develop  appropriate 
corresponding  GSS  models.  C3!  Model  Develop  meet  M  a 
mini -simulation  capability  to  evaluate  and  check  new  mod* 
els  for  higher-level  model  development,  as  well  as  model 
editing  capabilities,  to  permit  generalization  of.spedSe 
models,  Necessary  inputs  for  C3!  Model  Development  and 
Selection  induce  management  and  protocol  specifications 
related  to  communication  requirements,  mapping  informa¬ 
tion,  equipment  operating  and  performance  parameters, 
and  the  Directory. 

The  central  component  of  the  (Pi  System  Simulation,  is 
the  Simulation  Control  Program  (SCP).  Its  operation  may 
be  modified  by  the  analyst  to  control  the  granularity,  scope 
and  focus  of  a  particular  simulation  run.  It  essentially  or¬ 
chestrates  the  files  generated  by  the  Scenario  Transition 
and  C3^  Model  Development  and  Selection  subsystems. 
Since  established  (Pi  models  axe  maintained  in  the  GSS 
Model  Database,  they  may  be  referenced  by  the  SCP  dur¬ 
ing  the  simulation,  without  actually  copying  their  full  de¬ 
scriptions  into  the  model  file.  Utilities  are  modules  which 
collect  data  and  note  states  as  neccssaiy  to  permit  eventual 
MOP  and  MOE  computation. 

Finally,  Post-Simulation  Analysis  has  four  basic  pur¬ 
poses:  1)  translate  the  output  into  human  understandable 
form,  2)  generate  data  files  compatible  with  other  parts  of 
OSAM  as  well  as  othersysfems  interfaced  toil,  3)  complete 
the  computation ofsomeMOPs  and  M0Es,and  4j  produce 
trace  and  debug  information  to  facilitate  the  development 
of  models.  Since  this  final  step  need  only  interface  with 
the  C3!  System  Simulation  output,  which  consists  of  text 
files,  it  is  therefore  loosely  coupled  to  the  rest  of  OSAM. 


3.  C*I  System  Simulation 
•1.  Post-Simulation  Analysis 


Figure  1:  Overall  System  Analysis  Model  For  CM  System  Performance  Evaluation 


RELEVANT  DATABASES 

Databases  used  by  OSAM  can  be  classified  into  the 
folioring  categories, 

1.  fal  _  Those  files  and  databases  that  raist  inde- 
flradent  of  OSAM,  which  contain  source  information 
needed  for  Cl  analysis. 

2.  Interna!-  Those  files  oh  databases  that  are  created 
and  used  during  the  four  step  Cl  system  perfor¬ 
mance  evaluation  procedure. 

3.  Output  -  Files  generated  by  OSAM  which  are  to  be 
used  by  other  automated  systems  as  well  as  analysts 

The  following  information  is  supplied  by  external  input  to 
OSAM.  Since  this  type  of  information  is  common  among 
the  C*  community,  only  a  cursory  explanation  of  each  is 
included  in  this  discussion. 


,#  Scenario  Information  -  The  environment,  including 
hostile  action  such  as  jamming  and  other  forms  of 
electronic  warfare;  Cl  structure  and  particular  mil¬ 
itary  units  imoived;  troop  movements  and  involve¬ 
ment. 

•  Communication  Requirements  -  Xeedline  informa¬ 
tion  between  military  entities  including  priority,  mes¬ 
sage  length,  and  transmission  rate. 

•  Mapping  Information  -  Terrain  characteristics;  ele¬ 
vation;  a  method  of  uniquely  identifying  the  location 
of  every  entity  within  the  scenario  area. 

•  Management  and  Protocol  Specifications  -  Commu¬ 
nication  hierarchy;  priority  schemes;  routing  algo¬ 
rithms  used. 

•  Equipment  Information  -  Operating  parameters  of 
selected  equipment;  any  available  performance  infor- 
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xnation,  possibly  from  field  testing  or  manufacturer 
reports. 

Internal  databases  merit  a  more  detailed  discussion. 
They  can  be  grouped  into  the  flowing  four  areas: 

•  Implementation  Independent  Scenarios 

•  Established  Model  Database 

•  Specific  Simulation  information 

•  Past  Events  Results 

The  IIS  combined  with  Specific  Simulation  Information 
provides  the  setting  for  a  particular  performance  evalu¬ 
ation.  The  Established  Model  Database  (EMD)  will  be  ini¬ 
tially  limited,  but  will  grow  as  more  systems  are  modeled. 
The  Past  Events  Results  arc  files  generated  by  the  Post 
Processor  from  output  files.  Each  of  these  types  of  files  is 
discussed  below. 

Implementation  Independent  Scenarios 

The  IIS  is  a  set  of  data  files,  resources,  processes  and 
models  that  represent  the  essence  of  the -scenario,  inde¬ 
pendent  of  the  C3!  implementation.  Thus,  needlines  are 
represented,  but  the  CJI  subsystem  used  to  effect  those 
needlines  are  not.  The  goal  here  is  to  allow  a  single  IIS  to 
serve  as  input  for  a  number  of  specific  implementations  so 
that  their  performance  may  be  compared,  assuming  similar 
technologies  of  implementation.  This  is  essentially  a  high- 
level  GSS  representation  of  the  simulations  model.  The 
lower  levels  of  the  GSS  model  will  be  developed  indepen¬ 
dently  to  represent  the  particular  C*I  implementation  to 
be  tested. 

Since  the  IIS  is  a  high-level  representation,  some  sort  of 
reference  will  be  needed  to  assure  that  entities  referred  to 
by  the  IIS  are  modeled  at  the  lower  level  with  an  interpre¬ 
tation  consistent  with  that  of  the  IIS.  The  list  of  entities 
involved  is  such  a  reference,  consisting  of  two  parts.  The 
first  is  a  computer- readable  checklist  which  will  be  used 
by  the  C3!  Modeler  to  verify  that  all  entities  referenced  in 
the  IIS  are  not  only  represented  in  the  lower  level  models, 
but  also  represented  in  a  technically  consistent  manner. 
That  is,  processes  are  modeled  as  processes,  resources  as 
resources,  and  so  on.  The  second  is  a  printout,  which  m«*y 
be  used  by  the  analyst,  containing  brief  descriptions  of  the 
interpretation  of  each  entity  in  addition  to  the  technical 
information  mentioned  above. 

Finally,  since  the  IIS  is  a  computer-oriented 'set  of  files, 
the  analyst  is  likely  to  have  difficulty  interpreting  it  Be¬ 
cause  the  analyst  may  wish  interim  representations  of  a 
developing  scenario  to  provide  points  of  reference,  the  See 
nario  Modeler  will  produce  working  reports,  summaries, 
listings,  tables  and  maps  representing  the  IIS  at  any  stage 
of  development. 


Established -Model  Database 

Th ^Established  Model  Database  (EMD),  is  a  set  of  pre¬ 
viously  verified  and  validated. C3 1  subsystem  models.  A 
specific  simulation  is  a  low-level' GSS  model  which  accu¬ 
rately  depicts  the  performance  of  a  C*I  subsystem.  Some 
common  examples  are: 

•vArca  Common  User  Systems 

—  Mobile  Subscriber  Equipment  (MSE) 

•  Data  Distribution  Systems 

—  Joint  Tactical  Information  Distribution  System 
(JTIDS) 

—  Enhanced  Position  Location  Reporting  System 
(EPLRS) 

•  Combat  Network  Radio  Systems 

—  Single  Chancel  Ground/Airborne  Radio 
System  (SINCGARS) 

-  Improved  High  Frequency  Radio  (IIIFR) 

-  Small  Unit  Radio  (SUR) 

•  Satellite  Communication  Systems 

-  Single  Channel  Objective  Tactical  Terminal 
(SCOTT) 

Since  these  subsystems  are  used  m  a  modular  fashion  to 
build  0*1  systems,  it  makes  sense  to  build  specific  simula¬ 
tion  models  which  represent  them,  providing  these  models 
are  general  enough  to  be  used  in  any  probable  situation. 
This  approach  allows  the  analyst  to  build  models  more 
quickly  and  with  fewer  errors  than  if  he  or  she  started 
from  scratch  each  time. 

The  challenge  is  to  write  these  mod^s  so  that  their 
connection  to  the  IIS  is  functional  and'not  dependent  on 
subsystem  particulars.  For  example -if  there  were  a  need 
for  a  data  distribution  system  in  an  115,  it  should  be  pos¬ 
sible  to  use  either  the  JTDlb  or  EPLRS  model  without 
modifying  the  IIS. 

Specific  Simulations 

In  some  cases,  unique  models  may  be  built  using  ele¬ 
mentary  GSS  tools,  but  in  most  cases  a  specific  instance  of 
a  general  model  will  be  taed.  The  specific  simulation  is  a 
reference  to  a  general  model  together  with  specific  param¬ 
eters.  For  example,  in  a  MSE  system,  specific  parameters 
would  include  the  number  of  subscribers  and  matrix  topol¬ 
ogy. 


Past  Events  Results 

Past  events  results  are  output  from  past  simulations 
which -can  be  used  as  starting  points  for  other  simula¬ 
tions. -For  example,  initial  simulation  could  be  done  at  the 
Brigade  or  Battalion  lerd,  then  the  output  can  be  used  as 
input  for  a  simulation  at  the  Division  or  Corps  level. 

CONCLUSION 

In  tbe  past,  comparing  simulation  and  performance  re¬ 
sults  of  different  0*1  modds  was  equivalent  to  comparing 
apples  and  oranges.  However,  the  concept  of  implementa¬ 
tion  independence  allows  a  unified  approach  to  C*I  anal¬ 
ysis.  Implementation  independence  also  reduces  the  com¬ 
plexity  and  increases  the  efficiency  of  C^I  system  modeling. 
Further  effiaency  is  achieved  through  the  judicious  use  of 
automated  subsystems  and  specialized  databases.  This  ap¬ 
proach  used  in  conjunction  with  a  powerful  simulation  lan¬ 
guage,  GSS,  holds  much  promise  for  future  modularized 
C3!  system  design. 
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ABSTRACT  ^  .  • 

Combat  simulations  have  become  essential  to  conducting 
many  large-scale  military  exercises.  However,  it  has  proven  to 
be  very  difficult  to  develop  a  simulation  that  has  the  desired 
degree  of  realism,  which  runs  in  real  time  on  affordable 
computers,  and  which  provides'  results  that  can  bd  easily 
understood  in  postgame  analysis.  (The  players  in  general  do  not 
have,  nor  desire  to  have,  a  detailed  knowledge  of  the 
simulation.)  7 

It  is  time  to  consider  a  completely  new  approach  to  modeling 
combat  outcomes rin- exercise  simulations.  The  standard 
approach  is  one  of  using  mathematical  models  of  combat  which 
essentially  translate  all  factors  into  attrition  multipliers.  The 
resulting  attrition  is  the  sole  driver  of  the  combat  outcomes. 
This  paper  addresses  the  concept  of  using  a  rule-based  ex  pen 
system  to  determine  the  outcome  in  a  more  qualitative  manner 
and  focuses  on  a  methodology  for  embedding  the  expen  system 
into  a  full-scale  military  simulation. 

1.  OVERVIEW 

The  idea  of  using  an  expert  system  to  determine  combat 
outcomes  is  a  result  of  contemplating  past  development  efforts, 
analyzing  new  requirements,  and  making  observations  at  the 
National  Training  Center,  where  expert  controllers  can  often 
predict  the  outcomes  by  comparing  the  opposing  plans. 

The  discussion  which  follows  centers  on  two  key  software 
components.  The  first  is  a  discrete  event  simulation  referred  to 
as  "The  Game,"  which  uses  conventional  simulation  techniques 
to  model  most  aspects  of  the  military  operation;  unit  movement, 
logistics,  air  strikes,  detailed  attrition,  etc.  The  other  key 
software  component  is  a  rule-based  expert  system  referred  to  as 
"COBRA,"  which  is  an  acronym  for  Combat  Outcome  Eased 
on&ules  for  Attrition.  COBRA  is  used  to  determine  the  outcome 
of  the  ground  combat  engagements. 


The  work  desc.&ed  herein  was  carried  out  by  the  Jet  Propulsion  Laboratory 
and  was  sponsored  by  the  Joint  Warfare  Center  through  an  agreement  with 
the  National  Aeronautics  and  Space  Administration,  under  contract  NAS7 
918, 


The  interaction  between  these  two  software  modules  is 
envisioned  to  operate  in  the  following  manner.  The  Game 
controls  the  simulation,  moves  units  around  the  battlefield,  and 
determines  whch  a  unit(s)  has  ertercd  the  combat  zone  of  an 
enemy  unit(s).  The  Game  then  invokes  the  COBRA  module  and 
provides  tne  necessary  data  on  these  units’/  The  predicted 
outcome  of  this  combat  situation  is  determined  by  the  COBRA 
module,  and  the  rules  leading  to  the  determination  are  recorded 
for  future  analysis.  (Note  that  the  COBRA  module  is  finished 
and  is  not  active  again  until  the  next  call  by  the  Game.)  This 
projected  outcome  is  accurate  for  describing  the  progress  of  the 
’  battle  until  a  player  (human  or  automated)  intervenes,  or  until  the 
end  of  the  engagement.  At  least  a  few  such  interventions  are 
expected  in  most  cases,  and  the  COBRA  module  will  be  recycled 
each  time.  The  projection  is  given  to  the  Game,  which  produces 
detailed  attrition  calculations  and  provides  reports  to  the  players. 
The  attnuon  and  the  repots  reflect  the  projection  provided  by  the 
COBRA  module. 

One  can  think  of  this  interaction  as  COBRA  providing  the 
Game  with  a  high-level  "script"  for  describing  each  combat 
engagement.  The  Game  will  determine  the  detailed  attrition  scale 
factors  or  whatever  is  necessary  to  produce  results  over  lime  for 
all  weapon  systems.  This  will  result  in  the  given  percent  losses 
for  both  sides  at  the  given  time  for  the  end  of  the  battle. 

2.  GAME -COBRA PROCESSING  FLOW 

Figure  1  is  a  high-level  diagram  of  the  Game  -  COBRA 
'  Process  Flow.  More  detail  about  this  process  is  provided  in  the 
following  paragraphs. 

1.  Start 

This  is  simply  the  start  of  the  diagram.  It  represents  that  two 
enemy  units  have  come  into  contact  and  combat  is  likely. 

2.  Combat  Decision 

This  box  contains  the  software  control  logic  for  ground 
combat  .engagements.  If  it  is  a  new  combat  situation  (or 
something  has  happened  which  may  change  the  outcome), 
COBRA  is  initiated  (or  recycled)  as  indicated  by  the  upward 
arrow.  If  there  has  been  no  player  or  game  intervention  since 
the  last  COBRA  cycle,  the  current  COBRA  guidelines  are  still 
valid  and  the  detailed  losses  for  this  time  interval  are  computed 
as  indicated  by  the  continuation  arrow.  (Arrival  of  new  forces, 
changes  of  mission,  and  air  strikes  are  examples  of  interventions 
which  would  cause  COBRA  to  be  recycled.)  If  the  time  for  the 
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end  of  this  engagement  has  been  reached,  players  are  informed' 
as  indicated  by  the  end  arrow. 

3.  Identify  Possible  Outcomes 

Whenever  COBRA  initiates  processing,  it  focuses  on  only 
the  possible  outcomes.  This  focusing  serves  to  limit  the  search 
space.  The  possible  outcomes  arc  a  function  of  the  "immediate'' 
combat  missions  of  the  opposing  forces;  i.  e.,  exactly  / what  e3ch 
•  side  is  trying  to  accomplish  in  this  particular  engagement.  All- 
the  possible  outcomes  that  are  currently  considered  arc  shown  in 
Figure  2. 

4.  Evaluate  Combat  Situation 

This  is  the  area  where  all  the  factors  that  can  affect  combat 
outcome  are  considered.  These  factors  arc  assessed  in  the 
overall  context  of  a  METT-T  (Mission,  Enemy,  Troops,  Terrain, 
and  Time)  analysis  For  example,  if  an  attacking  unit  does,  not 
have  adequate  knowledge  of  the  defending  force,  COBRA  will 
judge  the  attacker's  intelligence  of  the  enemy  as  poor.  All  such 
assessments  will  be  done  in  a  rule-based  framework  so  that  the 
reasons  for  the  evaluations  can  be  recorded  in  a  manner  easily 
understood  by  players  who  have  little  or  no  experience  with  the 
simulation.  * 

5.  Select  Mini  Combat  Scenario 

There  will  Be  predefined  ways  that  each  type  of  engagement 
can  unfold:  The  choice  depends  on  the  evaluations  made  in 
Box  4.  Further  discussion  of  this  concept  and  an  example  arc 
provided  in  Section  4. , 

6.  Select  Combat  Outcome 

Given  the  Set  of  possible  outcomes,  the  METT-T  evaluation, 
the  mini-scenario  selected,  the  opposing  force  ratio,  and  other 
factors,  COBRA  will  select  the  combat  outcome  that  makes  the 
most  sense  in  this  situation.  It  will  also  record  the  reasons  for 
the  choice.  More  details  of  this  concept  are  provided  in 
Section 

7.  Determine  Time  and  Percent  Losses 

In  order  to  further  define  the  outcome,  a  reasonable' time  for 
the  engagement  will  be  determined  as  well  as  the  overall  percent 
losses  for  RED  and  BLUE.  This  is  the  end  of  the  COBRA 
processing  for  the  engagement,  and  control  is  passed  back  to  the 
Game.  The  projections  of  the  outcome,  time  of  engagement, 
and  percent  losses  will  remain  in  effect  until  the  end  of  the 
engagement  or  until  COBRA  is  recycled  as  a  result  of  some 
intervention. 

8.  Calculation  of  Losses 

•The  specific  losses  for  each  of  the  weapon  systems  during 
the  current  combat  cycle  arc  computed  here.  A  scale  factor 
which  ensures  that  the  overall  final  losses  will  be  equal  to  those 
specified  in  Box  7  is  computed  and  used  in  the  attrition 
calculations  Note  that  the  losses  are  "guaranteed  to  be 
‘reasonable"  because  we  have  a  trace  of  the  reasons  back  through 
a  METT-T  type  evaluation. 


9.  Reports  to  Players 

The  reportS'that  arc  sent  to  the  players  will  provide 
information  on  the  attrition  that  has  been  calculated  and  will  also 
be  tailored  toconform  to  the  mini-scenario  and  ultimate  outcome 
selected.  The  idea  is  to  makc  the  reports  as  realistic  as  possible 
by  using  this  type  of  information  (Note  that  since  the  Game 
knows  the  outcome  that  will  result  if  no  intervention  occurs,  it 
\will  be  relatively  simple  to  convey  this  in  the  form  of  a  lower 
Ievel'commander's  estimate  bf  the  expected  outcome  Such 
estimates  are  not  available  in  conventional  simulations  and  will 
put  realistic  pressure  on  players  to  make  timely  decisions  on  the 
usc'of  limited  resources ) 

10.  Player/Game  Intenentlon 

The  processing  in  this  box  simulates  the  results  of  air  strikes, 
the  receipt  of  mission  changes,  etc.  (Note  that  an  air  strike 
would  cause  the  force  ratio  to  change  and  may  also  affect  the 
evaluated  performance  of  some  of  the  combat  subsystems  For 
example,  an  evaluation  of  attacker  mobility  may  go  from  fair  to 
good  because  of  enemy  suppression.) 

3.  IMMEDIATE  COMBAT  MISSIONS 
The  emphasis  here  is  on  the  word  immediate.  COBRA  is 
interested  only  in  this  particular  combat  situation  and  not  the 
overall  long-range  missions  of  the  units  involved.  In  other 
words,  COBRA  needs  to  be  given  the  immediate  combat 
missions.  The  current  list  of  these  missions  is  as  follows. 

Attack  -  Take  the  Objective 
Attack  -  Destroy  the  Enemy  Unit* 

Attack  -  Fix  the  Enemy  Unit 

Attack  -  Bypass  the  Enemy  Unit 

Defend 

Delay 

Withdraw. 

Figure  2  shows  all  possible  combinations  of  these  combat 
missions  and  the  all  of  the  combat  outcomes  that  arc  currently 
considered  possible  for  each  case.  Only  one  "of  the  outcomes 
will  be  selected  for  each  engagement,  except  where  noted  by  the 
symbol  <6. 

4.  POSSIBLE  MINI  COMBAT  SCENARIOS 
In  order  to  help  determine  the  outputs  mentioned  above,  it  is 
envisioned  that  COBRA  will  map  each  combat  engagement  into 
a  type  of  "mini  combat  scenario,"  which  is  chosen  from  a 
predetermined  set.  These  possible  mini  combat  scenarios  will 
depend  on  the  particular  type  of  engagement,  i  e.,  on  the 
Immediate  Combat  Missions  of  BLUE  and  RED. 

Consider,  for  example,  the  case  of  Attack  -  Take  the 
Objective  vs.  Defend  We  can  identify  essentially  three  different 
ways  that  this  type  of  engagement  could  unfold  and  we  define 
them  as  the  mini  combat  scenarios  for  this  case 

I.  Defeat  in  Detail 

This  is  the  way  an  attacker  would  like  to  sec  the  attack 
develop.  In  this  case  the  attacker  is  successful  in  bringing 
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•  •  •  Indicate*  « time  delay  before  action  In  the  next  box  on  the  right  of  this  symbol  is  performed. 

figure  1.  Game  •  COBRA  Processing  flow  Diagram 
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figure  2.  Possible  Combat  Outcomes 


essentially  all  of  the  attacking  force  on  each  of  the  defender's 
subordinate  units  -  one  at  a  time.  Good  attacker  intelligence  and 
little  time  for  the  defender  to  prepare  the  position  are  the  types  of, 
conditions  which  would  result  in  the  selection  of  this  alternative 
An  attacker  with  a  relatively  small  force  ratio  will  have  a  good 
chance  of  success  if  this  mini-scenario  is  selected. 

2.  Piecemeal  Attack 

This  is  the  way  a  defender  would  like  to  see  an  attack 
develop.  In  this  case  the  attacker  loses  command  and  control 
and  is  unable  to  coordinate  the  attack.  The' effect  is  to  bring  the 
attacker  subordinates  one  at  a  time  into  the  combined  fields  of 
fire  of  the  defender  forces. 

3.  Onc-on-One 

Although  there  are  many  intermediate  cases  to  the  two 
extremes  discussed  above,  we  now  consider  only  one  of  these 
intermediate  cases.  This  is  defined  to  be  the  "Onc-on-One’’  case 
and  gives  neither  side  an  advantage  due  to  the'way  the  battle 
unfolds. 


reasons  for  the  output  and,  therefore,  the  rules  will  be  visible 
and  can  be  changed  when  determined  to  be  unrealistic. 
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5.  CURRENT  EFFORTS 

The  ideas  presented  in  this  paper  are  continuously  being 
reviewed  and  arc  subject  to  change  as  the  effort  continues.  A 
small  prototype  has  been  developed  in  OPS5  and  runs  on  a 
Macintosh  IL  It  is  being  used  to  demonstrate  the  concept  and 
also  to  stimulate  ideas  for  improvement.  One  example  of  such 
-an  idea  recently  suggested  and  currently  being  investigated  is 
that  of  using  COBRA  to  select  the  type  of  attrition  equations  to 
be  used  rather  than  specifying  the  high-level  percent  losses.  For 
example,  the  square  law,  the  exponential  law  and  the  linear  law*, 
which  are  three  types  of  attrition  equations  resulting  from  three 
different  mathematical  representations  of  the  ways  thatan 
engagement  can  unfold,  correspond  roughly  to  the  three  mini- 
scenarios  mentioned  above.  Using  this  concept,  COBRA  would 
dynamically  select  the  "law"  that  should  be  used  to  simulate  the 
attrition  for  each  phase  of  the  various  engagements  and  record 
the  reasons  for  these  selections. 

6.  CONCLUDING  REMARKS 

The  Rule-Based  approach  for  determining  combat  outcome 
discussed  in  this  paper  offers  the  potential  to  improve  the 
simulations  used  for  military  training  and  exercises  over  that 
achievable  using  the  traditional  simulation  techniques.  These 
potential  advantages  include: 

1 .  I  landli ng  a  broader  spectrum  of  cases; 

2 .  Allowi  ng  users  to  have  less  knowledge  of  model  details; 

3 .  Considering  more  than  attrition; 

4.  Assuring  reasonable  results; 

5.  Providing  mission  assessments;  and 

6.  Simplifying  postgame  analysis. 

The  challenge  lies  in  actually  producing  a  system  which  lives 
up  to  this  potential,  There  will  always  be  those  who  will 
question  the  output.  However,  the  intent  is  to  provide  the 


*  See  Reference  2. 
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ABSTRACT 

A  military  Headquarters  can  be  viewed  as  a  mullidcci- 
sionmakers  team  'supervising  a  highly  dynamic,  complex, 
and  uncertain  environment.  The  effects  of  contingency 
pianmrg  and  battle  intensity  on  headquarters  effectiveness 
were  investigated  through  experimental  study.  Two 
hypotheses  were  tested:  1)  A  plan  with  multiple  options 
or  alternatives  is  superior  to  a  plan  with  a  single  option  or 
alternative;  and  2)  The  value  of  a  multiple-option  .plan 
over  a  single-option  plan  will  increase  as  the  intensity  of 
the  battle  increases.  Subjects  played  four  systematically 
varied  presentations  of  a  wargamc  within  the  context  of  the 
JANUS  Simulation.  The  measurement  of  command  and 
control  effectiveness  was  performed  through  the  analysis  of 
two  components:  the  outcome  of  the  wargame  and  the 
process  by  which  the  outcomes  were/ achieved.  Outcome 
data  consisted  of  event  driven  data  of  the  location  and 
strength  of  all  units  at  designated  periods  throughout  the 
game.  These  data  were  used  to  calculate  various  measures  of 
effectiveness  (MOEs)  related  to  movement  and  attrition. 
Process  data,  collected  by  trained  observers,  consisted  of 
frequency  counts  of  discrete  events  related  to  communica¬ 
tion  within  the  headquarters  and  number  and  types  of  orders 
given  Observers  also  made' a  series  of  subjective  ratings 
of  the  overall  quality  of  activity  within  headquarters. 
Results  confirmed  the  first  hypothesis:  headquarters  effec¬ 
tiveness.  as  measured  by  battle  outcome,  was  higher  when  a 
multiple-option  plan  was  used.  The  second  hypothesis  was 
not  confirmed:  the  value  of  a  multiple-option  plan  did  not 
Increase  as  the  intensity  of  bftttle  increased,  Results 
indicated  an  unexpected  interaction  between  plan  and  battle 
intensity  showing  that  while  a  multiple-option  plan  was 
better  than  a  single-option  plan  in  the  low  battle  intensity 
condition,  the  opposite  was  true  in  the  high  battle  inten¬ 
sity  condition.  *  Consideration  was  given  to  findings  related 
particularly  to  process  measures  assessing  information 
requests  in  .  an  effort  to.  understand  this  counterintuitive 
effect.  It  was  noted  that  headquarters  that  did  best  in  a  par¬ 
ticular  experimental  condition  were  also  the  headquarters 
that  requested  the  most  information. 

INTRODUCTION 

The  Defense  Communications  Agency  (DCA)  has  sup¬ 
ported  research  on  headquarters  effectiveness  since  1982.  A 
Headquarters  Effectiveness  Assessment  Tool'  (Defense 


Systems,  Inc.,  1984)  comprised  of  135' headquarters  perfor¬ 
mance  measures  was  developed  for  DCA,  and  a  substantial 
amount  of  empirical  data  was  collected  and  analyzed  using 
portions  of  this  tool.  The  Headquarters  Effectiveness 
Assessment  Tool  (HEAT)  measures  arc  derived  from  a  theory 
of  headquarters  decisionmaking  that  is  based  on  classical 
adaptive  feedback  control  theory.  The  decision  process  is 
hypothesized  to  operate  in  a  cycle:  gathering  information, 
assessing  the  situation,  generating  decision  options,  pre¬ 
dicting  the  outcome  of  each  option,  selecting  a  response, 
executing  the  response,  and  monitoring  its  outcome,  i.e., 
back  to' information  gathering. 

The  purpose  of  this  experiment  was  to  determine  the 
impact  of  multiple-option  contingency  planning  on  battle 
outcome,  and  how  that  impact  varies  with  battle  intensity. 
One  of  the  early  premises  of  HEAT  theory  was  that  uncer¬ 
tainty  about  enemy  intentions  and  capabilities  (the  so- 
called  "fog  of  war")  forces  good  headquarters  commanders 
and  staffs  to  consider  more  than  one  possible  enemy  course 
of  action,  ar.d  to  formulate  several  responses  to  each, 
before  committing  to  a  particular  operation.  Often  called 
"contingency  planning,"  one  would  expect  that  this 
approach  would  yield  plans  and  directives  which  are  more- 
robust  to  CDCmy  actions  than  a  "brittle"  plan  where  only 
one  enemy  course  of  action,  and  one  plausible  response,  is 
considered. 

METHOD 

Subjects 

Nine  officers  drawn  from  a  course  in  military  physics 
at  the  Naval  Postgraduate  School,  along  with  three  line 
officers  from  the  101st  Airborne  Division,  served  as  sub 
jects  for  the  experiment.  The  subjects  were  randomly 
divided  into  three  teams.  Each  team  consisted  of  three  stu¬ 
dents  and  one  101st  officer  who  assumed  the  role  of 
Brigade  Comtrander  of  Blue  Forces.  The  team  and  com¬ 
mand  structure  was  preserved  throughout  the  experiment. 

Apparatus  and  Wargame  Scenario 

The  JANUS  simulation  presents  two  closely  related 
versions  of  a  wargame:  the  L  version  developed  by  the 
Lawrence  Livermore' Laboratory,  and  the  T  version  devel¬ 
oped  by  the  Army  Training  and  Doctrine  Command 
V/argaming  Laboratory,  Each  version  of  the  simulation 
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was  hosted  by  a  micro-VAX  computer,  and  connected  to 
'each  computer  was  a  pair  of  graphics  terminals  equipped 
with  mouse  control.  The  JANUS  facility  is  located  at  the 
TRADOC  Wargaming  Laboratory,  Naval' Postgraduate 
School  in 'Mootcrcy. 

In  the  JANUS  simulation,  all  movement  of  forces  on 
the  screen  is  accomplished  through  use  of  a  mouse.  Players 
have  individual  control  of  tokens  representing  one  or  more 
weapon  systems.'  The  simulation  is  oriented  about  “line  of 
sight"  and  "direct  kills"  of  weapon  systems  and  not 
Unchestcr  computation  to  assess  attrition  as  in- other  war 
games. 

The  wargamc  scenario  depicts  a  conflict  in  Iran 
involving  U.S.  and  Soviet  forces.  The  background  for  the 
wargame  is  part  of  a  larger  scenario  set  in  Iran,  under 
development  for  National  Defense  University.  In  this  sce¬ 
nario,  rebel  Iranian  forces  are  threatening  to  seize  Bandar 
Abbas,  on  the  Strait  of  Hormuz  in  the  Persian  Gulf,  and  to 
close  the  Gulf  to  shipping.  Soviet  forces  are  moving  into 
Iran  from  Afghanistan  in  support  of  the  rebel  forces,  and 
are  driving  toward  Bandar  Abbas.  To  achieve  this  goal, 
they,  must  cros's  the  Jebal  Barez  mountains  and  the  only 
road  runs  through  the.Bam-Darzin  pass. 

The  friendly  commanders  (Blue)  are  assigned  a  mission 
of.  1)  preventing  any  enemy  forces  from  entering  the 
Bam-Darzm  pass  itself;  2)  doing  as  much  damage  as  possi¬ 
ble  to  the  enemy  forces  to  blunt  their  drive  on  the  pass  and 
Bandar  Abbas;  and  3)  avoiding  Blue  casualties^  to  the 
greatest  extent  possible. 

Treatment  Conditions 

The  experiment  manipulates  two  independent  variables: 
the  presence  or  absence  of  contingency  planning  and  the 
level  of  battle  intensity  presented  in  the  wargamc,  Bach 
independent  variable  has  two*  levels,  with  the  resulting 
design  being  a  2  x  2,  yielding  four  treatment  conditions. 

The  two  indcpcndcnt^variables  are  defined  as: 

1.  Planning,  which  manipulates  the  number  of  options 
or  contingency  plans  within  the  Operational  Plan 
(OPLAN)  provided  to  subjects.  The  initial  position 
of  Blue  (friendly)  forces  is  manipulated  to  be 
consistent  with  the  OPLAN.  The  two  levels  of 
planning  are  as  follows: 

a  Single-Option  Planning,  defined  as  an  OPLAN 
that  has  one  primary  estimate  of  enemy  intent, 
and  one  primary  course  of  action  tailored  specif¬ 
ically  to  "meet  that  threat,  with'  Blue  forces 
positioned  accordingly  at  the  beginning  of  the 
game, 

b  Multiple-Option -Planning,  defined  as  an  OPLAN 
that  has  multiple  estimates  of  enemy  intent, 
multiple  responses,  and  a  better  starting  position 
to  meet  a  variety  of  enemy  threats. 

2  Battle.Intensitv.  defined  here  as  a  composite  of  two 
attributes1  1)  the  type  of  tank  used  by  the  Orange 


(enemy)  forces,  and  the  Orange  offensive  capability 
associated  with  ah  at  type  of  tank;  iind  2)  the 
interjection  of  a  secondary  task  of  high  importance 
(an  ,  unexpected  attack  off-screen).  The  two  levels  of 
battle  intensity  are  as  follows: 

a.  Low  Battle  Intensity,  defined  as  the  use  of  current 
T-80  tanks  by  Orange  forces  as  part  of  their 
attack  force,  and  the  absence  of  an  off-screen 
attack. 

b.  High  Battle  Intensity,  defined  as  the  use  of  tanks 
that  are  25  percent  stronger  than  the  T-80  tank 
in  armor  and  fire  power;  and  the  need  to  prepare  a 
battle  plan  in  20  minutes  for  another  attack 
taking  place  off-screen. 

Within  Ohis  2  x'2  design,  the  main  effects  of  contin¬ 
gency  planning  and  battle  workload  were  tested,  as  well  as 
their  interaction.  Analyses  were  performed  by  means  of  a 
mixed  (between  —  within)  analysis  of  variance  design. 

Procedure 

Bach  team' played  the  game  under  all  four  experimental 
conditions.  Four  different  scenarios  for  the  enemy  attack 
were  used  with  four  different  patterns  for  the  enemy 
approach.  Each  scenario  appeared  unique  but  was  tech¬ 
nically  similar  to  the  other  scenarios.  These  four  battle 
scenarios  were  developed  so  that  a  team  never  experienced 
the  same  scenario  twice.  Each  team  played  each  scenario 
once,  with  single-  and  multiple-option  plans  having  been 
developed  for  each  scenario.  In  addition,  each  scenario 
depicted  a  different  surprise  attack  launched  by  the  enemy 
(c  g.,  a  helicopter  assault  to  Blue's  rear  or  a  flank  attack  by 
an  armored  column).  In  each  case  Blue  headquarters  became 
aware  of  the  surprise  attack  30  to  40  minutes  into  the 
game.  The  surprise  attack  was  designed  to  highlight  any 
difference  between  single-  and  multiple-plan  conditions. 
Each  team  was  assigned  to  one  counterbalanced  ordering  of 
the  four  treatment  conditions  and  scenarios. 

Data  Collection 

Data  for  evaluation  of  the  experiment  came  from  three 
major  sources:  1)  the  computer  system  that  supported  the 
Simulation,  2)  expert  observers,  and  3)  the  players 
themselves.  The  JANUS  system  provided  event  driven  data 
that  consisted  of  periodic  updates  of  the  location  and 
strength  of  all  units  in  the  game.  The  reporting  period 
selected  for  the  experiment  was  every  15  minutes  of  game 
time.  This  data  was  used  to  calculate  various  measures  of 
effectiveness  (MOEs)  related  to  movement  and  attrition  of 
both  Blue  and- Orange  forces  over.the  course  of  the  game. 

Two  expert  observers  were  positioned  within  each  team 
to  monitor  activities  and  collect  additional  dependent 
measures.  The  measurements  collected  by  the  observers 
were  divided  into  two  categories;  1)  subjective  ratings  of 
the  overall  quality  of  activity  within  headquarters,  that  were 
recorded  every  30  minutes  of  wall  time,  and  2)  frequency 
counts  of  discrete  events  related  to  communication  within 
the  headquarters  and  number  and  type  of  orders  given. 
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RESULTS 

Outcome  Measures  and  Process  Measures 

The  measurement  of  headquarters  effectiveness  in  the 
experiment  has  two  components;  the  outcomes  of  the 
wargame  and  the  process  by  which  these  outcomes  are 
achieved.  Outcome  measures  indicate  the  degree  to  which 
the  Blue  teams  in  the  experiment  achieved  their  game 
objectives;  process  measures  provide  detail  on  how  they 
went  about  achieving  those  goals. 

The  measures  of  effectiveness  {MOEs)  used  to  evaluate 
the  two  hypotheses  were  derived  considering  Blue's  primary 
goals.  Blue  was  specifically  charged  with  the  defense  of 
the  Bara-Darzin  pass.  This  included  preventing  Orange 
forces  from  penetrating  the  pass,  as  well  as  holding  the 
positions  around  the  pass.  MOEs  that  assessed  how  well 
Blue  deterred  Orange's  advances  and  kept  them  away,  from 
the  pass  area  are  particularly  apropos  to  these  goals.  Blue, 
however,  was  also  urged  to  destroy  enemy  forces  3nd  to  be 
as  efficient  as  possible  (c.g.,  minimize  their  own  attrition 
and  expenditure  of  resources)  while  pursuing  their  primary 
goals.  MOEs  dealing  with  attrition  and  performance 
efficiency  were.,  used  to  3sscs$  Blue's  accomplishment  of 
their  charge. 

It  is  important  to  note  that  Orange,  played  by  two 
experienced  staff  members,  was  also' given  specific  goals. 
Orange  forces  were  to  penetrate  and  take  control  of  the 
Bam*Darzin  pass  and  to  do  so  minimizing  their  own  losses 
and  expenditure  of  resources.  Thus,  Blue  was  confronted 
with  a  motivated  intelligent  adversary. 

In  particular,  the  MOEs  are;  1)  proportion  of  orange 
forces  with  a  five  kilometer  radius  of  the  Bam-Darzin 
pass  —  defined  as  the  number  of  Orange  weapon  systems 
within  five  kilometers  of  the  pass  at  end  game  divided  by 
the  total  number  of  weapon  systems  remaining  at  end 
game;  2)  Blue  stopping  efficiency  —  defined  as  he 
percentage  of  the  original  distance  from  the  pass  still 
remaining  for  Orange  to' traverse  at  end  game  weighted  by 
the  losses  Orange  incurred  at  end  game;  3)  effective 
advance  —  defined  as  the  distance  Orange  traversed  trying 
to  attain  the  pass  weighted  by  the  losses  incurred  traveling 
that  distance;  and  4)  Orange  losses  per  kilometer 
advanced  —  defined  as  the  attrition  Blue  was  able  to  inflict 
on  Orange  for  each  kilometer  Orange  moved  toward  the 
pass.  Although,  the  four  MOEs,  are  moderately  correlated, 
there  was  sufficient  unique  variance  to  consider  each  as  a 
separate  measure. 

Aniinvestigation  of^Outcome  Measures  alone  can  not 
give  a  complete  picture  of  headquarters  effectiveness. 
Outcome  is  the  end  product  of  a  multitude  of  procedural 
operations  occurring  throughout  a  threat  scenario. 
Measurements  of  these  operations  arc  called  process 
measures  since  they  identify  the  flow  of  activity  which 
precipitated  the  successful  completion  of  mission 
objectives.  Process  measures  were  drawn  from  records  kept 
by  observers  (which  contain ^EAT  measures  and  other 
observational  data). 


Testing  Hypothesis  1  —  Single  Versus  Multiple  Option 
Plans 

Three  MOEs  speak  directly  _to‘ Blue's  primap^.  mission. 
They  arc  proportion  of  Orange,  forces  penetrating  within  a 
five  kilometer  radius  of  the  pass,  Blue  stopping  efficiency, 
and  effective  advance  of  Orange  forces.  Figures  1  and  2 
show  that  for  the  .two  dependent  variables,  effective 
advance  and -Blue  stopping  efficiency,  Blue  teams  were 
more  effective'  when  they  had  a  multiple-option  plan  than 
when  they  had  a  single-option  plan.  -The  effective  advance 
results  in  Fig.  3  also  demonstrate  that  after  the  initial  time 
interval,  Blue  tended  to  be  more  effective  over  time  when 
employing  a  multiple-option  plan. 


Figure  I.  Effective  Advance  by  Plan. 
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Figure  2.  Blue  Stopping  Efficiency  by  Plan. 


Figure  3,  Effective  Advance  by  Plan  and  Time  Interval. 


In  addition,  the  MOH  weighted  more  towards  attrition 
showed  a  stronger  pattern  favoring  a  multiple-option  plan. 
Bluc-was  able  to’  inflict  a  greater  Joss  on  Orange  for  every 
kilometer  Orange  advanced,  when”  multiple-option  plan 
was  in  effect  rather  than  a  single-option  plan.  These 
results  are  shown  in  Fig.  4,  where  it  can  be  seen  that 
multiple-option  plans  result  in  a  16; percent  advantage  in 
attrition  per  kilometer  over -a  single-option  pi  an. 
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Figure  4,  Multiple-Option  Pl3n  Results  in  Greater 
Effectiveness. 

Testing  Hypothesis  2  —  Plans  and  Battle  Intensity 

The  second  of  the  two  hypotheses  to  be  evaluated 
implied  that  the  advantage  of  multiple-option  plans  over 
single-option  plans  would  become  greater  as  battle 
Intensity  increased.  In  other  words,  an  interaction  between 
plans  and  battle  intensity  was  predicted.  The  results 
presented  in  Fig.  5  show  that  for  the  iwo  primary  MOEs, 
effective  advance  and  proportion  of  Orarge  forces  with  a 
five  kilometer  radius  of  the  pass,  asikwell  as  for  the 
attrition-oriented  MOE,  Orange  losses  per  kilometer 
advanced*  the  interaction  is  significant,  but  not  as 
hypothesized.  Blue  teams  using  multiple-option  plans  are 
more  effective  under  conditions  of  low  battle  intensity, 
however,  are  effective  than  those  using  single-option 
plans  under  high  battle  intensity. 


Figure  5. 
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Interaction  of  Plan  and  Battle  Intensity 
DisconfirmS  Expected  Outcome. 


The  unexpected  findings  for  the  plan  X  battle  intensity 
interaction  axe  puzzling.  The  expected  interaction  pattern, 
as  shown  in  Fig.  6,  predicts  that  a  multiple-option  plan  is 
somewhat  superior  in  effectiveness  to  a  single-option  plan 
under  conditions  of  low  battle  intensity.  Under  high  battle 
intensity,  it  is  predicted  that  a  multiple-option  plan  would 
show  little  change  in  effectiveness  while  a  single-option 
plan  would  show  a  significant  decline  in  effectiveness.  The 
rationale  for  such  an  outcome  is  reasonably  straightforward. 
A  multiple-option  plan  has  prepared  for  several  possible 
enemy  actions  or  intents  while  a  single-option  plan  has 
not.  If  the  enemy  departs  from  the  expected  action,  a 
multiple-option  plan  immediately  provides  well  thought-out 
alternative  actions  to  counter  the  enemy.  A  single-option 
plan  has  prepared  for  a  single  enemy  action  or  intent  and 
when  the  enemy  does  something  unexpected,  a  single¬ 
option  plan  has  n£  readily  available  alternatives.  This 
means  during  the  stress  of  battle  those  operating  with 
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a  single-option  plan  must  replan  and  reorient  their  forces. 
Moreover,  under  the  condition  of  high  battle  intensity,  the 
time- available  to 'do  this  replanning 'would  be  less.  Thus, 
not  only  must  commanders  replan  and  realign  their  forces, 
but  they  must  do  so  under  very,  trying  battle  conditions. 

DISCUSSION 

The  two  primary  questions  concerning  the  unexpected 
interaction  that  need  to  be -addressed  are:  why  a  multiple- 
option  plan  was  not  more  effective  than  it  was  under  high 
battle  intensity,  and  why  a  single-option  plan  was  so 
effective  in  the  same  condition.  To  understand  and  explain 
these  unexpected  interaction  results,  inspection  of  the 
process  measure  data  was  undertaken.  These  process 
measures  included  all  the  interpersonal  requests  for 
information  occurring  within  the  headquarters  (c.g.,1  the 
number  of  times:  the  commander  requested  information 
from  his  staff,  the  staff  requested  information  from  the 
commander,  and  the  staff  requested  information  from  each 
other).  From  Fig.  7,  it  appears  that  a  headquarters’  request 
for  information  covaried  with  its  effectiveness. 
, Headquarters  operating  with  a  multiple-option  plan  sought 
more  information  than  headquarters  operating  with  a  single- 
option  plan  in  conditions  of  low  battle  intensity  and  were 
more  effective.  In  high  battle  intensity  condition,  it  was 
headquarters  dealing  with  a  single-option  plan  that 
requested  more  information  and  demonstrated  superior 
effectiveness.  It  is  believed  that  headquarters  that  request 
and  obtain  the  most  information  gain  the  best  picture  of 
the  battle  situation  and,  thus,  are  best  able  to  fight  the 
enemy  effectively. 


Figure  7  Amount  of  Information  Requested  by  Headquarters 
Varied  by  Experimental  Condition  Over  Time. 


The  question  still  remains,  ,  why.  were  some  headquarters 
motivated  to  seek  more  or  less  information  than  other 
headquarters.  We  conjecture  that  the  activity  level 
confronting  a- headquarters  and  the  cognitive  limitations 
inherent  in  si!  humans  may  hold  the  key.  Abstractly, 
commanders  arc  faced  with  three  general  options:  they  can 
fight  the  battle  directly,  seek -information  abouf  the  battle 
situation,  or  think.  If  the  situational  demands  are  low, 
slack. time  is  ample;  then  the  commander  has  plenty  of 
time  to  engage  all  .three  options.  When  situational 
demands  are- moderate  to  high,- there  is  no  slack  time  and 
commanders.must'tfade  off  during  the  options.  That  is,  to 
spend  more  .time  seeking  information  lac  commander  must 
puf  less  time  and  attention  in  fighting  the  battle  and/or 
thinking.  Wc  hypothesize  that  multiple-option  plan 
headquarters  in  the  low  battle  intensity  condition  enjoyed 
low  situational  demand.  Our  commanders,  trained  to  be 
active  and  aggressive  used  the  free  time  to  improve  the  r 
situational  assessment  of  the  battle  environment. 
Headquarters  functioning  under  a  single-option  plan  in  low 
battle,  intensity  faced  what  for  them  was  a  moderate 
situational  demand.  They  could  do  the  nominal  amount  of 
information  seeking  (fighting  and  thinking),  but  no  more. 
They  are  meeting  all  their  demands  and  thus  would  be 
unwilling  to  perform  one  of  the  options  in  deference  to 
another  for- no  good  reason.  Similarly,  headquarters 
working  with  a  multiple-option  plan  under  high  battle 
intensity  confront  what  for  them  is  a  moderate  situational 
demand.  They,  too,  are  meeting  all  their  demands  and 
would  not  be  motivated  to  depart  from  the  nominal 
involvement  with  the  three  options.  The  situation 
becomes  somewhat  different  for  the  single-option  plan 
headquarters  in  the  high  baulc  intensity  setting.  They  arc 
confronting  a  high  (maybe  very  high)  situational  demand. 
These  headquarters  are  striving  to  understand  and  control 
the  situation  to  lower  the  demand.  They  might  wish  to 
think  about  the  problem,  but  quickly  realize  that  they  are 
employing  an  internal  model  of  the  situation  that  no 
longer  fits  reality.  They  would  like  to  confront  and  fight 
the  enemy  but  with  no  good  assessment  of  the  battle 
situation,  this  is  difficult.  Thus,  they  engage -in  the  only 
option  that  is  available  in  this  constrained  environment: 
information  seeking.  Interestingly,  information  seeking 
will  help  update  their  internal  model  and  provide  a  better 
assessment  of  the  battle. 

The  above  explanation  is  compatible  with  principles 
derived  from  theories  of  optimal  level  proposed  by  Berlync 
(1960),  Duffy  (1962),  Hcbb  (1949),  Leuba  (1955),  Malmo 
(1950),  and  Walker  (1964).  Such  theorists  hypothesize 
that  each  individual  has  an  optimal  level- of  external 
stimulation.  If  the  situational  demand  (or  stimulation)  is 
below  optimal,  individuals  skive  to  adjust  the  environment 
to  increase  the  stimulation  and  bring  it  closer  to  optimal. 
If  the  situational  demand  is  above  the  optimal  point,  then 
individuals  will  try  to  adjust  the  environment  to  bring  the 
stimulation  level  down  and  closer  to  their  optimal. 
Commanders  of  headquarters  operating  with  a  multiple- 
option  plan  ja  low  battle  intensity  found  their  environment 
under-stimulating,  so  they  sought  information  to  alter  the 
environment  to  increase  stimulation,  Conversely, 
commanders  of  single-option  plan  headquarters  in  high 
battle  intensity  found  their  environment  overstimulating 
Thus,  they  strove  to  alter  the  stimulation  level  downward. 


539 


Wiia  fie  ccn£m=ms  cS  fie  aaaa,  fie  caly 

o/ioa  available  to  kora  abed  She  jc£j»  to  effect  3 
dxgs  vu  to  se±  sfissSacs.  A:  rcy  high  fcrfi  of 
sfim-lafi^i  this  grxp  *oc2d  be  pi:  setossd  to  engage 
in  *nfcn=afi»  srrkr-g. 


CONCLUSIONS 

Retails  -of  fie  experiment  provide  support,  for 
bypoficsi'  1.  Bine  teams  war* cere  eflcdve  when  .they 
worked  £cm  a  plaa  than  «be a  they  weeied 

from  a  single-option  plii.  Further  nijjjij,  batvc, 
revealed  fiat  for  the  035:  part  fib  effect  »»  dee  to  fie 
superior  performance  of  headquarters  operating  wifi  3 
multiple-option  plan  .in  low  bxalc  intensity  ccndiriens.  ' 
Retells  of  as  entxpeefid  interaction  between  plzo  2nd 
basic  intensity  shbrred  fiat  while' a  gmltiplc-cplien  pica 
was  berter  than  2  single-option  plan  is  lew  btsfe'easiy 
condition,  the  ’epposize  was  tree  in  high  baale  intensity. 

Ia  this  latter  condition.  headquarters  wxxking  from  2  jSn&p- 
op’ioa  ’p’aa  enjoyed  higher  effectiveness  than  irmnibpie- 
cptica  plan.  It.  is  surmised  fial  some  ccsditjocs 
this  experiment  interacted  with  plaa  and  basic  istesshyto 
prod  see  this  res  cl  L  It  was  noted  fial  the  rxJtzple  cpik-n 
plan  beadqcmters  in  the  low  battle  alresdy  eorditba  asi 
the  single-option  plan  headquarters  ia  fir  a  frig?,  battle  _ 
intensity  condition  sought  significantly  more  bfcrSJdksc 
than  their  counterpart  is  fie  same  workload  situ  slice.  It- is 
■hypothesized  fiat  the  additional  information  gave  fiiije 
headquarters  a  feeder  picture  of  fie  battle  and,  thus,  L-dered 
higher  effectiveness.  The  difference  ia  motivation  am^ 
the  headquarters  to  seek- information  was  explained  fcy 
drawing  on  theories  of  an  optimal  lcveL 
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MATHEMATICAL  COMTAJtKOS  OF  COMrUIER-ASOOELSTO  EXERCISE  DATA: 
COMPARISON  OFJANLSfO  TO  NATIOXALTRAININC  CENTER  DATA 


Ustrisjic 

gagBtoDep<gBc^CoJe6ia,Xi«JIt^3a3acSdbocLSiceaggy.CAg3gg 


aobact. 

ba  fttoal  SgtMCi  «o  compare  bo&frxic  cca^at  ccepcfier- 
reodrls (ccfafcy  sawcfaxac xzd wrjxwcs)  w cxcrbc dire.  Tbiscco- 
prxsao  process  is  oecessr/  it  bcge-safe  coastal  ccespescr-caodris  xz  as 
be  eirapofored  wich  rcx6dr=cr:  t>  drrcky  tac^-c^-^^cLr^.  C3  xnd  pro- 

Naoocai  Traiafag  toa  (NTC)  dxi  h  qrv^Ccd  «d  toed  to  cco- 
srxt  JANU5(I)  screxfas.  Tococ^^JASTIS(T)  txrprtdyitodgNTC 
axreisg  dare,  we  tfavdcpdysasfccachereacaaZ  models  cf  each  d«3sa.fa 
cfaiaccecMacceaoata»febtec«^a^TbBe^^y 
rfeKhl  noddy  are  at  a  bdcfaggpcxaaaj  b  fee  tegsagsef. 
sc2Kxri  of  fee  (Jlpf)  or  cflechtacss  (k50E)  ypeyae  £(X  fcacle* 
Esa^aert  z=d  C2.  befag  iMctoX  ncrifarar  grorraTimba  cf 

1  rvVgf.tVf  rwVk 

Ea±  6a  set  is  fit  to  cwal  ctadiias  jia«a;  6ssi- 

fcericcs,  rsreg  oeAods  of  "fat  srecaijCcd  rc-anarslcx;-  -eh  a  La^zJpaa 
(caedtpeatet  lifctnic  esfl-faxtee)  dxnj  fea  nfr’bfg  sjehtte 
ixe  eyatioos  for  >J0F».  ce.  These  crxSdare  rnrVr.anl 

models  are  fcio  i essed  by  csfag  peb-fatejal  wracrifal  wtepa  K> 
derefcp  keg-rreae  protabi&y  dicribetioos  gaa;  6s  ccobx  sceano. 
The  kfl-cnSiee  ma±ecrerirel  models  cf  JANUSfl)  dare  «al  of  NTC 
dare  ace  coeparrd  to  determine  the  qreiitarivc  at  w-e3  as  die  qsanrirerivc 
deyee  cf  comparison. 


L  INTRODUCTION:  C1  IN  TRAINING  AND  COMPUTER-MODELS 
Tics  project  addresses  the  criSjr  cf  csta&shmg  **  ^5«ncb  to  com¬ 
pare  exercise  dare  »  large-scale  cccpater-oodds  whose  idttfdy  under¬ 
lying  criaoscojxc  fateocoocs  among  men  and  cortuncs  ye  dnvea  by  lie 
caeml  laws  of  Physics: 

I  am  Principal  Iavcsrigasx  cf  tits  project.  which  is  being  conducted 
for  lie  Army  Model  Management  Office  (AMMO)  by  a  team  of  a  scccz  of 
people  representing  Aroy  TRADOC  NFS.  Marine  Corps  Warfigfcriog 
Ccnfa.  and  UC  Lamencc  Livermore  Nariooal  Labomory. 

This  Secrioo  I  outlines  some  of  lie  Issues  axxivatisg  our  general 
appuach.  Section  II  orJincs  our  lethacal  ayprcceh  to  irahcmarical 
modeling:  Section  III  Then  a alines  a  prototype  applicaaoa  to  JANUS  data. 
Section  IV  oodines  our  general  pbn  cf  attack.  Section  V  then  outlines  some 
specific  issues  addressed  to  date.  Section  VI  insodoces  the  cuin  personnel 
and  their  tasks  b  lias  project. 

/-  Necessity  cf  ccBtparttt  cotnpuser-models  cf  ccrrbat  to  < xerdse  dots 
In  ihis  faper.  I  w2I  me  the  term  ccmpwer-raocfcl  to  include  confer 
Officiated  as  well  as  computer  wargames.  tie  latter  involving  human  par 
octants  ta  real  time.  Soipe  preliminary  studies  (I )  suggest  that  JA\US(T) 
gives  similar  results  wfcea  run  in  hatch  as  a  simulation  or  run  with  players 
as  a  wargame  I &.  it  appears  that  JANUSfl)  simulation  can  be  compared 
favorably  to  JANUS{1)  wargame.  In  this  study,  the  focus  wtQ  be  to  com¬ 
pare  JANUSfl)  wargame  to  National  Training  Center  (NTC)  data,  since 
both  systems  then  uke  into  account  htxtun  interactions. 

It  also  should  be  noted  that  ''large-scale"  here  refers  to  hauahon- 
Jevel.  If  these  baaafion-levcl  computer-models  can  be  favorably  compared, 
and  if  consistency  can  be  achieved  between  the  hierarchy  of  large-scale 
battalion-level,  larger-sole  corps-level,  and  largest-scate  theater-level 
computer-models,  then  these  higher  echelon  compufa -models  also  can  be 


favorably  c ospcpL  Tkssccddocfy  enlarge  the  vafaecfnfasrgca  these 
t^totddnctgpar-goi^t  ffl. 

The  icusssj  of  dcpcadJg  acre  and  acre  ca  coc&x  ccopcrer- 
sMdgs(ggfa£sgsE3dh&sasaedwacgaac^  tas  bceabreugtactp  sharper 
fares  becacse  cf  caaey  emcoxa.  eg:  (a)  fe  txreiisagge  cf  acpfc 
djafaagcgnoaswagaadtaaaagcpeaeoc^OOthetyiSyshQge^sg 
faesaic  on  wisch  tjcriczS  feristo  crest  be  made,  (c)  the  opo5y 
artrer  scale  ai  «Sd  cm  and  ctfeei  as  »  be  &pind  (<5)  the 
zastacag  a nsacn  cf  new  scesarios  wttdi  as  fcatoeefly  <Sfata 
fara  tbrerreal  eapexago.  (e?  and  fee  screaccg  crpecac  cf  cco- 
6aa{tyaggtsa«. 

HowW.thefcvtJofaacepcaxecfcoc^rerer-coddSiac^orcS- 
arytsgfc^aigagcaeetaadptocgcaaegtdecaSctgagpeagsioIccsSiato 
geleirlofaoctptaxe  cfcceapaagKTx’atrs  iapfeiTxstatiglggrsL  fa 
pfcysres.  prior  p  the  1960's,  ihaary  and  aperiaaest  famed  a  dete  bead  to 
sene  to  cadssaad  naase.  fa  the  1960's,  a^tewaawre  tasc isated 

erpKsg  rcr-ycter  xctocfcgy.  td  very  tew  petpk  serceshr  accepted 
res^s  fhxa  coespser  saafabtss  as  bereg  on  a  par  m*h  good  (beery  and 
rood  qpenaeaL  New.  cf  coerse.  the  sfccaoa  is  quite  rhffaesL  TLe 
oecessixy  of  cadeoa^lcg  trefy  coe^ta  systeres  has  pfaccd  cocycar 
ueebeino.  together  widt  theory  and  experiment,  as  an  eqsd  leg  cf  a  inpod 
cf  techniqxs  used  to  isvesipis  pfcysisd  naesre. 

The  raphoras  ccctssey  to  bring  combs!  composer  oodeis  to 
their  needed  level  of  icpocaace  are  fiily  obriocs.  fa  order  »  have 
ccnSdcnrc  fa  coespuar-caodd  dtu.  respocribJe  dcdsioo-cuim  crest  be 
convinced  that  compcar-tnodcls  model  reafay.  not  models  of  models,  or 
models  of  models  of  models,  ere.  Many  people  feel  that  not  much  progress 
has  been  made  fa  the  last  decade  P]  with  regard  to  tha  issue,  desptre  a  gen- 
eol  exsrucss  of  the  problem. 

If  a  reasccable  coe£desee  level  fa  compuar-eodcls  of  large-scale 
copba  scenarios  cocli  be  obofaed.  there  are  several  fajaediatf.  payoffs  to 
be  gained.  More  objective  dare  could  be  presesad  for  proccremetx  deci¬ 
sion.  ig.  provided  by  scaaiiiiy  analyses  of  sets  of  compcar-models 
diffenng  fa  specific  weapons  diarauensucs.  In  order  to  give  proper  weight 
to  these  rhlTering  chametenstxs,  theu  mfiueace  wifiaa  the  global  cocrext  of 
foil  combat  scenarios  would  be  tested. 

2.  Lartc-scclc  C2  and  need  for  maikarUZical  modeling 

Modeling  phenomena  a  as  much  a  cornerstone  of  20th  canary  Sci¬ 
ence  as  is  cotkoion  of  cmpmcsl  dau  (4).  In  essentially  all  fields  of  Sci¬ 
ence  mathemafical  models  of  the  real  world  become  tested  by  fitong  some 
parameters  to  cmpcncal  dare.  Since  the  real  world  ts  often  nonlinear  and 
srechastic,  a  is  not  surprising  'hat  often  lias  fitting  process  involves  fitting 
juristical,  nonlinear,  non-convcx  functional  forms  to  data. 

As  in  ocher  fields  of  Science,  in  the  context  of  modeling  combat, 
reductionist  doctrine  ts  -imply  inadequate  to  fully  understand  systems.  For 
example,  a  threshold  is  quickly  reached  at  a  level  of  command  of  any  large 
jysxan,  be  it  physical,  biological  or  social,  when  a  'language  shift  is 
required  for  effective  command  and  control.  A  high  level  commander  can¬ 
not  use  a  grease-board  to  track  individual  units,  albeit  he  might  periodically 
sample  his  units,  but  he  mast  rather  look  at  the  overall  systematic^  e.g^ 
aggregtied  measures  of  force  (MOF)  or  effectiveness  (MOE).  asrition,  res¬ 
upply,  etc.  At  this  level  we  properly  require  command  and  control  (C2). 
rather  than  'sujw-bade-marugement  from  commanders.  At  this  level 
we  denote  the  system  as  large-scale.  (See  Fig.  1.) 
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Tbs  issue  of  tcSxcg  \5CF*s  and  MOE*s.  e.g.  x  abost 

teato-tod  of  combat.  rs  refcvax  to  ccegcg-godds  as  «tfl  as  to 
.ccai  combo.  Merely  aggrcgxag  data  to  fcra  MOFscrMOss  does  set 
iassaxcA  ictcia  frota  cce  onaoo  (combat  or  compecr-modd  scsaano) 
a  cccapxabfc  »  »c6a  mrssxn.  Eg,  small  Affanxxs  a  ic.po  cr  a 
spscx  dia^csca  of  HX)T  <te»zrd  tao  cf  oa  Poops),  cr  FEEa  tJof»2rd 
edge  of  Ac  task  area),  cay  cause  titles  c£  eoaim  to  appear  q=te  Af¬ 
ferent. 

MrtVrsrsrxl  models  of  aggrtgxs I  daa  sbocSJ  be  expected  to 
CSOTC  Xaecfcractts '  of  coc&a.  C-g,  lie  bnc-firing  c*  area-teg  n 
sesjae  Lancheccr  Accry.  More  complex  oissioes  pbssAfy  wxdcccaia 
acre  cM;  gedsagas  as  well  as  weighted  comribcrioes  of  acre  basic 
eaerfaaaas.  UsmgA»asfcsxiri£bt.insocacsyHccsucjyAeabepcsw- 
bEuspecdy  a  figeroef  merit,  some  sisple  set  cf  numbers  to  capsuJxe  the 
tsSocace  of  these  mechanisms. 

These  mechanisms  are  to  be  artxulxrd  by  particular  algebraic  forms, 
indeed.  this  is  (be  most  nspoctao.  sense  of  Physics,  to  ose  maAcsaacal 
fcxsts  to  arricchce  meriaagms  and  cxxJc-s  of  empirical  phenomena.  Far 
a xnpfc.  a  ts  to  be  expected  that  the  esc  of  this  stasflkal  mechanical 
approach  win  facilitate  Ac  process  of  kSearifying  algebraic  forms  relevant 
to  combat.  bcussc  ia  many  cases  these  algebraic  forai  will  be  sufficiently 
sialhr  to  ocher  well-known  physical  mxfcarocs  determined  ia  abet  physics 
ffixfrs. 

Awareness  of  such  pUuSfe  mechs&ros  permit  the  analyst  or  the 
fidd-cocnundei  to  acre  easily  tacover  vafotxxs  of  pattens  a  common 
Acme  unfolding  m  databases  or  u>  real-time.  In  complex  missions,  such 
tools  arc  more  than  niceties^  they  can  be  necessities. 

Therefore,  to  be  most  useful,  compcier-roodd  dan  should  be  aggie- 
gXcd  and  then  maAemaucafly  modeled  using  variables  as  close  as  possible 
to  (he  level  o J  command  to  which  they  are  to  become  decision-aids.  Tbe 
mathematical  modeling  must  by  necessity  be  nonlinear.  eg.,  offering  alter* 
native  choices  of  possible  outcomes.  upon  which  human  judgement  and 
experience  can  be  brought  to  bear  and  be  accountable.  Tbe  maAcma&al 
modeling  must  by  necessity  be  probabilistic*)  that  expected  gains  can  be 
humanly  weighed  with  respect  to  loth  payoffs  and  probabilities  of  payoffs 
ofaltemative  dynamic  (lime-dependent)  states  of  the  system. 

As  discussed  x  a  recent  conference  15),  too  often  wo  have  weighted 
the  communications  aspect  of  C2  to  the  detriment  of  nof  properly  address¬ 
ing  the  command  and  control  (C2)  aspects,  Le.  too  often  only  socking  tech- 
oobgica)  fixes  lo  bard  large-scale  problems.  For  example,  the  Soviets  give 
much  weight  to  C2,  and  they  have  structured  tabular  dctiricn-aids  dispersed 
through  their  levels  of  command.  However,  their  relatively  rigid  political 
nund-set  has  fostered  the  development  of  these  tables  by  using  quasi-lmear. 
essentially  deterministic  mathematical  modeis  fitted  to  operations  data.  If 
we  use  modem  methods  of  nonlinear  stochastic  mathemaucal  modeling, 
tiring  data  gamed  from  operations  as  well  as  from  more  advanced  computer 
computer-models  base- lined  to  actual  operations,  then  we  can  greatly 
increase  our  C2  advantage. 


3.S^Jbrr^teracesitsaSeisefctpet£eddsa 

Tic  staggs  for  seeking  cateasal  sudds  rf  oca:  do 

ca^stbsddadeabo*cj»8L 

These  rraeVmScX  sodcis  oa  be  ced  to  appessA  cctcparisea  d 
cec^csr-aodds.  c^,  JANUSfT).  to  exerroc  dn.  e^,  tea  NTC.  It. 
,i— cssiossex^  t  lactusiscs  ^T-r  to  r~+> wfe^her 
Acyr  exist  is  Ac  crpag-cojds  or  i b  Ac  excuse  daex.  Ody  % 
ecerjccer-cjcdrfs  saA  as  JANUS  eas'be  foteatSy  carpsamd  to  NTC  dsO. 
caa  Aeas  fsgso  panic  tdafe  pec-  ad  pestexsase  era;  fee 
NTCccccnScJ. 

SadtsoddsBcedtabcdcvcfcpedgtaadSaB-fcvd.iodrivccctps- 
a=d  Acker-level  eedds  wtadi  rapsro  fcsjJJyajg^jred  sodds  to  run  » 
cc25esac. 

Sox.  Ac  csk  fa  Ass  2pprcxh  is  io  fcd  Ac  best  sa&esxiaj  oodd 
cf  ca^  sys^a.  in.  Ac  ccc^aer-cxdd  sy«e=3  *d  Ac  cxerdse^ca  sys- 
tca.  Tto^tScbcgcxhcexisaiBodeb  fcrcacbcaabcccgaFxtd. 

.  4.  Uodth  versus  rcaS?/ 

It  aca  be  stiad  thx  Acre  are  sriS  oasy  probSexs  faced -by  a3 
eepaa-oodds  cf  cociat.  which  oust  be  sohed  before  they  caa  be 
*  a^tdtscoidiof.'a&y. 

For  cx2=pSe.  a  xtsy  hasx  proUem  exists  ia  tic  quality  of  ast^assrica 
alpriAss.  Lcl.  bow  »  cocseroa  aa  algoriAsa  Ax  redisi ca2y  porsays 
hesaa  asrsrica  (pce^seerivc  a»  wcQ  as  scfecuvs)  2ad  perrepcsoo.  tader 
varioss caafcx aaJ  weaAg ceaSioa. aght  vtssss dry. etc.  TbcPriaa- 
pd  Iavnipax  is  xxaely  aware  cf  Ac  tsSuecct  of  xsaaxn  aad  perequw 
on  coc^iex  pbysxal  aad  oeaed  tasks  (9.10).  Coreacly.  Ac  best 
voobx  cospcKS-saodels  model  xxfastxa  as  senal  aad  lepcal  processes, 
whereas  the  fcgman  tea  acqsres  do  by  psraBd  asd  assocrane 
processes. 

PrescetJy.  Eae  of  sight  (U>S)  23go«l?as  seem  to  be  Ac  ogc  costly 
Ase  factor  ia  nsoag  JANUS  eorepeaa-oodefa.  Even  if  ocre  nahsric 
aerpasirico  aJgooActs  am  dcvclcpcd.  they  mest  bt  tailored  to  Ac  needs  of 
red-rime  coppctot-codris  if  they  are  to  be.  used  a  wxgracg  aad  a 
aa  mag.  The  mdnsioa  of  bsaan  pbyers  a  nclriple  rcss  of  saDx 
scenarios  ts  if  a  pcobAdmic.  oaAematxal  model  is  to  be 

developed  to  model  cxercnc  dm  such  as  Ax  ebesaed  froo  NTC. 

Siailarfy,  a  order  to  develop  a  cocrpuier-esodd  of  NTC  exercises,  to 
perform  Ac  coopxmon  xjVwJi  Aa  project,  an  ac^juisUXi  ot  PH  (p«> 
teAility  of  bil>  model  must  lc-  gleaned  from  At  raw  daa  or  u^pleaemed 
by  extsang  algoriAms  wvthm  Ac  ccropMer-modd.  Has  ts  -cry  oifficull 
problem,  requiring  subjective,  albcu  expen.  jodgmem.  This  is  firthei  da- 
cessed  fa  See.  V. 

If.  TECHNICAL  BACKGROUND.  GENERAL 
/,  Problems  In  Landxsur  theory 

Quasi-lmea  detenmmsuc  maAematiud  *»  not  only  a  popu¬ 

lar  theoretical  occupation,  but  many  wa;  games.  c.g,  JTLS  <Joim  Tbexer 
Level  Sunalarion).  use  such  cqmixw  as  the  primary  algorithm  to  dnve  the 
ixexaaicns  between  opposing  forces. 

In  its  simplest  form.  Ab  kind  of  maAemaUcal  modeling  a  known  as 
Lanchesierthcory: 

f  odrldi  a  x,b*y,rb 

bodbldtoj+r+jibr  (0 

where  r  and  b  represent  Red  and  Blue  variables,  andthexsandysare 
parameters  which  somehow  should  be  fi  i  to  actual  data. 

It  is  wt»  known,  or  should  be  well  known,  that  it  is  nctonoasly 
difficult,  if  not  impossible,  to  use  Eq.  (I)  to  mathematically  model  any  real 
data  with  any  reasonable  degree  of  precision.  These  equations  perhaps  are 
useful  to  discuss  seme  gross  systematic*,  but  it  ts  hard  to  believe  that,  for 
example,  a  procurement  decision  involving  billions  of  dollars  of  national 
resources  would  hinge  on  mathematical  models  dependent  on  Eq  fl  >. 

Some  investigators  have  gone  further,  and  amassed  historical  data  to 
claim  that  thou  is  absolutely  no  foundation  fer  believing  that  Eq  (i)  has 
anything  to  do  wi  A  reality  (1 1  J. 

However,  although  Acre  is  some.  truA  to  Ac  above  crrtxtwn*,  Ac 
above  conclusions  do  not  wi  comfortably  wiA  <xha  vast  stores  of  human 
experience.  Indeed,  Ass  controversy  is  just  one  example  that  supports  Ae 


segnay  of  tai-pg  baa  aswaac  «c  fc  befl  rf  agrr 

to*  (rrj'iTifij)  xytiib.*  a*  J  analysis  coriabB  ccncracy  d 

bats  jajpigt  k.  when  nfe  a  dpaafc  cacgfex  sysars. 

M'«»irfaa^c«a^iD^iofo^xgpoKeitjrim 

Tic  rae  of  hoaoriraf  (in*.  10  disdain:  any  rah  »  Ac  va&Sey  cf  Eq. 
(I).  8  a  isrif  6s  esc  of  iaappropcjog  xaSjis.  2S  »  poittd  era  n  a 
^iyplteypicgcfaosetl^.  Tkaty^aarfjo^MjKxm 
fcso  may  <£f«asra  SwXtastc  ceratra  sccaarias  does  act  acccoaly  fcna 
2=7  kfad  of  pcsfcab£ry  darlfoacfaB  «pcn  »tacb  to  cake  sacaSal 
caestt.  Two  coobs  scaarix.  toe  dUSer  fa  era  ctSj  several  varbScs. 
taSaaSy  arc  pa;  to  be  ys  djlcrzM  yarn,  aoc  log  teaic  lit 
very  mat  of  ttefafy  acargattoBC  (spee)  ctwpfitttc  jystaj  it  to 
fcnr  cppccGf  sides  pressed  to  6ear  certce.  acc  to  6eir  average,  cagaixti- 
rrx,  Ciia  tone  *ta^  rxa*’  P  dam  033  of  aa  opoi  t)~Ba«. 

bderd  these  JCXrs  wiC.be  6corvd  lo  acts  "fiiraabk:”  val*rs_ 

Ttericrr.  at  andentood  fan  qperiaee  to  sfagfafaf  ptjaa 
««,  caejr  fcajeoarict  of  6c  "tax**  sixtaoic  j^sa  eras:  be  agpe- 
pced  Were  a  testable  rettfotx*  of  averages  aad  fxaooocs  caa  be  asetr- 
irari  <Sv-»  no  xxaricx  6a:  dtfkr  c  one  pnaeter.  aad  ghta  a 
gSa^t  aoijq  of  trajectarics  cf  cadi  scenario.  rhea  6c  tat sanity  to 
chcgcs  of  a  "rcasoaobfc"  al^hac  fxcaoo  to  6b  paracaacr  caa  cfler 
tccac  aalpt  spcl  cao  dectriocs  jarohef  6c  oe  of  6=t  paraeaara  ia 
cccfcateeganotL 

2. Ee?iricaidza 

Tbemfere.  there  ax  no  rrmaiao;  tssaa  to  be  resolved.  Tbefirstis 
to  fcd  a  dotasc  of  a  gficiea  ncabar  of  ezjsctonct  of  6c  *  ’cac”  sys¬ 
tem.  npoa  which  caiyraaal  models  caa  be  hr3L  The  tccccd  b  to  forge 
23  effective  approach  to  mAanatiragy  raodd  6b  data. 

The  ccocfoct  bacatioo  cjtb  of  exercises  al  6e  National  Taisia; 
Coat  (NTC)  caa  provide  mors  trajectories  cf  sfaubr  large-scale  casts 
scesanas.  than  aey  ocher  teem.  Tlac  appear  to  be  at  most  abora  (oca 
major  calories  cf  exercises.  e.p.  Bbe  defender  or  stacker  during  cighT  or 
tr,. 

However.  typical  of  exercises.  whose  purpose  a  to  taia  aad  cot 
occssarily  to  provide  dsa  serving  analyses.  6b  daa  b  qste  "<£riy"  fl3| 
Some  problems  specific  to  cxercbes  woold  not  occur  6  ratsal  combat;  e.g, 
c=lsp5e  laser-targeting  does  not  always  doeraue  tills.  Tbc  present 
MILES  syccja  (Multiple  taepxed  Laser  Engagement  System)  docs  not 
great  for  range-dependence  of  probability  of  acquisirioe.  in  addition  to 
rat  mraaccraaxly  representing  ranges  of  some  weapons  systems.  Themis, 
a  tremendous  amoral  of  cony  Linds  of  dara.  tr.vhne.  derived  as  well  as 
derived  from  ban 33  observers  fa  6e  form  of  “take-bcenc  pxaci- 
ages,’  114.15)  Thb  H  a  general  dara-fiasco  problem  mtixh  ia  itself  ts  a  for¬ 
midable  task  Cat  will  require  many  more  years  of  investigation  in  many 
loads  of  sytusns. 

The  above  b  not  meant  10  be  rococstructive  crincisen  of  exercises  at 
NIC  Quite  6c  coturary.  while  respecting  6c  seascivity  of  61s  data, 
objective  analyses  for  61s  pro/ci  teqaac  a  complete  enderjundmg  of  these 
problems. 

3.  Moikemsiiccl  Modeling 

Has  brings  us  to  6e  next  issue.  What  is  a  "reasonable”  nu6ecuti- 
cal  modeling  approach? 

I  believe  it  reasonable  10  at  least  tentttively  axejx  the  experience  of 
many  commanders,  whose  intuitions  have  developed  to  think  in  terms  of 
Eq  (1)  Then.  6e  problem  seems  to  be  that  the  degree  of  their  quarwitttfve. 
not  qualitative,  insights  is  insalEcknt  to  detail  many  combat  scenarios. 
Thb  then  becomes  6c  jcb  of  analysis,  and  explieaks  the  purpose  as  well  as 
the  analytic  task  of  ma6ematically  modeling  combat  data.  Ix..  a  good 
mathematical  model  irnst  fit  6edaa.  and  also  be  usefd  as  a  decision-aid  to 
the  commander  and  decision-maker. 

Therefore,  we  can  approxh  6b  problem  by  consxfenng  Eq  (lj  as 
some  kind  of  zeroth  order  approximation  10  reality. 

In  the  late  1970‘s.  ma6emaucal  physicists  discovered  that  they  could 
develop  statistical  mechanical  theories  from  algebraic  functional  forms 

r  aJ'(rJ>Y2,iUr£)r\i 

bnfi(b/WLii{b/)r\i  (2) 

where  the  £ 's  and  f*s  arc  general  nonlinear  algetrax  functions  of  the  vari¬ 
ables  r  and  b  (16-21).  The  /  *s  are  referred  to  as  the  (deterministic)  drifts. 


33d6csijascf6£f,<2ratrbttde6e6f?ggina(£sts3t^).  Irto. 
6esafis6aiceribacigcaabedrve55pBdferagycaabercfii3g^fito;aot 
plt*c  Tkq'sasseausrftbaKas-J^d^aKe.  Tfcexadssaaa 
of  6c  fi.  C2uaj  “cdpuatie"  ascse.  raxa3y  las  lea  show  to  wry 
wt2  exhtusaebagy  aad  \kjvciSrf  ac6d  c6xr  fcras  of  scssc.  eg,  shot 
cobc.  cxiersi  nose,  dckctocac  aobc  (22-24).  Atflafe.ccaMy6e 
pepper  aKfecw  cC  BK^fiatne  Kb*,  esnj  pxasccs  (t  to  data  so 
sateafiaSy  ■add  geacral  sccas  cf  acfce.  isprafaafcic  to  iqwpcr 
ixrasaoooecKfesxncfaeycobe^ 

TheahSeyiocdi)demaayt3eafetoibof<i'axsa**fiea3ggcey**  so 
be  dmrSapcd.  c^.  so  have  sms  of  (r»  nrabSes  (aad  6ar  rxc  egsaeiccs) 
aacaey  jpA  pceas.  thereby  yaaitia;  6c  expfaotiaa  rf  ^atid^sspooS 
pc=3  a  r  aad  b  variables.  Thb  pres  6e  porsatxEqrcf  c=z*c=a6-23y 
ood^g6sd)s»5aci23sacticesacaass»brpeiaraa. 

<4.  Sxppcrtfi*  proa*  nslmneai  nx!r£rj  cppr&zdk 

These  newcctbods  of  «cc5aearsaebasaiHcdb2sfc»oetytsccady 
have  been  apgSed  to  cocpfcx  bryc-scaic  pfcypczl  probiemt.  drmocsgacag 
6g  cspocal  data  caa  be  described  by  6c  esc  cf  t3>=sea^ebt±cfancticcjl 
forms.  Sect  css  was  gaard  for  h^gcjcaSc  sygests  ia  aecsoseieaee;  ia  a 
senes  of  pipers  to  nasal  mechanics  of  ceococtieal  iamrooat 
(SMNJ)  J25- 5<^.  end  n  cceieg  physics  P7-40).  I  bf*e  proposed  621  these 
snedods  Ic  tsed  5x  profckms  fa  (22.  H4 1.42L 

Ties,  oo»  *c  caa  favestip^  vacioos  choices  of/ *s  aad  g*s  to  sec  if 
alggbcfafcctiocalfcess  dose  a>  the  Laachesar  farms  caa  aasaBy  fit  6c 
dux  Ia  physics, 6bb 6c stadsal pbeacmeacfcpcaJ appreach  to  tSscov- 
afag  aad  oeo&sj  knowledge  aad  eopcieal  dara.  ic.  firing  algcfcox 
fenxtal  (eras  which  lend  thesasehts  to  ptysbal  mspmm  Thb 
gives  ore  rccSdenre  when  eoapoio;  10  new  scenarios,  nardy  6c 
bine  fa  balds;  confidence  fa  coeahzl  compcKr-models. 

The  efiltfy  of  these  algebraic  fcxtiocal  forms  fa  Eq.  (2)  goes  fgnber 
beycod 6cbbdsg able  10 fit sesefdao.  There b an  eqcrnacn represen- 
tau»  to  Eq.  (2),  called  a  “pa6fa6^al*r  repcescaatioo  for  the  Iccg-time 
prohafcdiy  ttseibctico  of  6e  vanaiics.  Thbpa6-fakgralreprcsematioab 
driven  by  a  •"Lagraepao.”  which  caa  be  6oo^t*  of  as  a  dynastic  algebraic 
"cost**  fcacun.  Thepxh-fa^gral  possesses  a  varotxxal  principle,  which 
means  62:  sivplc  &tpks  of  6c  algebraic  cofl-fextico  gb«  a  comet  «fa- 
thc  view  of  Ae  most  likely  sra^s  of  the  vmables.  aad  of  their  vruace*. 
Like  a  ball  bounefa;  aboct  a  terrain  of  hills  aad  valleys,  one  caa  quickly 
vitalize  tbeaasuc  of  dytaancaHy  enfolding  r  aaJ  &  states. 

Especogy  because  we  are  trying  to  mathematically  model  ^arse  aad 
poor  dea.  dd facet  drift  aad  diffusion  algebraic  fcacticro  caa  pve  approxi¬ 
mately  the  same  algebraic  cost-feactkm  when  C6eg  short-time  probability 
dbtiibcooos  to  data.  The  calculation  of  locg-ume  dutiibutions  permits  a 
clear  choice  of  the  best  algebraic  fuacoocs.  tc^  those  which  bca  follow  the 
dara  throegh’a  predetermined  epoch  cf  basic.  Thus,  dynamic  physical 
occstiibrns,  beyood  simple  "line”  and  "area"  firing  terms,  can  be 
identified.  Afterwards,  if  there  are  closely  competitive  algebraic  functions, 
these  insights  can  be  more  precisely  assessed  by  calculating  higher  aJgc 
braic  correlaiion  fractions  from  the  probability  distribution. 

It  mcr  be  clearly  stated  that,  like  any  o6er  theory  applied  to  a  ccra* 
plex  system,  these  methods  have  their  limitations,  aod  they  are  not  a  pana¬ 
cea  for  all  systems.  For  example,  probability  theory  itself  ts  not  a  complete 
description  when  applied  to  categories  of  subjective  “possibilities”  of 
inferroation  [43.44).'  Other  non-stochastic  methods  are  likely  appropriate 
for  determmag  o6er  types  of  causa*  relationships.  e.g,  the  importance  of 
recorvausance  to  success  cf  missions  (15).  1  feel  that  these  statistical 
mechanical  methods  are  appropriate  for  comparing  these  sochasuc  large- 
scale  combat  JaNUS  and  NFC  systems,  the  details  of  our  studies  will  help 
to  determine  the  correctness  of  this  pro-use. 

5  AJ  versus  physics 

It  is  useful  to  contrast  6i$  approach  of  mathematically  and  physically 
modeling  data  to  6ai  of  artificial  imelhgence  (A!)  Actually,  the  two 
approaches  should  be  viewed  as  complementary.  Given  a  codified 
knowledge  base  of  a  large  syswa.  A!  techniques  can  effectively  manage 
this  knowledge.  In  contrast,  these  physics  techniques  seek  to  discover 
knowledge  embedded  in  6e  dita.  Without  having  6 is  knowledge  first 
extracted,  Af  tools  are  typically  poor  at  managing  dau  to  extrapolate  to  new 
scenarios.  However,  once  these  statistical  physics  techniques  formulate  and 
algebraically  fractionalize  the  knowledge,  AI  techniques  can* be  very 
beneficial  10  create  heuristics  basal  on  the  probabilistic  mathematical 
models,  to  enhance  the  efficiency  of  data  retrieval 
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6.  Cenex:  xxee  cfccSaSssaa 

RececJy.  r*o  mricr  cxxopaa  calcs  hare  beta  derebped.  wiife  *r 
l^ttfcfeaerffe»iyt3^io«^«tt^BoidcttriatAa. 

Tie  fes  cods  fa  iSoeHae  ftsfaiw  to  gaial 

<fya  cc?f  3  fcyfetTf  nf  fee  bsMbL  CPT  SiOC 

Upts.  USiSC.  wfc2e  he  ns  cy  thesis st*ia»  2t  NPS.  ad  I  dcr doped 
c^totatKtggcnKOTfcgcia^rfagac^astofassaeyiaciageg. 

tsarinas  CTeficiegtt  of p^pmcals  of  variables  acciisrys- 
te=s  as  Eq.  (2) (45.46J.  Hsco&ns  sodded  after  other  xaabods  rf 
yHrbird  zrafaSy  {47j  aadfostgaObted  aaaeaScg  £4$^ 

Aa  aJgorifeq  of  vcy  test  ssebsed  rc-aaaralec  has  been  dotfcped 
p  fit  a  central  to  a  theoretical  coa  fgictSoocwr  a  P-disaaasiceai 

psaacar  9ee(9L  The  araraTcg  sebeiefc  for  fee  Tcaperaccre*  7} 
decease  ayaraaJy  n  fens  i.  It,  No  ngxxxs 

proofs  fcrve  baa  gyves.  It  is  expected  feat  fee  cfrvxxs  azZcf  of  this  algo- 
rifea  wE  oonoa  sob  proofs.  However,  aexal  £a  to  data  are  a  feie 
pram,  cacfua  oca  ocly  keisa  peto  to  alpribas  feat  olmoosfjr  fit 
cry  dosses  cf  data  «  bycnx  Heuristic  a^paeac  hare  beta  prvra 
bar  feat  fees  a?jcrifea  is  laser  duo  fee  fast  Caxby  saeaEeg  (iS).  where 
7j«r0y.asd  mad  Cits^  data  Boitzoaaoaoocalaag  [47J.  where  7>7Viir. 

Tie  secocd  code  (fcvdops  fee  kef-ease  profczNSty  dbyibctkn  fhxa 
fee  Lyeagaa  ficed  by  fee  fiat  code.  CDR  Jobs  Ccc»ril  a=d  LCDS 
Chafe*  Yost.  USX.  »b3e  they  wore  Cy  feeds  stdena  at  NPS,  and  I 
developed  a  Caochy^ma  Moca  Carlo  code  fora  one- variable  Upa>- 
£33  1501.  RcceoJy.  1  have  developed  a  nahi-varablc  Cauchy -driven 
Moatg  Carlo  code  for  rtooSaearmclavariac  problems. 

A  more  robust  2ad  accurate  histogram  pafe- integral  algorifea  to  cal- 
cefote  fee  loeg-time  probability  disribetien  has  been  developed  by  other, 
researchers  to  hanSe  coclbear  Lagraapaas  151-53J.  aad  feey  2re  prosody 
wtxkmg  to  creme  a  code  to  process  several  variabfes.  Tbe  Mccte^ario 
code  we  developed  caa  handle  cany  variables,  bet  docs  not  seta  as  accu¬ 
rate  as  their*  for  similar  times  of  compeer  processing  for  oee  variable. 
However.  fee  Mocte  Carlo  code  is  faster  for  cany  variables.  aad  does  not 
fc2vc  fc-jh  memory  ropjjoncms  as  does  fee  ofeer  code.  Therefore,  it  codd 
be  used  oo  a  PC  e^.  oo  fee  battlefield  to  help  predict  irpcooiog  scenarios. 
a6er  fee  commander  has  cade  a  jadgeoeax  as  to  what  kind  cf  scenario 
(equivalent  to  choosing  a  petficcd  Lagmsgjan)  is  enfolding  {42  J. 

For  this  first  study. we  propose  developing  fee  histogram  algorithms 
for  t»t>,or  joor  sari fete.  For  this  project.  Dr.  Wehner  has  developed  a 
uodi^rnsiasal  algorithm.  capable  of  handling  complex  boundary  coedi- 
tioat.  We  hope  to  extend  these  methods  to  higher  dinensfocal  spaces. 

IIL  TECHNICAL  BACKGROUND; 

JANUSflL)  PROTOTYPE  MATHEMATICAL  MODEL 

To  liberate  some  of  fee  issues.  consider  a  conventional  combat 
scenario,  e.g.,  of  ibe  kad  we  have  raafeematically  modeled  using 
JANUS",)  siroubrioo  data. 

There  are  variables,  spy  jl-diroensions.  and  parameters  that  mas:  be 
processed  by  sofe^cafeuhriertt.  Typically  people  have  considered  only  a 
few  variables,  e.&Tons  or  two.  in  ore  or  two  dimensions,  wife  several 
parameters;  or.  they  havecocaidered  limiting  cases  of  huge/bfioite  number 
of  variabJes/dcnensions.  These  problems  require  breaking  new  ground  into 
the  nonlinear  nonequilibrium  stochastic  realm  of  10.20  or  30  dynamic  van* 
aNes.  I  believe  this  number  is  barely  large  enough  to  give  reliable 
analysis/aids  to  decision  makers,  yet  barely  small  enough  to  be  able  to  pro¬ 
cess  good  scientific  calculations.  Wc  must  avoid  handling  too  many 'vari¬ 
ables  vhfeh  leads  quickly  to  dau  overload  of  machines  as  well  of  humans, 
and  wc  must  avoid  doit,;  too  simplistic  modeling  which  is  at  best  unreliable 
Tor  complex  systems. 

First  consider  a  -rim pic  example,  one  that  we  have  fit  using 
JANUS (l)  daa.  We  aggregate  the  ume-dependent  attrition  of  Red  and 
Blue  forces,  sorting  in  an  iiuual  simple  configuration,  on  a  fiat  terrain.  (See 

F&2.) 


"The  cocspofitica  cf  fee  scenario  is  as  foCowc 
Bhx  Fonc  (Ihfeksc) 

3usk(dczd 

eaAtetfcctcttysdofc 

12M5QA3aaks  > 

4MS01  ttbefcaoosdTOW 
tod!  force  48 

-pcjvcp-  parancarr:  toe  to  defibdc  ■  IS  sec 
Red  Force  (Ogace) 

3  task  forces 

^  •  cad:  task  force  composed  oC 

c'  '  30 772  tacks 

9  BM?  mfimy  figtrisg  vtbade  wife  mcested  30caa  pan 
total  force  J!7 

No  “heeakpoim**  was  modeled:  ie.  forces  csgaged  cstil  ccc  was  coo- 
pfctdy  amaeTayd.  The  Conflict  Simulation  Ccacr  of  fee  UC  Lawrence 
Liv'd aoe  National  Lab  provided  cs  wife  20  trajectories  of  feis,lcexario. 
spztiaHy  aggregated  over  fee  ectirc  terrain,  each  cf  abool  12sia=tcsd=ra- 
tioei.  wife  dau  provided  aboct  every  balf-mocr.  (SeeFij-l) 


Figure  2 

Initial  Cowfigo  ratio*  of  Red  and  Blue  Forces 
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Attririoa  of  Red  aadShw  Forces — 2#*«des 
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Cccrider  the  scenario  mapped  oat  in  lime  and  in  the  two  spdul 
dimensions,  »t ere  Ae  spatial  dimensions  are  coarsely  pained  into  a  three 
by  three  grid  of  cells.  e,p.  libeled  tom  (1.1)  through  (3.3).  (See  Fig.  4.) 
Consider  that  Bfae  forces  have  strategically  set  themselves  into  a  defensive 
posture  oo  the  West  German  border  at  some  site,  here  to  be  located  in  the 
middle  left  column  cell.  Consider  Red  forces  have  strategically  set  them¬ 
selves  in»  an  offensive  posture  oo  the  East  German  border,  here  located 
throughout  the  right  column  cf  three  cells.  Consider  that  all  microscopic 
stochastic  algorithms  defining  coco  person's  and  marine's  interactions  at 
given  disunces  and  velocities  have  already  been  programmed  iruo  the 
simulation. 


Figure  4 

Conventional  Red  Versus  Blue  Scenario 


R 

B 

R 

R 

There  will  be  long  ranged  interactions,  e.g,  via  artillery,  as  well  as 
short-ranged  ground  interactions.  Each  cell  defines  an  independent  set  of 
Bloc  and  Red  stochastic  mesoscopic  varuolcs.  Eg,  in  cell  (23)  Acre  may 
be  two  kinds  of  Blue  forces/weapons,  etc, Interacting  with  the  other  Blue 
and  Red  variables  at  all  cells. 

To  appreciate  the  magnitude  of  the  problem  being  presented,  consider 
a  relative!^  simple  mathematical  model  of  Blue  and  Red  each  possessing 
only  one  type  of  force/weapon.  Further  simplify  the  problem  by  consider¬ 
ing  that  the  rate  of  change  of  each  variable  in  each  cell  is  driven  by  ame- 
independent  algebraic  functions:  a  drift-force  with  terms  proportional  to 


Red  aetririoo.  sad  terms  proportional  to  Red  a=riuon  multiplied  by  Bloc 
asridac:  a  mohyicatirg  noesc  lenn  composed  of  a  constant  backgrtwod. 
a=d  terms  propertied  w  Red  or  Bloc  aoririoro  Lc_  cocsiic.-  foar  bcra<ell 
parameters  per  Blue  and  Red  variable  per  celL  In  addition,  for  simpoegy. 
consider  only  nearest -neighbor  (NN)  iracractioos  between  ccHs.  cffcccd  by 
adding  liacar  lenas  terms  b  each  drift  prcporricaaS  to  Red  and  Bloe  attri¬ 
tion.  Thus  cacti  NN  requires  an  additional  4  parameters  per  cell  Le,e*d> 
cxrxt  cell  h»2  NX.  Ac  middle  ccg  has  4NN.  the  others  fcjve  3  NN  ach. 
Then  this  defines  a  16%-2asatskxul  parameter-space  of  coefficients  a  a 
saAeeratkal  nxxJd-Lagrangian  defined  by  as  lfc-disetriocal  variable- 
space  a  two  spacji^acopom,  to  be  fit  by  a  maxtraam-lakfEhood  alge¬ 
braic  fraction  of  tic  sbert-time  probabilny  (fiszribotioo  of  the  variates  io 
combat  sisslrxz.  <*■**  Cf  course.  for  w^B-knowa  scenarios,  ictmtioa 
gytv <i  by  working  with  eapens  in  combat  analysis  will  greatly  reduce  the 
cumber  of  meaningful  parameters  to  be  considered. 

The  cdk  serve  io  aggregate  Ac  appropriate  mesoscopic  variables, 
hero  to  be  considered  as  Ac  spaual -temporal  auririon  of  Blue  and  Red  units 
rising  Ac  course  cf  A-.haaJe.  This  then  describes  a  classic  partexn- 
rccognrioa  problem,  to  describe  the  spatial- temporal  evolcfioa  of  these 
variab! es. 


OU1: 


RaA 

Irera-Ceil 

IrrerCcH 

gj  w 

**$>  i+)*s,bir  i4*  - 

+x*!br*xf'‘r2 

C3) 


CM2: 


Rate 

Imra-CeJI 

iraer-Cell 

r'2« 

4pz>>isfirx,*r-’ i-,«'’rjn'r. 

*4p*x!?  i 

f»2" 

+xi]b\*x!’ri 

(4) 

red  tetriuoo,  number  of  casualties  in  cell  1.2 
bij:  blue  3rtrition.msnber.of  casualties  in  cell  1,2 
ijig;  cnccructy.  white  noise  in  cell  1,2 
tj'ijp  uncertainly,  multiplicative  noise  in  cell  12 
x.y.z.z':  parameters  A  be  fit  a  data 

z  i ,2* terms:  attrition  due  to  direct  “fine”  firing 
y  i^-tcrms:  attrition  due  A  “area”  firing 
H3*z'i3-taras:ancaU2tay  in  physics  and  C3  information 
Note  that,  in  general,  Aex’s,  y's  and  r ’s  may  be  tone-dependent.  but  in 
this  first  set  of  stodies.  they  are  taken  as  constants.  Although  Ab  statistical 
mechanics  approach  can  process  Ab  time-dependence,  it  greaily  adds  to  the 
resource*  necessary  a  fit  Ae  data. 

The  z'  terms  include  Ae  interesting  physical  mechanism,  describing 
the  uncertainty  in  attrition  during  each  short  interval  of  lime  as  being  pro- 
poruonal  A  the  total  force  at  Ae  beginning  of  the  interval.  This  effectively 
introduces  a  highly  nonlinear  log-normal  behavior,  but  presents  no  addi¬ 
tional  problems  for  our  quite  general  calculational  procedures. 

To  (ee  Ae  utility  of  using  Ae  Lagrangtan.  consider  just  simple  addi¬ 
tive  noise; - 

r  *>xib+yLbr*},'r\, 
b  °xtr*yXrb*i*iU 

r^VRi  ,b°£Q*B,  (5) 

•  / 

where  the  z’s  and  O’s  are  constants,  and  where  AcR  s  and  B  s  represent 
specific  aggregates  of  units  cr  weapons  systems.  We  do  not  arbitrarily 
assign  weapons  effectiveness  index/weapons  unit  value  (WE1/WUV)  to 
systems. 

The  Lagrangian  provides  a  dynamic  algebraic  cost  function 
mathematically  equivalent  A  Ae  above  rate  cquatxm  If  we  assume  Aat 
Ac  noise  n,  « imcorrelaied  w:A  the  noise  rj>,Aen 


545 


,  (r-xib-yl.br? .  (b-xfr-yirb? 

3J7Z  r  22” 

r  «  Ar/Af  ,  Ar  ■rr(f*<4r)-r(0 

£  -AA/AZ  .  i*  «6(r+dr)-M0  (6) 

la  terms  cfL.  the  probability/*  of  obumicg  a  change  in  r  and  6  daring  Ar 
is 

F «  (2x4r)-,(^z*)-wfcxp(-iAf)  (7) 

Nonlinear  multiplicative  noise  induces  a  Ricnannian  gccocay  ra  the  space 
c*f  variables,  and  more  care  needs  10  be  ukra  in  ddining  the  Lagraegiax 
The  ideal  size  of  Ax  can  be  derived  from  the  Lajrjcgon  {51.52J. 

We  hare  fit  the  (datively  simple  JANUS(L)  tank  scenario  described 
above  (ibex's)  using  the one<ell  aggregation  mathematical  model  of  Eqs. 
(5)  2nd  (6)-  We  found  that  the  simple  form  of  Eq.  (5)  jives  a  lower  alge¬ 
braic  cQst-fuactioo  than  algebraic  cost-fmcnoos  involving  more  cocnpli- 
caied  forms  for  the  dnfts.  defined  in  Eq.  (2).  c.g,  Padd  approximates  of 
'  ratios  of  polynomials  of  r  and  b,  or  those  involving  multiplicative  noise. 
e_g^  inclixheg  the  z'  terms  in  Eqs.  (3)  and  (4).  We  know  of  no  other  studies 
that  base  compared  such  nonlinear  stochastic  mechanisms.  In  ficure  saj- 
<&s  the  0*.  the  weights  given  10  different  units  or  weapons  systems,  will  be 
fit  synuhaneoesJy  with  the  2 's. 

Given  this  form  for  L.  we  use  the  path-integral  to  calculate  the  long¬ 
time  disribotioa  of  variables  r  and  b  at  time  t.  given  values  of  r  and  &  at 
timer®.  To  compact  the  notation.  is  is  useful  to  esc  Af  »  {rj>}  as  a  vector 
cf  these  variables.  Also  for  compactness,  the  boundary  conditions 
confining  the  possible  values  of  r  and  b  are  omiued. 

PIM ,  !A/,>  J  *  •  ■  J  dSt.^dSf,.^  -  •  ■  <LM,^ 

xP{Af,  1  IA/,-ivIx  -  ■  F  [A/,.^1  IMJ 

m  1M>J— J*W  exp(-  £az/,) 

DAf*\2mn®Ar)*wj“|  (Spn,  Ar  r^dAf, 


dSl*dr  db 


(8) 

This  is  otmorily  impossible  to  calculate  in  closed  form,  and  we  therefore 
must  use  numeneal  methods.  For  simplicity  ot  presentation  here.  Eq  (8)  is 
written  in  a  “prepoint  discretization.”  which  disguises  more  complex  alge¬ 
bra  arising  from  a  Riemannian  geometry  induced  by  noncon.stant  multipb- 
cative  noise  (20,41). 

It  must  be  emphasized  that  the  output  need  not  be  confined  to  com¬ 
plex  algebraic  forms  or  tables  of  numbers.  Because  L  possesses  a  varia¬ 
tional  principle,  sets  of  contour  graphs,  at  different  long-time  epochs  of  the 
path-integral  of  F  over  itsr  and  b  variables  at  all  intermediate  limes,  give  a 
visually  intuitive  and  accurate  decision-aid  to  view  the  dynamic  evolution 
of  the  scenario.  (See  Fig,  5.) 

After  L  has  been  ft  to  data,  Le..  using  our  method  of  very  fast  simu¬ 
lated  re-anneabng,  Eqs.  (4)  and  (5)  can  be  immediately  presented  to  inter- 
fjee  with 'anal)  sts  more  familiar  with  this  I-jncbester  like  mathematical 
representation  of  the  physical  system.  It  is  also  possible  to  devise  an  objec¬ 
tive  “measure  of  fit”  of  the  best-candidate  theoretical  probability  distribu¬ 
tion.  Fr,  to  the  empirical  distribution.  Pf.of  data  from  the  system  (JAjYUS 
or  NTC).  For  example,  the  "information”  or  “entropy”  difference  might 
be  measured  as 

lrr=jpTMPTIP‘)  <5>) 

where  the  integral  goes  over  the  space  of  the  variables. 


Figure  5 

•V  Decision-Aid 

The  horizontal  axes  represent  Red  and  Blue  forces  at  ooe  time  slice, 
nine  mmutesaso  the  tank  battle.  The  vertical  axis  represents  the  long-time 
profcahiltfy  o{  finding  values  of  these  forces.  The  Lagrangian  used  10  61  the 
daa  represents  a  Lanchestcr  drift  with  additive  nose.  In  general,  the  proba- 
Wuy  will  be  a  highly  nonlinear  algebraic  function,  and  there  will  be  mtdti- 
plc  peaks  and  valleys.  For  clarity  of  presentation,  all  points  whose  proba¬ 
bility  is  kss  than  half  maximum  have  been  set  to  zero. 


IV.  GENERAL  PLAN  OF  ATTACK 

1.  Establish  variables  and parameters  for  mathematical  modeling 

x  The  existing  NTC  attrition  delineates  the  variables  and  rough 
ranges  of  parameter  values  for  some  classes  of  possible  mathematical 
models.  Ix,  we  arc  fitting  Lanchestcx-like  coefficients  in  short-lime  proba¬ 
bility  distributions  to  the  data. 

b.  Other  computer  codes  are  cafculatmg  the  long-time  probability 
distribution  of  the  underlying  variables.  e.g-  MOFs. 

c  &  d.  Steps  la  and  2b  above  are  similarly  performed  for  the  data 
obtamed  from  scenarios  on  JANUS  (T)  wfucb  at  least  contain  the  NTC  ter¬ 
rain  and  similar  exercises. 

2.  Qualify  NIC  database 

Specifically,  “unqualified"  NTC  data  means  that  the  data  has  not  yet 
been  made  consistent  with  the  uke-home  packages.  Total  kills  in  the  take- 
home  packages  arc  typically  a  factor  of  2  to  4  higher  than  those  recorded  on 
magnetic  tape,  due  to  influences  of  the  controllers,  etc.  Missing  movement 
orders  of  some  units  have  not  been  reasonably  filled  in  (e.g.,  only  -  1/3  of 
units  seem  to  be  tracked)  Resurrections  and  fratricides  have  not  been 
addressed,  with  respect  to  how  they  should  affect  JANUS  play,  etc. 

x  The  NTC  database  for  particular  missions  are  being  qualified 
Computer  codes  have  been  developed  to  facilitate  this  qualification'  This 
requires  using  the  information  in  “take-home  packages,  written  sum¬ 
maries  of  missions  to  qualify  the  data  recorded  on  magnetic  tape.  All 
qualified  datj  is  inserted  into  an  INGRES  database,  to  faal.tate  the  transfer 
of  data,  e-g.,  initial  force  structures  and  movement  orders,  directly  into 
JANUSfT). 

b.  Driven  by  the  requirements  of  I  above  and  3  below,  the  archived 
database  gleaned  in  (a)  is  qualified  to  facilitate  both  mathematical  modeling 
of  aggregate  data  and  construction  of  JANUSfQ  scenarios  similar  t>  NTC 
exercises, 
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3.  Consin&ion  of  computer-model  scenarios 

Using  NTC  terrain  and  ihc  database  gained  in  2  above,  computer- 
mode!  scenarios  are  coostrucied  on  JAM!S(T). '  In  order  to  do  this  a  PH 
algorism  for  NIC  is  being  developed,  for  all  combinations  of  targets  and 
shooters,  static  and  moving.  Also.  PK’s  consistent  with  those  at  NIC. 
using  the  MILES  recording  devices,  are  put  into  the  JANUS  (T)  database. 

4.  Baseline  NTC  and  JAXUSfl) 

Steps  la  through  Id  win  be  iterated,  using  data  obtained  from  steps  2 
aai  3.  The  o bjxts*c  is  to  determine  which  physical  input  parameters  of 
JANUSCO  Ekely  need  to  be  modified,  in  order  that  essentially  suaicr 
dynanuc  mafliematical  models  can  be  obtained  from  both  the  NTC  database 
and  the  arnica  and  and  force  data  output  from  the  compotcr-mof-ei.  A 
computer-model  scenario  will  be  constructed  that  will  reasonably  statisti¬ 
cally  conform  to  the  NTC  exercises,  e.g^  to  give  the  same  total  kills  at  the 
end  of  the  battle- 

5.  Compare  NTC  and  JANUSCO 

Has  process  should  serve  at  least  two  purposes.  We  will  fcara  to 
what  degree  existing  computer-models  have  to  be  modified  b  conform  to 
exerdse-reabty.  Also,  quantitative  insights  may  be  gained  m  bow  to 
Improve  the  data-colleccoo  process  at  NTC  cxercrscs. 


Figure  6 

Mathematical-Model  Con. pa  risen  Process 


V.  QUALIFICATION  OF  NTC  DATA  &  JANUS  SCENARIOS 

This  section  is  a  summary  of  just  a  few  issues  to  date,  that  we  have 
considered  with  respect  to  die  qualification  of  NTC  data  and  the  construc¬ 
tion  af  JANUS  scenarios.  Because  the  NTC  program  is  highly  sensitive,  we 
do  not  plan  on  releasing  our  results  piece-meal,  but  rather  we  wall  wait  until 
the  completed  report  is  finished. 

We  immediately  face  a  potential  competition  between  two  scientific 
issues  in  our  project 

(a)  If  we  tweak  JANUS  to  an  arbitrary  degree  just  to  fit  selected  NTC 
data,  then  we  nsk  destroying  the  good  Physics  in  JANUS,  perhaps  its  pri¬ 
mary  asset,  justto  fit  this  selected  data  Then,  the  resulting  computer-model 
cannot  be  misted  to  be  extrapolated  to  missions  not  included  in  the  original 


(b)  However,  if  we  don’t  change  JANUS  to  at  leas:  include 
fcamres/data  present  at  NFC.' albeit  not  present  in  today’s  view  ..of  actual 
com  tab  then  we  are  not  giving  JANUS  a  ’’fair  chance,"  and  aho  we  are 
not  taking  advantage  of  perhaps  the  sole  scarce  of  existing  exercise  daa 
that  contains  (somewhat)  sitnibr  replicauons— whkh  is  essential  for 
comp3ring/modelmg  stochastic  systems. 

The  issue  probably  is  one  of  degree.  We  all  seem  to  agree  that 
present  JANUS  PK’s  should  be  chang'd  in  ocr  saxly  to  the  MILES  PK’s. 
But  what  about  PH’s  and  acquisition  algorithms?  Although  JANUS  is  not 
confused  about  bow  to  acquire  data,  hew  to  assess  PH’s,  etc.,  our  human 
generalise,  is  very  uncertain  on  how  to  understand,  much  less  model,  these 
•  promises  in  real  humans,  at  NTC  or  in  any  other  complex  real-life  setting. 

While  computer  modelers  must  be  complimented  for  establishing  a 
logically  neat  and  fast  serial  ordering  of  acquisition,  determination  of  priori¬ 
ties.  aim-hit,  kill,  acquire  again,  etix,  most  of  these  modelers  would  be 
among  the  tint  to  admit  that  their  algorithms  do  not  necessarily  completely 
cr  correctly  reflect  human  processing,  (^example,  a  novice  in  any  comba¬ 
tive  discipline  might  be  trained  to  perform  these  processes  in  serial  order, 
but  especially  in  the  heat  of  an  intense  battle  against  multiple  threats,  any 
experienced  combatant  most  certainly  performs  many  of  these  mental- 
physical  processes  in  parallel,  not  just  serially,  and  constrained  at  least  by 
limited  capacity  of  selective  attention,  by  short-term  memory,  and  by  the 
ability  to  paoemize  information. 

Many  computer  model -rs  in  other  academic  disciplines  now  look  to 
neural  nets  or  to  statistical  mechanics  of  neocortical  interactions,  to  better 
understand  how  the  human  brain  most  likely  processes  patterns  of  informa¬ 
tion.  Perhaps  someday,  combat  computer- models  will  incorporate  neural 
nets  and  statistical  mechanical  neural  processors  to  help  model  acquisition, 
but  they  certainly  don’t  cone  close  now. 

Even  given  a  better  acquisition  and  PH  models,  people  at  different 
levels  of  proficiency  will  have  different  acquisition  and  .PH  processes, 
which  are  very  much  environment-dependent.  They  are  not  so  con¬ 
veniently  separated  in  humans,  and  they  are  mixed  differently  in  different 
people. 

To  emphasize  our  lack  of  understanding  of  these  issues,  consider  the 
questions:  Should  soldiers  be  tramed  to  separate  these  mental  processes, 
perhaps  markedly  improving  their  abilities  to  react  quickly,  flexibly  and 
‘’intuitively”  to  multiple  threats?  People  could  be  better  trained  to  handle 
patterns  of  multiple  threats,  but  at  what  cost  xxS  for  how  long  must  they  be 
trained?  Do  we  have  enough  knowledge  to  implement  this  training,  much 
less  to  code  this  knowledge  into  o nr  computer-models? 

I  arguebffer  these  points,  referencing  my  own  published  physics- 
neuroscience  (the  SMNI  scries  above)  and  karate  research  (also  referenced 
above),  as  well  as  my  30  years’  of  experience  in  training  thousands  of 
hand-to-hand  combatants,  many  Waning  intensely  for  several  years.  I'm 
sure  that  there  are  some  other  experts  with  as  much  experience  who  would 
disagree  with  me  on  any  given  point 

The  bottom  line  is  that,  at  NTC  we  undoubtedly  have  quite  a  mix  of 
many  levels  of  training  and  natural  mental-physical  abilities.  These  issues 
are  at  the  heart  of  drfferc.v»*  to  be  expected  between  JANUS  data  and  the 
NTC  data.  We  must  keep  this  perspective  as  we  attempt  to  compare 
JANUS  to  NTC  da«a. 

Our  project  is  to  compare  JANUS  to  NTC  data,  and  to  provide  the 
Army  with  a  ‘’what-if*’  capability  of  JANUS  for  NTC  commanders.  To  do 
this,  we  must  leave  intact  as  much  of  the  algorithmic  guts  of  JANUS  as  pos¬ 
sible,  while  possibly  changing  some  databases  relating  to  physics,  e.g, 
PK’s.  This  focus  is  2n  essential  ingredient  of  oar  project;  We  are  probing 
the  consistency  and  util.ty  of  NTC  data  by  enforcing  the  disciplines  of  con¬ 
structing  a  computer-model  and  a  mathematical  model,  in  the  process  of 
also  comparing  JANUS  data  to  NTC  data 

Still,  we  probably  will  be  forced  to  enter  into  a  grey  area,  m  part 
because  we  must  somehow  qualify  NTC  data  to  the  extent  we  can  construct 
similar  JANUS  scenarios,  and  in  part  because  we  are  tasked  to  prepare 
JANUS  for  "what-if  ’  scenarios  To  do  this,  we  likely  will  have  to  modify 
the  acquisition  and/or  PH  attnbutes  of  JANUS,  to  at  least  come  close  to 
achieving  the  same  lime-dependent  attrition  in  both  systems. 

We  plan  to  change  the  more  physical  PH's  (e.g..  relatively  more 
removed  from  internal  cognitive  processes  than  is  JANUS  acquisition), 
scaling  these  tables  to  at  feast  match  total  kills  tn  JANUS  to  (hose  in  NTC 
take-home  packages.  This  approach  has  thp  advantage  of  simultaneously 
and  consistently  developing  a  PH  algorithm 'for  the  NTC  mission,  while 
qualifying  the  NTC  time-dependent  kill  data.  In  doing  so,  1  am  aware  that 
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some  of  (his  scaling  is  really  "sweeping  under  the  rug'A  ('  ’renormalizing” 
Isa  nicer  technical  term)  otherwise-  necessary  modifications  to  the  JANUS 
acstasiiion  algorithms  which  certainly  don't  precisely  match  acquisition  at 
NTC. 

It  remains  to  be  seen  if  our  approach,  of  mathematical -model  com¬ 
parison  of.  JANUS  data  and  NTC  data,  can  provide  objective  scientific 
proof  that  these  human  factors  can  be  folded  into  a  stochastic  description, 
so  that,  at  least  at  the  level  of  aggregation  at  which  a  commander  views  the 
combat,  a  is  indeed  reasonable  to  state  that  JANUS  data  can  be  favorably 
compared  to  NTC  data.' 

Comparison  versus  Validation 

Many  people  object  to  considering  NTC  exercises  as  representing 
true  combat:  seme  even  object  to  it  bang  considered  true  training.  -Eg, 
what  tactics  does  a  creative  commander  practice/apply  at  NIC  when  a 
TOWs  range  »  artificially  cut  off  within  3  tank's  range?  (Is  proper  train¬ 
ing  for  commanders  only  endorsed  if  only  actual  combat  tactics  are  prac¬ 
ticed?  Are  commanders  trained  to  be  flexible  enough  to  quickly  3dapt  to 
different  weapons*  systems  and  opposing -force  tactics?)  Many  people 
object  to  having  the  worth  of  a  computer-model  judged  against  such  data. 
(Are  our  combat  computer-models  flexible  enough  to  accommodate  dif¬ 
ferent  weapons’  systems  and  tactics?) 

NTC  has  real  people  and  real  machines,  albeit  they  nay  be  so  con¬ 
strained  by  noo-combat  exercise  rules,  some  Red-but-pamted-Blue  equip¬ 
ment,  unrealistic  weapons'  ranges  as  portrayed  by  User  devices,  etc.  Most 
important,  NTC  has  (barely)  enough  similar  replications  of  such  combat¬ 
like  exercises,  that  it  uniquely  can  serve  as  a  source  of  data  to  begin  to  fill 
an  important  g3p:  We  can  no  longer  put  off  at  least  forging  an  approach  to 
compare  computer-models  to  real-life  data  of  seme  sort  This  discipline 
may  simply  point  out  serious  differences  between  the  computer-model  data 
and  the  exercise  data.  Given  the  intense  discussions  these  issues  always 
seem  to  raise.  It  is  clear  that  the  Army  must  be  informed  of  these  discrepan¬ 
cies  if  they  exist. 

VI.  METHOD  OF  SOLUTION  AND  PERSONNEL 

A  collection  of  technical  approaches  and  personnel  are  participating 
in  this  project  Mr.  Hoe  McCoy.  TRAC-MTRY.  is  the  Technical  Director. 
MAJ  Rick  Halek,  AMMO,  is  the  Administrative  Director. 

1.  Mathematical  Modeling 

To  fit  theoretical  parameters  to  empirical  data,  very  fast  simulated 
re-anncaling  computer  codes  arc  used  to  fit  various  trial  Lagrangians  to 
data,  in.,  a  sheet-time  probability  distribution,  determining  the  multivariate 
(deterministic)  drifts  and  diffusions  (fluctuations). 

CPT  Stephen  Upton,  USMC,  at  the  MC  Warfighung  Assessment 
Division,  Quantico.  and  Ms.  Lois  Brunner  of  the  NFS  Mathematics  Depart¬ 
ment  and  C3  Group,  arc  establishing  bounds  on'mission-spec:fic  weights  to 
aggregate  force  units.  We  intend  to  find  the  the  precise  weights  as  port  of 
this  fitting  process. 

To  calculate  long-time  probability  distributions  from  these  fitted 
Shoa  time  distributions,  computer  codes  have  been  developed  to  perform 
the  nonlinear  path-integral  of  the  Lagrangians  derived  above.  This  is  essen¬ 
tially  a  mathematical  intra  model  checking  process,  ensuring  that  the  alge¬ 
braic  functional  forms  fit  above  make  good  physical  sense.  Dr.  Mike 
Wchna  in  Division  B  at  LLNL  has  developed  these  computer  codes. 

2.  Database  qualification 

Mr  Mike  Uztlac,  of  BDM,  at  LLNL,  Conflict  Simulation  Center 
(CSC),  is  providing  qualified  data  to  make  ihis  total  project  possible.  The 
CSC  is  working  closely  with  NPS  personnel  so  that  the  data  is  used 
efficiently  for  bcth  mathematical  modeling  and  for  construction  of 
computer-model  scenarios.  CSC  lias  developed  an  "Analyst  Workstation” 
which  can  serve  to  efficiently  scan  patterns  of  NTC  data  to  qualify  it,  as 
well  as  to  provide  a  "script"  for  JANUS(T)  play  10  replicate  NIC 
scenarios.  They  have  already  done  this  with  a  sample  of  NTC  data. 


3.  Construction  of  JANUS(T)  scenarios 

TRAC-MTRY  is  constructing  a  PH  algorithm  for  NIC  These  per¬ 
sonnel  are  using  the  chosen  NIC  scenarios  to  construct  the  needed 
JANUSfl)  scenarios,  given  the  proper  data  from  part  2  above.  LTC  John 
Miller,  USA,  Chief  TRAC-MTRY  Si  NPS.  is  bang  tasked  for  this  purpose. 
LTC  Vernon  Bettencourt  will  become  Chief  TRAC-MTRY  in  July  1988. 
TRAC-MTRY  has  JANUS(L)  and  JANUS (T)  Key  personnel  at  TRAC- 
MTRY  are  MAJ  Hirome  Fujio,  USA.  and  MAJ  Benue  Galuig.  USA. 

CPT  Mike  Bowman,  USA,  has  joined  this  project  as  my  thesis  stu¬ 
dent.  He  and  MAJ  Fujio  also  have  worked  with  TRAC-WSMR  analysts, 
Mr.  Gary  Flick  and  Mr.  A1  Kellner,  to  develop  a  software  interface 
between  the  NTC  INGRES  database  and  the  JANUS(I)  database. 

I  expea  that  many  more  NPS  students  can  find  interesting  theses  in 
any  of  the  above  three  major  aspects.  This  manpower  will  inevitably  con¬ 
tribute  to  this  project.  For  example,  two  of  my  NPS  M.S.  thesis  students  arc 
directly  addressing  very  current  scenarios  requiring  joint  operand  'LT 
J3ck  Gallagher.  USN.  is  studying  trade-offs  in  using  Navy  Tomahawk  mis¬ 
sile  support  of  Army-Air  Fbrce  air-Jand  scenarios,  versus  using  tactical 
nuclear  weapons.  The  Army  JANUS (T)  computer-model  is  being  modified 
to  study  the  Tomahawk  scenarios,  and  LLNL  JANU$(L)  computer-model, 
baselined  to  the  same  JANUS(T)  scenarios,  is  bang  modified  to  study  the 
tactical  nuclear  scenarios.  LCDR  Roy  Balacoms,  USN.  is  studying  trade¬ 
offs  in  using  Tomahawk  versus  SLAM  support  of  these  air-land  scenarios. 
We  plan  to  use  statistical  mechanics  algorithms,  developed  for  our  NTC 
piojxt.  for  sensitivity  analyses  of  the  data  provided  by  these  combat 
computer-models. 
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„  ABSTRACT 

Results  of  a  research  effort  focusing  on  the  organiza¬ 
tional  and  functional  relationships  that  exist  in  an  Army  Division 
level  command  post  structure  are  presented.  The  study  inte¬ 
grates  the  information  contained  in  five  US  Army  documents, 
and  develops  a  functional  flow  of  the  situation  estimate, and - 
plarrtjg  processes.  An  1DEF  formulation  captures  the  hier- 
arcnica!  nature  of  the  organization  as  well  as  explicit  depend¬ 
encies  between  its  functions  and  tasks.  The  headquarter 
decision  processes  arc  then  modeled  using  Stochastic,  Timed 
Attributed  Pctn  Nets  (STAPN)s  and  the  model  is  implemented 
on  a  Macintosh  computer  using  Micromodeler,  < a  STAPN 
modeling  tool.  Simulations  performed  to  examine  the  sensitivity 
of  the  headquarters'  process  measures  to  automation,  existence 
of  contingency  plans,  and  staffing  flexibilities  are  presented. 
Finally,  these  results  are  analyzed  in  light  of  the  command  post 
structure  and  used  to  propose  some  hypotheses  for  future  testing 
in  headquarters  exercises  or  war  gaming  situations. 


L  INTRODUCTION 

This  paper  describes  a  study  conducted  under  contract 
with  the  Defense  Communications  Agency's  Center  for  Com¬ 
mand,  Control  and  Communications  Systems  under  the  Wartime 
Headquarters  Improvement  Program.  This  program  is  in  its 
second  phase  of  the  development  of  the  Headquarters  Effective¬ 
ness  Assessment  Tool  (HEAT)  HEAT  was  designed  to  enable 
a  team  of  trained  observers  to  objectively  assess  and  quantify 
headquarters  performance  and  effectiveness,  to  report  their 
results  and  diagnosis,  and  to  provide  information  to  DCA  to  help 
them  plan  for  improvements  to  C3  systems  and  equipment  to 
support  future  headquarters  activities. 

The  purpose  of  this  study  was  to  develop  a  prototype 
Petri  net  simulation  of  the  Army  division-level  headquarters  and 
to  examine  its  sensitivities  to  automation,  contingency, planning, 
and  staff  size  and  flexibility.  The  study  began  with  a  visit  to  an 
Amy  command  post  exercise  (Cascade  Peak  IV),  and  continued 
with  a  detailed  analysis  of  available  Amy  training  documents 
(listed  in  References  Section).  That  analysis  produced  an 
organizational  and  functional  decomposition- of  the  Army 
division  command  post  system  and  a  Pctn  net  simulation  of  the 
estimation  and  planning  process  within  the  main  command  post 
Section' 2  of  this  paper  traces  the  research  effort  that  lead  to  that 
simulation.  Section  3  desenbes  the  baseline  and  excursion 
models  and  Section  4  analyzes  the  simulation  findings. 

2.  THE  ARMY  DIVISION  COMMAND  POST  STRUCTURE 
ORGANIZATIONAL  STRUCTURE 

The  Army  division  organizational  structure  is  well 
documented  in  ARTEP  71-100-MTP  (1).  This  structure  starts 


with  the  three  division  command  posts  (DTAC,  DMAIN,  and 
■DREAR).  fThesc  three  command  posts  are  designed  to  support 
the  commander  in  each  of  the  three  areas  of  the  combat 
operations  battlefield,  close,  deep  and  rear  The  close  battle  is 
fought  to  defeat  committed  enemy  forces  The  deep  battle  is 
meant  to  disrupt  or  destroy  enemy  follow-on  forces.  The  rear 
battle  is  fought  to  preserve  one's  own  options  by  protecting 
uncommitted  reserves  and  supply  forces  ~  The  main  command 
post  (CP)  is  the  hub  of  the  division  headquarter  structure,  and 
should  be  capable  of  supporting  the  commander  in  any  of  the 
three  battlefield  areas  at  all  times.  All  intelligence  (G2)  and 
operations  (G3)  tasks  are  also  performed  in  the  mam  CP  When 
the  commander  is  physically  located  at  one  of  the  other  CPs  part 
of  that  support  may  then  reside  in  that  CP.  The  TAC  CP  is  the 
smallest  of  the  three  and  is  designed  primarily  to  support  the 
close  battle.  To  decrease  the  size  of  the  main  CP  much  of  the 
personnel  (Gl)  and  some  of  the  logistics  (G4)  tasks  reside  in  the 
rear  CP.  The  rear  CP  provides  a  place  for  these  dements  to 
perform  many  of  the  supervisory  and  sustaining  tasks  that  arc 
necessary  but  not  critical  to  the  immediate  battle  area. 

PUNCTIONALRELATIONSHIPS 

While  the  ARTEP  contains  a  detailed  description  of  the 
organizational  structure  of  the  Army  command  post  system,  it 
does  not  describe  the  functional  relationships  of  its  cells  and 
elements.  R&D  Associates,  in  support  of  the  Battle  Command 
Training  Program  Office,  conducted  a  functional  analysis  of  the 
division  headquarters  and  reported  their  analysis  m  a  draft 
technical  report  [2]  This  analysis  included  postulated  combat 
functions  for  each  headquarters  clement  (command,  personnel, 
intelligence,  operations  and  logistics)  and  a  decomposition  of 
those  functions  into  their  tasks  and  subtasks,  RDA  also  devel¬ 
oped  a  scries  of  functional  flow  diagrams  which  describe  the 
internal  information  flow  for  the  commander  and  each  of  the 
four  major  staffs  (personnel,  intelligence,  operations  and 
logistics). 

THE  MILITARY  DECISIONMAKING  PROCESS 

Army  Field  Manual  (FM)  101-5  describes  military 
decisionmaking  as  "both  an  art  and  a  science"  [3]  The  com¬ 
mander  must  continually  make  critical  decisions  under  uncertain 
situations^ based  on  incomplete  and  questionable  information 
The  military  decisionmaking  process  is  an  orderly  process  that 
includes  recognizing  the  problem,  gathering  facts  and  making 
assumptions,  developing  possible  solutions,  analyzing  and 
comparing  those  solutions,  and  selecting  the  best  solution  This 
process  (diagramed  in  Figure  1)  begins  with  receipt  of  the 
mission  by  the  commander. 

This  mission  is  usually  assigned  by  a  higher  headquar¬ 
ters,  but  it  may  be  developed  by  the  commander  Based  on  staff 
inputs  about  the  current  situation,  the  commander  then  conducts 
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'Figure  1.  Military  Decisionmaking  Process. 

a  mission  analysis.  This  analysis  results  in  his  identification  of 
the  tasks  to  be  performed,  the  purpose  of  those  tasks  and  the 
constraints  involved.  Often  the  major  constraint  is  time,  so  the 
commander  must  allocate  the  time  that  his  staff  may  use  to 
develop  their  estimates.  As  a  rule,  the  commander  will  allocate 
two  thirds  of  the  available  time  to  his  .subordinate  units  leaving 
one  third  to  his  staff.  If  he  feels  that  ,  time  will  not  allow  a 
complete  estimate  of  the  situation,  the  commander  can  complete 
the  decisionmaking  process  on  his  own  and  issue  verbal  orders 
to  his  subordinate  units  (via  the  path  marked  with  "hote"  beside 
the  arrows  in  Figure  1). 

When  the  commander  completes  his  mission  analysis, 
he  restates  the  mission  and  issues  planning  guidance  to  his  staff. 
The  staff  officers  prepare  their  staff  estimates  and  return  to  the 
commander  with  their  recommended  courses  of  action.  The 
estimate  process  involves  considerable  information  exchange 
among  the  staff  and  will  be  discussed  in  detail. in  a  later 
paragraph.  After  receiving  the  staff  recommendations  the 
commander  completes  his  estimate  of  the  situation  and  decides 
on  a  course  of  action  to  accomplish  the  mission.  He  announces 
his  decision  and  his"  concept,  or  visualization  of  the  entire 
operation,  to  his  staff  and  subordinate  commanders.  The  staff 
; prepares  plans  and  orders  to  implement  that  concept,  and 
presents  them  to  the  commander  for  his  approval.  After 
approval  is  received,  the  staff  issues  the  plans  and  orders  to 
subordinate  units.  The  commander  and  his  staff  continue  to 
receive  feedback  and  to  supervise  the  subordinate  units  as  they 
make  their  plans  and  execute  the  orders.  The  military 
decisionmaking  diagram  is  the  basis  of  the  Petri  net  simulations 
developed  .in' this  study  and  will  be  referenced  frequently 
throughout  this  paper, 

THE  ESTIMATION  PROCESS 

Dunng  the  staff  estimation  process,  staff  officers  collect 
and  analyze  relevant  information  and  develop  the  most  effective 
solution  possible  with  the  time  and  information  available. 
Figure  2  illustrates  the  process  as  defined  by  CGSC  Student 
Text  100*9  {5J. 

The  process  begins  with  the  receipt  of  the  commander's 
mission  statement,  initial  planning  guidance  and  time  analysis. 
Following  the  commander's  mission  analysis  the  G3  staff 
establishes  the  area  of  operations  and  provides  that  information 
to  the  G2  staff  G2  analyzes  the  weather  and  terrain  in  the  area 
of  operations  and  provides  it  to  G3  and  G4.  Each  staff  then 
analyzes  the,  effects  of  weather  and  terrain  on  their  functional 
area,  G2  determines  the  disposition,  composition,  strengths  and 
weaknesses  of  the  enemy  situation  while  G3  analyzes  the  same 
factors  for  the  division’s  own  forces  (own  situation).  The  own 


Figure  2.  Staff  Estimation  Process. 


situation  analysis  relics  on  G4’s  input  of  the  logistic  situation 
(maintenance,  supply,  services,  transportation,  etc.).  After  an 
exchange  of  information  among:the  staffs,- G2  analyzes  the 
enemy  capabilities  and  provides  the  information  to  G3  and  G4. 
At  this  point  G3  enumerates  possible  plans  or  courses  of  action. 
Each  staff  analyzes  these  options  in  light  of  its  functional  area. 
During  this  analysis  G3  wargames  each  course' of  action  and 
identifies  advantages  and  disadvantages  of  each  option.  After  an 
exchange  of  analysis  results,  G3  compares  the  courses  of  action, 
develops  their  recommendation  and  bnefs  the  commander. 

This  section  has  summarized  our  research  of  the  litera¬ 
ture  describing  the  Army  division  command  post  system.  The 
resulting  functional  decomposition  adequately  defines  the  deci¬ 
sionmaking  process  and  information  flow  within  the  main  com¬ 
mand  post.  The  following  section  will  desenbe  the  computer 
models  that  were  developed  based  on  this  decomposition. 


3.  ARMY  DIVISION  COMMAND  POST  MODELS 

The  previous  section  described  the  organization  and 
functional  flow  of  the  Army  division  command  post  structure.  It 
also  described  the  process  by  which  that  organization  reaches 
decisions  and  generates  plans  and  orders  for  subordinate  units. 
This  section  will  describe  the  simulation  techniques  used  to 
model  the  structure  and  procedures  of  the  main  command  post 

IDEF  ALPHA  REPRESENTATION 

The  ARTEP  describes,  in  a  hierarchical  fashion,  the 
organizational  decomposition  of  all  three  Army  division  com¬ 
mand  posts.  Each  CP  is  composed  of  a  number  of  cells  that  are 
organized  along  functional  lines.  For  example  the  plans  cell  is 
responsible  for  generating  future  division  plans  (among  other 
duties)  while  the  current  operations  cell  is  responsible  for  moni¬ 
toring  and  dealing  with  the  current  situation.  Each  cell  ls'com- 
posed  of  various  organizational  elements  such  as  operations, 
intelligence,  and  logistics  While  the  current  operations  cell  is 
predominantly  composed  of  G3,  it,  like  most  cells,  includes 
other  supporting  elements  as  well  As  discussed  in  Section  2, 
each  element  has  functions  to  perform  and  tasks  within  each 
function.  While  the  ARTEP  details  each  task  by  element,  by 
command  post,  it  does  not  contain  a  graphical  representation  of 
this  hierarchy. 

IDEF  ALPHA  is  an  ideal  hierarchical,  graphical  tool  for 
representing  the  Army  division  headquarters  structure,  IDEF 
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ALPHA,  developed  by  ALPHATECH,  Inc.F6),  is  an  Apple 
Macintosh-based  graphical  tool  that  allows  the  user  to  build, 
•save,  modify,' and  print  hierarchically  decomposed  1DEF  dia¬ 
grams  IDEF  (ICAM  Definition)  was  developed  as  a  structured 
approach  for  graphically  relating  manufacturing  tasks  and  func¬ 
tions  for  the  ICAM  (integrated  computer-aided  manufacturing) 
community  The  approach  has  since  been  adapted  for  use  by  the 
C3  community. 

This  study  included  a  complete  categorization  of  the 
Army  division  command  post  structure  into  the  IDEF  format 
using  IDEF  ALPHA.  The  IDEF  representation  decomposed 
each  division  command  post  into  its  cells,  elements,  functions, 
and  tasks  as  defined  in  the  ARTEP  and  expanded  by  the  RDA 
report  Due  to  space  limitations  the  IDEF  formulation  could  not 
be  incorporated  into  this  paper. 

PETRI  NET  REPRESENTATION 

One  ct  the  more  intriguing  bases  for  C3  modeling  is  the 

Invented  inthc  early  1960’s  (by  Pctn)  to  characterize  concurrent 
operations'in  computer  systems  (described  as' networks),  Petri 
nets  have  been  extended  over  the  years  to  capture  almost  all  of 
the  important  aspects  of  large  man/machine  organizations  (such 
as  attnbutes,  timing  relations,  and  stochastic  events)  Their 
greatest  appeal  is  their  conceptual  simplicity.  Also,  quite  natural 
behavioral -variables  accompany  each  simple  element  of  a 
•STAPN.  In  addition,  the  topology  of  a  STAPN  mcdel  auto¬ 
matically  determines  a  number  of  relations  between  these 
variables. 

Micromodclcr 

The  Army  division  headquarters  decisionmaking  process 
was  modeled  using  Micromodclcr,  a  graphical  simulation  tool 
based  on  the  STAPN  technology  discussed  above.  Micromod* 
clcr  was  developed  by  ALPHATECH,  Inc.  as  a  prototype 
modeling  tool  for  the  Air  Force  Foreign  Technology  Division 
[8].  Micromodeler  currently  runs  on  the  Apple  Macintosh 
computer,  but  ALPHATECH  is  developing  its  successor  (C3 
Modeler)  to  run  on  a  Sun  Workstation.  With  Micromodeler,  the 
analyst  can  build  and  reconfigure  models  constructed  from  Petri 
net  elements,  then  run  event  stepped  simulations  based  on  these 
models, 

Micromodeler  uses  the  Petri  net  primitives  (transitions 
and  places)  with  one  addition:  the  box,  A  box  is  a  Petri  net 
element  which  contains  places,  transitions  and  other  boxes 
inside  it.  The  purpose  of  boxes  is  to  hide  detail  and  to  allow 
building  of  models  in  a  top-down,  modular  fashion.  Models  arc 
built  by  drawing  them  on  the  computer  screen  using  icons. 
Micromodeler  translates  these  drawings  into  a  simulation. 
Figure  3  shows  the  screen  layout  of  Micromodeler. 


Figure  3  Micromodeler  Screen  Layout. 


The’ large  rectangular  window- is  called  the  drawing 
window.  This  is  the  portion  of  the  screen  where  the  Petn  net 
simulation  is  drawn  and  later  run;  This  screen  happens  to  be  the 
top-level  screen  of  the  model  used  in  this  study.  The  pictures, 
or  icons,  located  on  the  right-hand  side  of  the  screen  are  the  Pctn 
net  elements  (box,  place  and- transition).  The  small  window 
located  below  these  icons  is  the  title  box.  This  window  contains 
the  name  of  the  current  view  CARTER'  in  Figure  3)  and  can  be 
helpful  in  identifying  the  portion  of  the  model  pictured  and  its 
relationship  to  the  rest  of  the  model.  The  bottom  area  contains 
statistical  data  collected  during  the  simulation  run.  Any  box  in 
the  drawing  window  can  be  exploded  to  reveal  its  contents. 
Figure  4  shows  the  screen  that  results  from  exploding  the  "Army 
Div"  box  in  Figure  3.  Note' that  the  title  of  this  screen,  or  view, 
is  "Army  Div";  thus  tying  it  to  the  previous  screen. 
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Hgure  4.  Exploding  "Army  Div"  Icon. 

Micromodclcr  is  a  unique  tool  for  simulating  the  head¬ 
quarters  process,  but  it  does  have  limitations.  As  the  icons  on 
the  screen  of  Figure  4  indicate,  the  analyst  can  only  connect 
three  inputs  and  three  outputs  to  any  Petri  net  element  (box, 
place  or  transition).  This  limitation  will  be  noted  later  in  the  staff 
sizing  discussion  of  Section  3  of  this  paper  Another  limitation 
is  the  lack  of  muluplc  token  attributes  in  Micromodclcr.  The  use 
of  multiple  attnbutes  would  provide  for  a  much  ncher  simulation 
which  could  include  an  assessment  of  information  quality  or 
content  as  well  as  its  mere  existence.  Efforts  are  currently 
underway  at  ALPHATECH  to  eliminate  these  and  other  limita 
tions  of  Micromodclcr. 

COMMAND  POST  SIMULATIONS 


The  military  decisionmaking  process  (Figure  1)  served 
as  the  basis  of  the  Petn  net  simulations  for  this  study.  Figure  5 
duplicates  the  process  in  the  Micromodeler  format. 


Figure  5.  Petn  Net  Simulation. 

The  STAPN  primitives  behind  each  box  simulate  the 
information  flow  and  tasks  and  subtasks  within  each  box.  The 
content  of  these  boxes  include  all  tasks  discussed  in  Section  2 
and  illustrated  m  the  military  decisionmaking  (Figure  1)  and  staff 
estimation  (Figure  2)'u.agrams.  The  tokens  in  the  system  (not 
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visible  in  Micromodeler  representations)  represent  the  informa- 
tion,  plans  and  orders  flowing  between  the  commander  and  his 
staffs. 

The, baseline  Petri  net  simulation  was  designed  as  a 
-sequential  planning  model.  -In  this  simulation  the  headquarters' 
staff  is  involved  in  developing  a  single  plan  from  the  initial  input 
of  battle  and  intelligence  information  to  the  completion  of  the 
planning  process.  This  is  somewhat  unrealistic  because  actual 
headquarters  staffs  are  continually  monitoring  the  situation  and 
updating  their  estimates  of  the  situation  in  a  process  of  "rolling 
planning".  Sequential;  planning  was  modeled,  however  to 
assure  that  no  resource  contention  was  involved  in  the  baseline 
simulation.  It  also  provided  a  convenient  measure  of  staff 
efficiency  —  planning  time.  Planning  time,  as  measured  by  the 
micro  modeler  simulation,  was  the  complete  cycle  time  of  the 
planning  activity.  Parallel  planning  would  have  prevented  the 
measurement  of  this  baseline  efficiency. 

This  timing  information  resulted  from  the  individual  task 
times  that  are  inputs  to  the  Micromodeler  program;  The  baseline 
limes  used  in  this  Study  were  defined  in  FM  101*5  as  typical 
planning  times  required  for  a  division  staff  to  react  to  a  change  in 
mission  within  an  ongoing  operation.  These  times  arc  shown  in 
Figure  6  in  tabular  form. 


QEEL 

ACTIVITY 

TIME 

ESTIMATE 

Cdr 

Mission  Analysis 

20 

min 

Cdr 

G2 

G2 

G3 

G3 

G2 

Estimate  <?f  Situation  \ 

Characteristics  of  Area 
Enemy  Situation 

Own  Situation 

Relative  Combat  Power 
Enemy  Capabilities  / 

75 

min 

Cdr 

Own  Courses  of  Action 

Analysis  of  Own  C/As 
Comparison  of  Own  C/As 
Decision 

G3 

G3 

Cdr1 

>  60 

min 

G3 

G3 

'Yarning  Order 

Preparation  of  OPORD 

30 

min 

All 

Cdr 

Staff  input  to  OPORD 
Approval  of  OPORD 

90 

min 

G3 

G3 

Distnbution  of  OPORD 
Acknowledge  OPORD 

LDJVHO 
dinatc  HqPlannipg 

60 

min 

TOW 

Subor 

5.5  hrs 
^^^hrs 

TOTAL 

16.5 

hrs 

Figure  6.  Topical  Planning  Times. 


The  table  also  incorporates  the  commanders  1/3, 2/3  rule 
(discussed  earlier)  for  allocating  planning  time  to  his  subordinate 
headquarters.  The  results  of  the  baseline  simulation  will  be 
discussed  in  Section  4  of  this  paper. 

The  Excursion  Simalaiton 

The  baseline  simulation  incorporated  several  assump¬ 
tions*  1)  sequential  planning  (one  plan  being  worked  at  a  time), 
2)  no  automation  to  speed  op-  the  tasks,  3)  no  contingency 
plans  in  existence  that  may  shorten  the  planning  piocess,  and 
4)  no  resource  contention  (tasks  could  always  be  completed 
when  the  required  information  was  available).  The  study  then 


examined  three  major  excursions  from  this  baseline:  automa¬ 
tion,  contingency,  plans  and  staff  sizing/flexibility.  These 
excursions  required  varying  degrees  of  changes  to  the  baseline 
simulation  described  above. 

AUTOMATION 

In  1985  the  Combined  Arms  Operations  Research 
Activity  (CAORA)  conducted  an  analysis  of  the  G3  section  of 
the ’Army  corps  .‘and  division  main  command  posts  19].  The 
purpose  of  their  analysis  was  to  identify  opportunities  for  aiding , 
the  performance  of  the  G3  dunng  tactical  operations  through  the 
use  of  computer  applications.  The  assessment  was  based  on  the 
near-term  (five-year)  automated  environment  of  main  CPs  and 
current  U.S.Army,  doctrine.  As  in  the  RDA  study,  a  structured 
functional  analysis  was  performed  to  identify  specific  G3  mam 
tasks  and  products.^  Additionally,  CAORA  assessed  and 
prioritized  aiding  opportunities,  and  recommended  research 
priorities  to  develop  those  aids.  Figure  7  contains  a  partial  list  of 
the  high-priority  G3  analytic  aiding  opportunities  identified  m 
the  CAORA  study. 

“  TMT  movESSOT FLaMEr 

FORCE  MOVEMENT  ANALYZER 
AIR  MOVEMENT  ANALYZER  r 

‘  AIR  MOVEMENT  PLANNER 
TERRAIN  MANAGEMENT 
TIME  ANALYZER 

COMPARE  ALTERNATE  COURSES  OF  ACTION 
FORECAST  UNIT  STATUS 
ROUTE  EVALUATION 
RELATIVE  COMBAT  POWER 


Figure  7.  Analytic  Aiding  Opportunities. 

The  items  on  that  list  relate  to  specific  tasks  simulated  in 
this  study  using  Petri  nets.  Those  tasks  were  then  identified  as 
automation  candidates  for  the  automation  excursion.  The 
purpose  of  the  excursion  in  this  study  was  to  determine  the 
possible  sensitivities  of  automation  on.  the  overall  planning 
process;  not  to  examine  individual  aids  themselves.  Therefore, 
the  STAPN  transition  delay  (task)  times  identified  as  automation 
candidates  were  shortened  for  the  automation  excursion.  Based 
on  previous  findings  using  HEAT,  a  maximum  4:1  multiplier 
was  assumed  in  time  savings  for  each  task  that  was  automated 
with  an  intermediate  step  of  2: 1  time  savings.  These  automation 
assumptions  were  first  introduced  only  to  G3  functions,  then 
extrapolated  to  G2,  G4  and  commander  tasks.  The  results  of  the 
automation  excursions  will  be  discussed  and  compared  with  the- 
baseline  results  in  Section  4  of  this  paper. 

CONTINGENCY  PLANS 

The  purpose  of  contingency  planning  is  to  account  for 
situational  uncertainty.  The  importance  of  contingency  planning 
has  been  identified  as  a  critical  issue  in  the' HEAT  Program  and 
the  early  program  experiments  have  been  dedicated. to  the 
hypothesis  that  contingency  planning  improves  the  cflcctiveness 
of  a  headquarters  operation.  This  study  addressed  the  question 
of  contingencies  using  the  Petri  net  simulation  of  the  Army 
division  headquarters.  FM  101-5  indicates  that  the  commander 
may  choose  to  short-circuit  the  decisionmaking  processed 
issue  vcibal  orders  to  the  subordinate  units  in  time-critical 
situations  According  to  FM  101-5  this  decision  would  be  made 
after  the  commander  completes  his  mission  analysis  (step  3; 
While  none  of  the  Army  documents  available  addressed  such  an 
alternative,  we  hypothesized  that  the  commander  could  interrupt 
the  normal  process  at  the  same  point  (step  3j  to  implement  a 
contingency  plan, 
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STAFF  SIZING 

The  CAORA  study  report  included  a  list  of  the  personnel 
uho  utd  in  the  G3  section  of  a  heavy  division  main  command 
post  That  list,  which  was  derived  from  the  current  table  of 
organization  and  equipment  (TOE)  and  from  Army  Field  Circu¬ 
lar  101*55  (not  available  for  this  study),  totaled  to  33  people  in 
both  the  current  operations  [7]  2nd  plans  (26)  cells.  No  other 
reference  to  staff  sizing  was  found  in  the  documents  available 
for  this  study.  Presumably  the  time  estimates  discussed  above 
were  based  on  a  standard  staff  size  as  defined  by  the TOE 

The  purpose  of  this  study  was  to  examine  the  sensitivi¬ 
ties  of  the  division  main  command  post  efficiency  to  perturba¬ 
tions,  therefore,  staff  sizing  was  altered  on  a  multiple  basis  to 
examine  that  sensitivity.  The  baseline  study  assumed  that  any 
task  could  be  accomplished  once  the  required  input  information 
was  available.  For  the  staff  sizing  study,  the  baseline  Petri  net 
simulation  had  to  be  altered  to  model  the  fact  that  a  staff  member 
must  also  be  available  to  perform  that  task.  That  staff  member 
would  be  unavailable  to  perform  other  tasks  during  the  duration 
of  the  task  he  was  committed  to.  He  then  became  available  to 
perform  some  other  task  in  the  system.  In  addition  to  informa¬ 
tion  inputs,  each  task  transition  now  included  a  staff  input. 
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dock  char.  The  rrc  of  those  repeat  was  tbeaaIrcrd(fhx3CGee 
every  focr  hoers  loocccocy  tHny  ssag)  to  increase  the 
arrireylevcL  The  baseline  efficiency  erasure  was  feerd  lo  he 
owprx  for  the  raff  sizing  stedy  because  of  tbe  varying 
cf<xga5oaiytga&.  Therefore,  2  pew  measure,  the  percent 
of  pbus  completed  was  caSeelated  to  rela^:  die  headquarters 
ocqxrt  to  the  iepal  vokmae  for  each  case. 


A  final  change  was  thea  made  to  examine  the  effects  of 
cross  training  among  G2  and  G3  personnel.  Any  G2  2nd  G3 
staff  tokens  coeld  now  sene  both  G2  aad  G3  tasks.  This 
increased  staff  flexibility  should  allow*  the  G2  and  G3  staffs  to 
keep  cp  with  aa  increasing  workload  until  both  staffs  are  satu- 
r&L  Tbe  results  of  the  stiff  sizing  and  cross  training  studies 
will  be  discussed  ia  Section  4  of  this  paper. 


4.  ANALYSIS  AND  RESULTS 

Previous  sections  of  this  paper  have  developed  the  orga- 
nizadonah  procedural  2nd  theoreric  basis  of  the  Army  command 
post  study.  This  section  will  present  the  results  of  that  study, 
analyze  and  compare  those  results,  and  suggest  an>  fume  work 
to  be  done  as  follow-up. 

BASELINE  CONFIGURATION 

The  baseline  configuration  was  discussed  in  Section  3  of 
this  paper  The  efficiency  measure  for  the  baseline,  automation 
and  contingency  simulations  (planning  time)  was  computed  by 
dividing  the  total  battle  time  by  the  total  number  of  headquarters 
outputs  and  converting  to  hours.  The  total  battle  time  was  made 
large  to  let  the  simulation  noise  figures  settle.  Each  transition 
(task)  time  was  set  as  an  exponential  delay  rather  than  a  constant 
delay,  so  a  short  baule  may  have  given  spurious  results.  The 
baseline  simulation  resulted  in  an  average  planning  time  of  IS 
hours  over  the  penod  of  127  days  (total  battle  time).  During  that 
time  the  staff  generated  167  plans.  These  numbers  are  not 
important  in  themselves,  although  it  is  comforting  that  the  steady 
state  planning  time  (18  hours)  closely  followed  the  typical  time 
(16 1/2  houis)  given  in  FN1 101-5  ano  used  as  simulation  inputs. 
The  difference  can  be  accounted  for  by  the  additional  unit  prepa¬ 
ration,  movement  and  battle  time  that  was  simulated  within  tbe 
"units”  box  of  the  Petn  net  model.  The  importance  of  the  results 


Ees  as  6c  sssssziiass  »  be  feuaxj  as  ccarsaaxs  fti  be  &- 

ca^aa^££to»^pigss^ifc^ 

EXCUESJQS-  OTCFSK^TaOSS 

ArgcawffiSaife 

T^aaog£sSMeie3s»onciaEaaflxrf«tesegsa£i^gsc<' 
^^S(^c^^fitAcG3saa.da»a3s3& 
(G2.  G5.  Gi.  zsd  ctmmzadci)  tcsvchxd  a  Ac  rarnacrq  »d 
gfetcerg  pcocai.  >«  d  c*sis  «cc  jssrnd  ao  ioKfi:  to 
zaaciaa  Tzsk  seixti-^z  w*i  teed  <xs  Ac  Esi  ctf  xxaiyti:  zid 
oppccrution  fomd  =a  Figne  7.  hfefe«acgiMa.w^rf 
G3  tzsk  ring*  «ct  czz  ss  »fe3e  ^3  Oder  task  tea 
renuznardcocczec.  Tbc£=paclooyfarriragissx 
ajcnafipc^ 


Hg=e9.  A*AimripBSaiyRcgIs. 


This  fxd-ug  was  not  surprising  because,  minlc  tberrrs  a 
gacatdeal  of  pcaSri  activity  ia  tbccstifioaoa  process.  there  cc 
also  rosreracs  betfrarrks.  Each  time  iafocsarioo  is  exchanged 
2CDOC5  stiffs  oc  provided  to  the  cocmundcr.  the  process  stops 
until  2H  stiffs  have  complctod  their  work.  Therefore.  automat¬ 
ing  ocly  ore  suff  causes  then  sad  2jeir  competer-aided  esti- 
catos  to  lave  to  si  and  wail  for  the  o&er  srags  *0  catoh  tp. 

Applying  the  same  automation  asscmptiocs  10  all  staffs 
reduced  the  pruning  time  from  18  horn  to  13  boas,  a  2S% 
improvement.  The  final  test  of  this  exemionstody  mas  to  50  to 
the  4:1  improveoect  Hail  th2I  u as  identified  in  earlier  HEAT 
stodies  as  the  maximum  possible.  Catring  the  selected  task 
times  of  all  staffs  by  four  resale  in  an  avenge  planning  thee  of 
11  boars,  a  39%  improvement  to  the  baseline  (18  boors)  bet 
only  a  15%  improvement  on  the  2:1  assumption  (13  boors). 
Clearly  there  is  a  point  of  diminishing  returns,  partially  doc  to 
the  fact  that  not  all  tasks  can  be  automated. 

Contingency  Srady 

The  contingency  plan  exclusion  examined  the  impact  of 
varying  degrees  of  pre-planning  on  the  efficiency  of  the  Array 
headquarters.  Section  3  discussed  the  two  types  of  contingency 
plans  considered  and  the  rationale  for  their  selection.  The  Petri 
net  model  was  run  for  both  implicit  and  explicit  contingencies 
with  the  probability  of  their  existence  ranging  from  20%  to 
100%.  A  stochastic  decision  rule  determined  in  each  situation 
whether  a  plan  existedlo  cover  that  situation.  As  Figure  10 
indicates,  the  impact  of  implicit  (known  only  to  the  commander) 
contingency  plans  was  minimal. 

_  Even  if  all  situations  (100%)  were  covered  by  his  mental 
planning  only  a  1 1%  planning  time  improvement  to  the  baseline 
was  realized.  Explicit  (written)  contingency  plans  had  a  much 
greater  impact  with  a  50%  improvement  limit  Written  con  tin- 
gency  plans  produced  the  greater  impact  primarily  because  of  the 
additional  short-cuts  that  they  permitted.  Not  only  was  the  staff 
estimation  process  by-passed  (as  with  the  implicit  plans),  but  the 
formal  plan  preparation  and  approval  was  eliminated  a!  the  sub¬ 
ordinate  headquarters  as  well  as  the  division  command  post  The 
results  do  not  address  the  pre-planning  time  required  to  have 
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figure  11.  Automation  and  Ccctiugcarks. 


This  chart  assumes  th2i  atirr  do  situations  (the  first  pair 
of  bars)  or  all  suuatiocs  2re  covered  by  a  contingency  plan  2ad 
compares  the  resells  of  do  actoraatioa  (Iighl-h2tohed  baa)  to  a 
2:1  automation  time  reduction  in  all  staffs  (dark-hatched  bars). 
The  new  information  is  in  the  two  right-hand  dark-haiebed  bars 
2nd  shows  the  improvement  when  automation  is  added  to  con¬ 
tingency  planning. 

The  combination  of  automation  and  implicit  contingency 
planring  results  in  an  average  12  hour  planning  time,  or  a  33% 
improvement  to  the  baseline.  The  corresponding  combination 
using  explicit  contingency  plans  results  in  an  average  7  hour 
planning  time,  or  2  61%  improvement  to  the  baseline.  This,  the 
lowest  cycle  time  of  the  study,  represents  a  2  hour,  or  22% 
improvement  to  the  the  explicit  contingencies  alone  (9  hours) 
and  a  4  hour,  or  31%  improvement  to  the  automation  icsults  (13 
hours).  The  headquarters  efficiency  seems  to  be  more  sensitive 
to  contingency  plan  availability  than  to  automation 
improvements. 

Siaflins  Study 

The  baseline,  automation  and  contingency  studies 
assumed  that  adequate  staff  was  always  available  to  perform  a 
task  when  the  input  •nformation  was  available.  The  staffing 
study  removes  that  assumption  by  requiring  that  shared  staff 
members  also  be  available.  To  stress  the  staff,  this  study  also 
increased  the  information  input  rate  to  force  parallel  activities. 
The  assumption  here  is  that  each  staff  token  in  the  Petn  net 
simulation  can  perform  each  task  in  the  time  derived  from  FM 
101-5.  However  they  can  now  only  work  on  a  single  task  at 
any  one  time,  possibly  forcing  other  tasks  to  be  put  off  until 
stiff  members  (tokens)  are  available.  A  staff  multiple  of  two  (or 
two  staff  tokens)  meant  that  two  such  staffs  were  available  m  the 
staff  loop  and  could  thus  perform  two  different  tasks  simultane¬ 
ously.  Multiples  of  four  and  six  were  also  used  to  examine  the 
sensitivities. 
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figure  12.  Staff  Sizmg  Resell 

Figure  12  cogpires  these  pcscccays  foe  safif  sulripfes 
ofl,2.42^6otgan^ofi^ircsLTOsixLyapg 
day  (otiy  foes'  bows)  to  43  qss  per  day  (etwy  fczff  bow). 
With  fow-boor  iepci  canah  aU  dff  sires  peforaed  act  near 
100£  efficiency.  However,  as  the  r«e  increased  the  single  staff 
quickly  became  bogged  do** a  until,  at  24  ispws  per  day 
(howfyX  they  wree  unable  to  irodsceasyplass.  Thkcocplete 
satoraaco  fra  result  of  the  loo-oprinalcatorc  of  the  staff  loops 
and  ckariy  dees  axirpfcswlsowsdssrsgeweesprartice.  Stiff 
tokens  tended  to  get  stock  in  a  single  task  area,  coctzncing  to 
woric  off  Use  stack  of  inputs  nttber  than  throwieg  array  all  bet 
tbe  latost  and  processing  it  alone.  Microoodeler  caaaoc  ccr- 
rently  support  UFO  (tat  in,  first  oct)  stratogies.  bet  work  is 
now  coder  may  to  improve  its  capabilities.  As  Figure  12  indi¬ 
cates,  adding  more  staff  tokens  moves  the  knee  of  the  curve  to 
the  right.  The  absolute  values  of  these  results  are  not  signifi¬ 
cant.  but  the  comparison  reveals  that  staff  sizing  does  impact 
headquarters  efficiency. 

A  close  examination  of  the  staff  sizing  simulations 
revealed  that,  when  approaching  the  saturation  point,  the  G2 
staff  usually  saturated  first.  This  phenomenon  resulted  from  the 
fact  that  G2  had  critical  collection  planning  tasks  to  perform  as 
well  as  situation  estimation  dudes.  Tics  finding  lead  to  the  final 
staffing' study —  the  impact  of  cross  training  on  headquarters 
efficiency.  For  this  study,  the  staff  loops  of  G2  and  G3  were 
connected  so  that  any  available  staff  token  could  service  any  G2 
or  G3  task.  The  result  of  this  increased  staff  flexibility  is  shown 
in  Figure  13  for  a  staff  multiple  of  two  (a  total  of  four  G2  and 


Figure  13.  Staff  Ci  iss  Training  Results. 

The  bottom  curve  represents  the  case  shown  earlier  with, 
no  cross  training.  The  top  curve  shows  the  efficiency  improve¬ 
ment  realized  by  making  the  same  number  of  staff  members 
available  to  perform  a  greater  variety  of  tasks.  Again,  the  result 
is  a  further  movement  of  the  knee  of  the  curve  to  the  right. 
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This  study  was  a  lot  atimspc  n  Krbto*  a  real  bezd- 
qumtors  process  using  IDEF  and  Petri  cet  nodeSeg  techeaqrcs. 
Tbe  resets  are  enrowaging  bet.  by  oo  means,  coccirsrvc.  Tbs 
models  used.  *fe2e  based  oaofficld  Ai^trzimsgdoccmews. 
have  yet  to  be  vzladatod  experiment  or  exercise  drtz. 
Efforts  zre  now  under  way  to  begin  this  vdidrioo  »frZi  the  help 
of  Army  personnel.  It  is  hoped  that  these  efforts  vri3  produce  a 
more  rrairgic  model  wzh  pore  precise  rime  esrimrr*.  Such  a 
model  would  be  a  powerful  tool  for  setting  ep  experiments  2^d 
developing  measwes  of  efficiency  for  tbs  Army  division  com¬ 
mand  post  operatioo. 
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TSx  goal  ofthi*  analysis  is  to  consider 
ccmm&ni  and  control  needs  in  military 
operational  management  with'  respect  to 
global-scale  warfare.  The  challenge  is  to 
define  an  operational  concept  for  C2  beyond 
tbe  current  purview  of  the  Specified  and 
Unified  Ccweadg.  The  analysis  addresses 
the  questions  *Khat  comaad  and  control 
architecture  is  required  to  provide  the 
necessary  responsiveness  to  national  level 
political/ssilitary  objectives?*  The 
erohasis  is  on  the  required  command  and 
control  architecture,  "both  for  the  effective 
management  of  a  global  level  conflict  and 
for  the  responsiveness  to  national 
political/atilitary  objectives. 


Pron  a  methodology  viewpoint,  this 
analysis  represents  the  application  of  the 
HCBS  to  command  center  conceptual 
definition,  it  provides  the  requisite 
analytic  support  to  formulate  the  system 
requirements  that  lead  to  instantiation  of 
the  concept,  in  contrast  to  the  focus  upon 
command  and  control  architectures  as  system 
and  technology  driven,  this  analysis 
emphasizes  support  to  the  decision  makers  in 
the  command  and  control  process. 
Nevertheless,  it  is  intended  that  the 
SuperClNC  work  will  lead  to  the  identifi¬ 
cation  of  information/oguipment/(C2  support 
required  at  the  systems  level  to  support 
NKCS  /  SuperClNC. 


The  goal  of  the  SuperClNC  analysis  is  to 
consider  command 'and  control  needs  In 
military  operational  management  capability 
with  respect  to -global  scale  warfare. 
Specifically,  these  deficiencies  arise  from 
the  lack  In  capability  to  support  the 
management  of  war  with  several 
simultaneously  occurring  crises  at  different 
levels  going  on  globally  as  well  as 
potentially  within. a  single  theater.  Thus, 
the  management  challenge  is  to  define  an 
operational  concept  for  C2' beyond  the 
current  purview  of  the  Specified  and  Unified 
commands . 


architecture  is  required  to  provide  the 
necessary  responsiveness  to  national 
political/military  objectives?*  The  C2 
architectural  concept  defined  to  enhance  the. 
organizational  capability  for  such 
management  must  ensure  effective 
warfighting  capability  and  responsiveness  to 
the  designated  objectives. 

In  contrast  to  the  focus  upon  C2 
architectures  as  system  and  technology 
driven,  this  analysis  emphasizes  the 
decision  rakers  in  the  C 2  process-  Still, 
it  is  .ntended  that  this  analysis  will  lead 
to  the  identification  of 

infor=ation/eguipoent/C2  support  required  at 
the  systeas  level  to  support  NXCS,  both 
without  and  including  the  SuperClNC. 

From  a  methodological  standpoint,  the 
SjperCINC  work  represents  the  application  of 
the  XCES  to  command  center  conceptual 
definition.  It  provides  the  analytic 
support  to  specify  the  system  requirements 
which  will  lead  to  instantiation  of  the 
concept. 

C2  CONCEPTS  FOR  SUPERCIHC  ARCHITECTURE 

As  a  result  of  this  analysis,  several 
issues  have  been  identified  relating  to  the 
supporting  C3I  for  the  SuperClNC 
architecture.  The  C2  concepts  that  have 
surfaced  are:  (1)  the  command  authority  of 
the  SuperClNC;  (2)  the  location, 
classification  and  evolution  of  SuperClNC 
supporting  C2  Nodes;  (3)  customized 
interfaces  for  C2  decisionmakers;  and  (4) 
level  of  detail  of  required  information. 

The  first  of  these  concepts  is  the  guide  to 
the  definition  of  the  required 
organizational  architecture  for  SuperClNC. 

1.  The  command  authority  of  the 

SuperClNC  leads  to  several  axioms 
upon  which  th>  systems  level 
architecture  roust  be  built. 


This  problem  was 
funding  from  McDonnell 
Washington  Studies  and 
analysis  addresses  the 


addressed  under 
Douglas  Corporation, 
Analysis  Group.  The 
question:  "What  C2 


0  The  supporting  command 

center(s)  will  be  permanent. 
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O  Location. 


supporting  C3t  for  t$e  SuoerCI^ 
arcMtocture.  Ibe  C2  concepts  tijt  fcarc 
snifaced  are:  (1)  tie  cowmand  authority  o- 
the  SOTcrC»C;  (2)  the  location, 
classification  and  evolution  or  SuperCUK: 
supporting  C2  Node*;  (3)  customized 
iaSsrfaces  for  C2  decisionmakers;  and  (4) 
level  of  detail  of  required  information . 
the  first  of  these  concepts  is  the  guide 
the  definition  of  the  required 
organization  architecture  fcr'SuperCDC- 


1.  the  ccnsnand  authority  of  the 

ScoerCUSC  leads  to  several  ax.cc* 
up^a  which  the  systems  level 
architecture  must  be  built. 

O  the  supporting  command 

center {*)  will  be  pemarent- 


ScnexCXSBC,  as  an  entity, 
asst  be  located  at  a 
major  infcrs&tica  node. 

‘Shis  node  arret  be  able  to 
provide,  in  equal  detail, 
information  frees  a  sober 
of  different  ccsasands. 
Accordingly,  topics  to  be 
resolve v include = 

o  Security  of 
information, 

o  Vulnerability  of 

that  information  to 
C3CK, 


0  functional  operational 

authority  is  delegated  .by  KCA 
under  pre-dete mined 
activating  conditions,  which 
are  yet  to  be  specified. 

O  The  nature  of  this  authority  » 
and  especially  its,  limits  tost 
be  determined  - 

-Five  star  pemanent 
authority  with  respect  to 
all  CINCs. 

-An  "Emergent  SuperCIKC" 
with  authority  over 
specified  CINCs,  with* said 
authority  itself  contingent 
«oon  a  set  of  conditions 
being  satisfied,  see  Fig.  1. 

2.  The  location,  classification  and 
evolution  of  supporting  C2  Nodes- 
are  derivative  of  the  SuperCIKC 
concept  development.  Consideration 
of  these  concepts  result  In  the 
following  limiting  conditions: 

FIGURE  1. 


EMERGENT  SUPERCIKC 


o  Redundancy,  and 

•o  Recency. 

-  The  desiderates -is  to 
locate  the  C2  Node  as 
close  to  the  central 
geographical  region  of 
interest -as  possible. 
However,  this  nay  not  be 
possible.  The  location' 
i*8  dependent  upon: 

o  Availability  of  the 
most  technologically 
appropriate  command 
center,  and 

o  Availability  of  the 
most  survivable, 
reliable 

communication  links. 

0  Classification. 

There  is  a  direct  relationship 
between  the  permanency  of 
authority  and  the  type  of 
supporting  C2  Nodes  that-  rust 
.  be  available,  e.g.,  the 
•Emergent  SuperCIKC*  must  be 
supported  by  a  Specific 
SuperCINC  C2  Node  (SSC2N). 
Peasible  combinations  of  C2 
nodes  can  be  postulated 
between  sets  of  information  to 
handle  the  C2  requirements. 

The  resulting  information 
synthesis^should  be  located  at 
the  most" adequately  equipped 
C2  node,  which  may  thereafter 
be  enhanced.  For  the 
Universal  SuperCINC,  a  C2  node 
must  be  identified,  together 
with  alternatives,  based  upon 
such  topics  as  succession  of 
command,  redundancy  and 
survivability  of 
functionality. 
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-  ~  The  Candidate  C2  bodes 
■ay  be'  claisif led 
according  to  employment 
concept 

o  The  Specific 
SuperCIKC.  has 
com  i  m,|  authority 
only  with  respect~to 
the  CXKCs  where  the 
scenario  overlap* 
their  mandate. 

6~  The  Universal 
SuperCIKC  has 

"  *  cc nmand  aathority 

xith  respect  to  all 
the  CIMCs. 

Evolution. 


At  each  stage  of  this 
evolution,  it  is  critical 
that  .the  criteria  for  ~ 
evaluation  evolve  with 
the  SuperCIKC 
architecture  and  Its 
Mission.  * 


3.  ■’Customized  interfaces*  for  C2 
decisionmakers. 


In  order  for  the  SuperCIKC  to  * 
operate  effectively  and  efficiently 
in  the  .fast  moving  and  information 
rich^  environment,  an  atmosphere" 
which  enhances  personal -decision 
making  style, must  be  available. 

This  atmosphere  has  begun  to  be  * 
referred  to  as  customized 
interfaces  for  individual  use. 


S-nce  the  SuperCIKC  concept 
has  never  been  i  design 
concept,  existing  command 
centers  and  C2  nodes  are  not 
likely  to  meet  all 
requirements. 

0  Existing  and  programmed 
C2  systems  viewed  in  this 
perspective,  result  in 
residual  requirements 
which  must  be  remedied' by 
upgrading  existing 
systems  to  implement  the 
SuperCIKC  supporting  C3I 
system. 

0  The  final  SuperCIKC 
architecture  and  its 
supporting  C3I 
operational  systems  will 
evolve  through, 
conceptual,  development, 
test,  deployment,  or 
perhaps  operational 
phases . 

0  This  evolution  is  more 
likely  to  bo  built  if, 
after  identifying  the 
1  long-term  goal,  we  begin 
to  implement  changes  in 
operational  and  * 

organizational  concepts, 
information  flow 
patterns,  employment 
concepts  and  the"  like. 


Cf  These  interfaces  may  be  related  to 
all  aspects  of  the  C3I  system's 
-  static- components.  These  make  up 
the  physical  entities  of  the 
system,  namely,  hardware,  software, 
people,  and  the  facilities  that 
house  them.  ’ 

0  Of  particular  note,  is  the  question, 
"To  what  and  in  what- specif ics  does 
the  decisionmaker  need,  access? 
Concerns  to  be  addressed  include: 

”  Secure,  reliable,  enduring 
communications  to 
superordin^te,  lateral  and 
subordinate  organizations; 

-  Conferencing  capabilities 

within “the  command  center;  and 


Idiosyncratic  needs,  vis-a-vis- 
visual  display. 

4 .  Level  of  detail  of  required 
information. 

Pinally,  there  are  two  competing 
issues  that  effect  the  utility  of 
information  within  the  C2  process. 


0  Information  is  and  must  continue  to 
be  made  available  to  the 
decisionmaker  a,t  a  number  of 
different  levels  of  detail. 


0-  These  relatively 

immediate  changes  yill  be 
followed  by  the  longer 
lead  time  aspects  of . 
developing  and  acquiring 
supporting  hardware  and 
software. 


This  requirement  results  in 
greater  dimensionality  than  is 
readily  usable  at  a  single 
time  by  a  singlo 
decisionmaker. 
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It^mast  be  provided  In  terms 
of  potential  flexibility  to 
enhance  the^  information  base 
upon  which  the  selection  and 
execution^©!  options  is  “  ' 
grounded- v  * 


0  We; have  long;  advocated  aeminimu®-  - 
essential  abroach  to  providing 
information  to  the  decisionmaker.  / 
However,  if^one  looks  across  time 
-  and  at  these  idiosyncratic  needs, 
one  has  ajpajor  design  iss.ue  with 
which  to  grapple.  v  ' . 

-  Ke  suggest  that^a*  suitable 
approach  is  to/build  opo^  the 
in formation . needs  derived  fro® 
decisions  required  during  the 
accepted. operational 
scenario. 

-  The  individual  SuperCINC  in 
conjunction  with  his  direct 
supporting  staff  will 
'determine  what  information  is 
to,  be  pulled  from  the  data 
s'ources  and  the  form  in  which 
it  is  toxbe  presented? for 
decisionmaking. 

0  The  second -issue  relates  to  who  is 
to  provide '^the  minimum  essential 
information  to  the  decisionmaker. 

It  is  likely  that* in  the  process  of 
selecting  the  required  minimum  ' 
essential  Information  elements,  a 
filter  is  introduced. which- ^ 
emphasizes  a  particular  set  of 
conclusions.-' 

-If  the  supporting  staff  is 
known  to'  or  believed  -by  the 
decisionmaker  to  be  credible, 
the  pre-filtering  is  taken  as 
appropriate.  ' 

-  If  the  decisionmaker  does -not 
feel  that  the  data  presented 
to  himais  -credible,  "for: 
whatever  reason,  he  will  often 
request  access  to  a  greater 
level  of  detailed  data  than  in 
that' 'supplied . 

Clearly,  to  the  extent -that,  he 
must  access  this  more  detailed 
data,  the  less  time  he  has  to 
engage  in  the- other  equally 
demanding  aspects' of  his  job. 


INSIGHTS  FROM  THE  APPLICATION  OF  TEE  MCES 

The  SuperCINC  study  is  a  top-down 
analysis-  focussed  tupon  organizations,  their 
functions,  facilities  and  procedures.  The 
> analysis  draws  its  direction  iron  the 
'decision-makers'  objectives.  These  in  turn 
are  derived  fro®  the  ultimate 
military /political  objective:  deterrence. 

PROBLEM  SPECIFICATION  AND  SCENARIOS: 

MODULE  1. 

First,  the  representative  conflict 
scenarios  from  crisis  to  global  nuclear  war 
were  described,  see  Fig-  2.  The  phases  of 

FIGURE  2- 


POSSIBLE  SCENARIO  SEQUENCE 


the  scenario  are  seen  from  the  general 
military  perspective  as  sequential  in 
nature.  Cer.tain  paths ' through  these  phases 
nu>y  be  termed  "desired  paths”.  These 
inevitably  lead  to  a  de-escalation  in  the 
level  of  conflict.  It  is  the  effectiveness 
of'  a  given  architecture  in  maximizing  these 
desiderata  that  is  an  ultimate”  essential 
component  of  the  evaluation. 

The  scenario  not  only  reflects  the 
decision-makers?  objectives,  but  also 
provides  the  set- of -‘events  and  decisions 
which  must  be  supported  for  the  SuperCINC 
Architecture  to  carry  out  the -chosen 
mission.  Thus,  the  concept  defined  for  the 
SuperCINC  architecture  is  based  upon 
.scenario-driven  decision  support 
requirements,  namely:  information  needs 
specifically  engendered  by  pre-real  time 
planning  as  well  as  the  time  sensitivities 
implicit  the  operational  mission.  The 
required  information  needs  of  the  SuperCINC 
relate  to:  Capabilities  (Plans,  Resources, 
etc,)?  Intelligence  Assessments  (Threat, 
Response);  and  Foreign  Country  Issues.  This 
focus  highlights  critical  information  needs 
and  the  corollary  minimum  essential  Elements 
for  architectural  specification. 
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CONCEPTUAL  ALTERNATIVES  AMD  STATICS: 

MODULE  2. 

In  the  system  bounding  of  the  SuperCINC 
study,  specific  attention  was  given  to 
organizational  structure,  information 
f lew, and  specific  design  dimensions,  see 
Fig'.  3. 

ORGANIZATIONAL  STRUCTURE.  Three 
conceptual  SuperCINC  alternatives  were 
developed .  Each  was  capable  of  providing 
the  necessary,  C2  structure  in  support  of 
operational  responsibilities  above  the  CINC 
level,  involving  the  integrated  activities 
of  several  CINCs.  This  role  may  be 
constituted  to  correspond  to  that  of 
military  CINC  of  CINCs .  The  candidate 
organizational  structures,  dependent  upon 
who  the  SuperCINC  is,  were  described: 

(1)  JCS,  as  a  whole  acting  as 
SuperCINC, 

(2)  A  member  of  JCS  acting  as 
Single.  SuperCINC,  and 

(3)  Another  organizational  entity 
acting  as  Single  SuperCINC.  This 
non  JCs  Single  SuperCINC  may  be  one 
of  the  ten .CINCs  of  the  Unified  and  ^ 
Specified  Commands,  a  senior 
military  officer,  active  or 

'  retired,  or  a  designated/appointed 
SuperCINC  from  among  a  set  of 
suitable  candidates  with  the 
appropriate  military  background. 


FIGURE  3. 

C2  SYSTEM  BOUNDING 


INFORMATION  FLOW.  The  information  flow 
requirements  may  be  seen  as  arising  out  of 
the  relationships  between  the  SuperCINC  and 
other  specified  organizations. 


_  The  NCA.  The  SuperCINC  must  respond 

to  the  NCA  by  filtering  the  large  amount 
of  information,  providing  a  concise 
summary  of  events,  producing  options  for 
the  MCA  and  responding  to  the  queries  of 
the  MCA. 

Internal  to  the  SuperCINC.  The 
SuperCIMC  requires  information  to 
generate  options  for  the > NCA.  The 
perspective  must  be  global  in  nature  and 
support  national  level  goals.  This 
information  must  be  accessed  from  the 
individual  CINCs,  the  services,  and  a 
wide  variety  of  government  agencies 
including  the  intelligence  agencies. 

The  CINCs.  -  The  CINCs  requires  not 
only  direction  and  authority  but  some 
perspective  of  the  global  nature  of  the 
conflict.  In  some  cases,  direct 
cross-feed  of  information  between  CINCs 
may  be  required  to  ensure  that  actions 
by  one  CINC  do  not  directly  conflict 
with  actions  of  another.  Additionally, 
direct  contact  with  the  Allies  takes 
place  at  the  CINC  level  and  requires  the 
CINC's  ability  to  coordinate  within  his 
theater  of  operation 'from  a  global 
perspective. 

The  services.  As  suppliers  of  men 
and  materiel  to  the  CINCs,  the  services 
require  information  to  ensure  that  the 
needs  of  the  CINCs  will  be  met  under  a 
fast  breaking  scenario.  Additionally, 
the  services  must  provide,  through  the 
SuperCINC,  accurate  information  on 
capabilities. 

DESIGN  DIMENSIONS.  Information  flow 
requirements  for.  SuperCINC  must  be  based 
upon  the  architectural  design  decisions  made 
during  conceptual  definition.  For  our 
purposes,  these  design  issues  relate  to  the 
interdependent  dimensions:  organizational? 
geographical  or  spatial;  and  temporal. 

Organizational.  The  SuperCINC  has 
been  taken  to  represent  a  new  level  of 
military  organization,  below  the  JCS, 
which  has  operational  authority  in 
conflicts  which  are  likely  to  involve 
operations  that  transcend  the  currently 
defined  purviews  of  the  Unified  and 
Specified  Commands. 

In  both  the  "SuperCINC  as  a 
group  of  decisionmakers*  and  the 
■Single  -  JCS*  roles,  SuperCINC  Is 
in  a  direct  line  of  authority 
between  the  NCA  and  the  CINCs.  For 
the  former,  information  is  received 
from  a  variety  of  information 
sources.  In  the  latter,  the  JCS 
plays  a  conduit  role  between  the 
information  sources,  the  SuperCINC 
and  the  CINCs. 
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For  the  “Single  SuperCINC  - 
non-JCS “ ,  there  are  direct 
information  links  to  SuperCINC  from 
the  JCS  and  theinforaation 
sources.  s 

Geographical-  -  If  the  Supe  ;C 
commands  several  CIKCs  only,  then  -ne 
geographical  location  of  each  CIN*  [s 
area  of  responsibility  (AOR)  and  tne 
relationship  to  the  others'  become^ 
critical  considerations-  The  AORs  may  be 
geographically  contiguous, "but  this  is 
not  necessary.  .v 

The  SuperCINC  may  have  command 
*  authority  only  over  theCINCs  where 
the  scenario  in  effect  .overlaps 
-their  mandate;'  then  the  KCA 
maintains  its  command  authority 
over. all  other  ClNCs. 

When  command  authority  for 
specific'-CINCs,  is.  delegated  by  NCA 
to^SuperCINC,  JCS  continue  to  act 
in  it  current  role. 

Under  some  circumstances,  it 
may  be  assumed  that  the  SuperCINC 
will  have  comma ndtauthority  over 
all  the  CINCs. 

Temporal.  -  The- point  at  which  the 
SuperCINC  assumes  command* is  unlikely  to 
be  totally  event  driven. 

The  rationale  is  that  it  would 
be  extremely  difficult  to 
orchestrate  evants,  if  a  given 
pre-determlned  action  triggers  the 
SuperCINC.  Therefore,  the 
SuperCINC  should  be  In  play  from 
the  beginning  of  hostilities  at  any 
level . 

In  contrast  to  this  view,  the 
SuperCINC  could  be  postulated  to 
rise  to  operational  command  based 
upon  a  pre-determined  set  of 
criteria  well  before  the  beginning 
of  hostilities. 

SUPERCINC  FUNCTIONALITY:  MODULE  3- 

The  functional  aspects  of  C3I  System 
Model  o£  vthe  appropriate  military 
organizations )  to  remedy  the  deficiencies 
were  grouped  into:  C2  Functions; 

Interactive  Functions,  external  and 
internal;  Planning  Functions;  and 
Coordination  Functions . 

INTEGRATION  OP  STATICS  AND  DYNAMICS:  MODULE 
4. 

The  integration  of  statics  and  dynamics 
is,  in  this  analysis,  equivalent  to  the 
definition  of  the  conceptual  architectural 
alternatives.  The  initial  specification  is 


provided  in  Module  1.  This  is  refined  in 
Module  2  arid  finalized  for  the  first 
iteration  of  the  evaluation  process  in 
Module  4,  -see  Fig.  4. 

The  conclusion  of  any  MCES  analysis  is 
assumed  to  have  three  possibilities: 
implementations of 'results,  do  nothing,  or 
rea^alysis.  If -  reanalysis  is  the  outcome, 
the  architectural  concept  definition  will 
continue  to  be  refined,  leading  ultimately 
to  the  dewelopment  of  the  concept 
preparatory  tq  the  design  and  acquisition 
stages  of  the'PPBS. 

SPECIFICATION  OF  f  MEASURES:  MODULE  5 . 

^Measures  or  Evaluative  Criteria,  derived 
from. mission,  needs  and  independent  of 
specific  concepts,  were  identified  and 
explicated.  They  may  be  used  to  evaluate  the 
capability  of  candidate  Architectures -for 
SuperCINC  to  remedy  the  identified 
deficiency  in  terms  of  the  mission  of 
managing  global  scale  warfare.  The  measures 
are  intended  to  provide  values  which  allow 
the  determination  of  significant  increases 
in  performance,  effectiveness  as  well  as 
policy  and  force  effectiveness. 

The  Measure's  of '  Performance  (KOPs) 
or  -  equivalently  -  the  A  or  Sub-System 
Level  Evaluative  Criteria  can  be  divided 
into  three  categories;  those  that 
measure: 

0  Component  performance 
characteristics; 

0  Characteristics  of  the 

information,»flow  in  the  C2 
system;  and 

0  Design  characteristics . 

The  Measures  of  Effectiveness 
(MOEs)  or  -  equivalently,-  the  B  or 
System  Level  Evaluative  Criteria  assess 
the  extent  to  which  the  system 
performance  meets  the  requirements  for  a 
given  scenario  or  set  of  scenarios. 

Three  classes  of  MOEs  have  been  defined 
that  are  applicable  to  different  aspects 
of  the  SuperCINC  architectures.  They 
deal  with: 
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FIGURE. 4. 

■ARCHITECTURAL  DIMENSIONS: 


0  Errors,  both  static  and 
dynamic; 

0  Adaptiveness  imbedded  in- the 
system  architecture;  and 

0  *  Ability  'of  the  system  to 

evolve  over  time  in  view  of 
logistics,  acquisition 
procedures,  and  changing 
-technology. 

The  Measures  of  Force  and  Measures 
of  Policy  Effectiveness  (MOFEs  and 
MOPES)  or  equivalently  -  the  C  or-. 
Architectural  Level  Criteria  assess  the 
effect  of  SuperCINC  on  overall  military 
effectiveness . 

CONCLUSION 

There. Is  no  current  implementation  of 
the  SuperCINC  concept.  However,  current 
requirements  for  command  centers  are  being 
developed  to  support  a  variety  of  potential 
missions.  This  requirement  to  include 
command  center  mission  flexibility  makes  the 
C2  node  to  support  a -SuperCINC  a  feasible 
realization. 

Since  the  evaluation  approach  is  based 
on  executing  a  scenario,  an  adaptation  of  a 
war  gaming  exercise  would  be  the  appropriate 
means  for  eliciting  expert  judgement. 
Estimates  will  have  to  be  made  both  by 
expert  commanders  as  to  what  their  needs 
would  be  in'/responding  to  the  stimuli 
produced- by  the  scenario  and  by  expert  staff 
as  to  whdt  the  attributes  of  the  various 
processes  would  be  with  current  comparable 
♦equipment  or  with  planned  enhancements. 

Under  the  information  intensive  and  fast 
moving  conditions  of  the  global-scale  war 
scenario,  NCA  is  providing  policy, 
oversight,  guidance,  and  direction 
functions.  Therefore,  the  delegation  of 
command  authority xby  NCA  to  another 
SuperCINC  is  likely.  In  such  a  context,  day 
to  day  resource  allocation  and  war-fighting 


management,  as  well  as  other  selected 
functions,  are  delegated  to  a c subordinate 
level  SuperCINC  in  order  to  effectively  and 
efficiently  provide  more  flexible  mission 
oriented  alternatives. 

Reviewing  the  architectural  dimensions 
proposed  In  this  study,  it  is  easily  seen 
that  some  of  these -dimensions  represent  more 
feasible  architectures  than  do  others. 
Accordingly,  vthe  determinants  of  the 
identified  architectures  for  subsequent 
analysis  are  temporally,  geographically  and 
organizationally  based. 

1.  Temporal-. 

The  command  authority  concept  is 
the  guide  to  the  definition  of  the 
required  architecture  for 
SuperCINC.  The  functional 
operational  authority  which  is 
delegated  by  NCA  to  the  SuperCINC 
-may  be  classified  In  terms  of  a 
temporal  dimension.  It  may  be 
either  continuous  or  emergent,  that 
is,  activated  according  to  a  Set  of 
as  yet  unspecified  pre -determined 
conditions.  The  continuous  or 
permanent  authority  is  most  likely 
to  be  at-the-^fivo  star  level. 

2.  Geographical. 

Two  geographically- related 
conditions  are  possible,  for  either 
the  permanent  or  the  emergent 
SuperCINC,  but  not  equally  likely. 
On  the  one  hand,  under  the 
universal  classification,  this 
authority  will  be  extended  over  all 
CINCs.  On  the  other  hand,  the 
authority  will  be  extended  over 
that  sub-sot  of  the  CINCs  whose  AOR 
is  operant  with  respect  to  the 
scenario  in  play.  This  latter 
option  leads  inevitably  to  resource 
allocation  conflicts  between  the 
CINCs  Included  and  those  excluded 
from  the  SuperCINC  -command 
authority.  Accordingly,  it  is 
judged  that  this  latter  option  is  a 
less  likely  concept  than  tho 
former. 

Other  geographic  factors  relate  to 
the  location  of  thehe  SuperCINC 
supporting  C2  Nodes. 

The  C2  Nodes  must  be  located 
at  a  major  informational  node 
with  timely,  reliable,  secure, 
and  redundant  communication 
capability. 

This  node  must  be  able  to 
provide,  in  equal  detail, 
information  from  a  number  of 
different  commands. 
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The  C2  Node  should  be  close  to 
the  central  geographical 
region  of* interest . 

The  location 'is- dependent  upon 
availability  of  the 
technologically  appropriate 
command  center. 

3 .  Organizational . 

The  options  available  were: 
Specific  SuperCINC  Cl  Nodo> 

(SSC2N) . and  the  Universal 
SuperCINC.  According  to  employment 
concept/  the  Specific  SuperCINC  has 
command  authority. only  with  respect 
to  the  CINCs  where  the  scenario 
overlaps  their  mandate.  The  ^ 
Universal  SuperCINC  has  command 
authority  with  respect  to  all  the 
CINCs. 

In  addition,  there  is  a  direct 
relationship  between  the  permanency 
of  authority  and  the  type  of 
supporting  C2  Nodes  that  must  be 
available.  For  example,  the 
command  authority  derived 
organizational  architecture 
definition  of  SuperCINC  points  out 
that  due  to  the  necessity  of  an 
appropriate  readiness  posture,  the 
supporting  command  center(s)  will 
be  permanent. 

In  summary,  the  selected  architectural 
alternatives  to  be  st  ^aequently  analyzed 
are: 

1.  Functional  operational  authority 
which  is  continuous  and  with 
authority  ove«  all  CINCs. 

2 .  Functional  operational  authority 
which  is  emergent  and  with 
authority  over  all  CINCs. 

3.  Functional  operational  authority 
which  is  continuous  with  authority 
over  that  sub~sot  of  the  CINCs 
whose  AOR  is  operant  with  respect 
to  the  scenario  in  play. 

4,  Functional  operational  authority 
which  is  emergent  with  authority 
over  that  , sub-set  of  the  CINCs 
whose  AOR  is  operant  with  respect 
to  the  scenario" in  play. 

In  order  to  refine  and  quantify  the 
architectures,  scenarios,  and  the  evaluative 
criteria,  five  tasks  must  be  completed: 
identification  of  the  joint  operational 
doctrines  to  be  associated  with  the  selected 
architecture^ ) ;  expansion  of  the  set  of 
evaluative  criteria;  application  of  the 
evaluation  approach  to  the  candidate 


architectures;  specification  of  SuperCINC 
requirements;  and' identification.- of  the 
conditions  for  employment  of  the  selected 
architecture'. 

Their  satisfactory,  conclusion  will 
-provide  the^basi^  for  an  implementation  plan 
to  remediate  the  problem  of  managing  global 
scale- warfare.  Thereafter;  priorities  for 
the  program  elements  which  will  address  the 
required  fixes  may  be  set  and  the  necessary 
resources,  mobilized.  Finally,  \  sequenced 
set  of  programs,,  phrased  in- te^ms  of  several 
evolutionary  contexts,,  must  be  developed. 
-These  contexts  focus  the  evaluation  upon  how 
well  the  SuperCINC  functions,  at  the  various 
stages  of  the  military  system  life  cycle. 
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USE. OF  THE  IFF*  JESTBEO  FOR  EVALUATING  AIR  C2 


Jaacs'E.  Haile, 


Identification  Friend,  Foe,  or  Neutral 


ABSTRACT 

The  Identification  Friend,  Foe,  or  Neutral 
(IFfti)  Joint  Test, Force  (JTF)  located  at  Xirtland 
AFB,  NM,  has  developed  a  testbed  that  is  composed 
of  high  fidelity,  real  time  (man-in-the-loop 
simulators  designed  to  replicate  the  NATO  Central 
Region  Integrated  Air  Defense  System.  The  purpose 
of  the  test  is  to  assess  the  ability  of  this  air 
defense  system  to  correctly  identify  and  engage 
enemy  aircraft.  The  testbed  represents  the 
largest  real  time  command  ;»Sd  control  (C4) 
simulation  which  consists  of  59  mediua  'and  high 
fidelity  tactical  consoles  and  over  a  million 
lines  of  code.  The  OSD-sponsored  testbed 
development  and  test  is  scheduled  to  run  through 
July  1989.  After  this  the  testbed  will  become  the 
Theater  Air  Command  and  Control  Simulation 
Facility  (TACCSF)  operated  by  the  USAF^Tactical 
Air  Warfare  Center.  The  facility-will  be  used  by 
both  Army  and  Air  Force  commands  to  resolve  Joint 
operational  issues  and  support  acquisition 
requirements. 


INTRODUCTION 

One  of  the  most  serious  problems  facing  the 
NATO  air  defense  forces  is  the  correct  and  timely 
identification  of  aircraft  in  a  tactical  air 
environment  which  includes  large  numbers  of 
friendly  and  hostile  aircraft,  electronic  warfare 
threats,  and  surface-to-air,  and  air-to-air 
missiles  that  operate  beyond  visual  range  (BVR). 
Numerous  studies  have  concluded  that  the- current 
electronic  identification  capabilities  are  too 
slo..,  individually  unsuitable,  for  positively 
identifying  hostiles  and  friends,  have 
insufficient  range,  and  are  sbject  to 
interference  from  electronic  countermeasures  and 
other  environmental  factors." 

Using  real  time,  man-in-the-loop  simulations 
of  Army.  Air  Force,  and  NATO  C2  and  weapons 
systems,  IFFN  was  designed  to:  assess  the 
baseline  capabilities  within  the  N..T0  Integration 
Air  Defense  C2  system  to  perform  the 
Identification  function;  identify  deficiencies  in 
the  performance  of  the  identification  function; 
and,  define  potential  near-term  procedural  and 
equipment  changes  to  overcome  the  deficiencies. 


TESTBED  DESCRIPTION 

The-overall  operational  scope  o'f  the  test  is 
summarized  in  Figure  I.  It  focuses  on  the  NATO 
Integrated  Air  Defense  System  within  the  Lauda 
Battle  Management  Area.  Consistent  with  defense 
planning  guidance,  a  standard  14/10  air  scenario 
is  used  with  the  NATO  air  defenses  defending 
against^  Warsaw  Pact  three  wave  attack.  Although 
NATO  offensive  air  and,  support  operations  are  not 
represented-  with  manned  simulators,  they  are 
explicitly  flown  in  the  air  scenario.  In 
addition,  the  operations  focus  on  a  1989  time 
frame  using  current  AAFCE  air  defense  plans  and 
air  space  control  procedures. 


SCENARIO 


The  overall 'testbed  configuration  representing 
the  Lauda  Integrated  Air  Defense"  Systems  is 
depicted  in  Figure  2.  There  are  three  types  of 
weapons  systems:  PATRIOT,  HAWK  Army  surfaceto-air 
missile  systems,  and  the  Air  Force  F- 15. 
Associated  with  these  weapons  are  their  respective 
command,  control,  and  communications  (C3) .  In  the 
case  of  the  PATRIOT  and  HAWK  there  are  battalion 
(BN)  fire  direction  centers  (FDCs)  with  a  brigade 
FDC  (TSQ-73)  controlling  the  two  BNs.  For  the 
F-15's,  the  primary  C2  is  a  CRP  (Modular  Control 
Equipment)  and  a  NATO  E-3A.  Controlling  the 
overall  Army  and  Air  Force  is  the  NATO  CRC  (German 
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Air  Defense  Ground  FsTireunect  -tvcrjf 

node  has  its  e^repriite  rose*  end  digital 
communications  replicated.  A  tatil  cf  3  high  end 
oedita  fidelity  sisulatcrs  comprise  the  tesihsd'- 
The  high  fidelity  simulators  are  used  for  data 
collection  and  are  rca  by  actcal  field  operators. 
These  are  depicted  in  Figure:  2  fcyihe  large  hexes. 
The  lexer  fidelity  simulators  are  operated  by 
trained  technicians  and  are  used  to  losd  the  high 
fidelity  simulators.  These  are  represented  by  the 
scalier  boxes'. 


Overall  Test  Cohfisuratioa 


The  overall  testbed  design  is  depicted  in 
Figure  3.  A  central  simulation  system  is  used  to 
generate  the  comprehensive  air  ~  scenario  with 
appropriate  tactics,  airspace  control  procedures, 
and  terrain.  This  scenario  is  then  provided  to 
four  different  types  of  simulation  through  a 
communications  subsystem.  These  simulators  are: 
PATRIOT,  HAWK,  F-15,  and  air  (£.  All  simulators 
are  located  at  Xirtland  AF8,  KM,  with  the 
exception  of  the  PATRIOT  which  is  at  Ft  Bliss,  TA. 


TESTBED  DESIGN 


Spare  A  dspicts  tie  FATETT  Butts*  u 
Cbtritisas  Sinaia  tors  at  Ft  Bliss.  Tfc.  Tie 
KiBClti  dtpicted  replicate  a  FATECT  fire  emit; 
aaether  is  ss«d  to  replicate  the  FSTECT  BS  FCE. 
These  high  fidelity  systems,  ere  used  by  the  Army 
for  prototype  spftarre  deialdpcest. 


Sext  in  Figure  5  is  a  picture  of  the  E3CC  fire 
Bait  simulator.  All  hey  functions  of  the  ESI 
system  are  replicated  and  eight  are  used  in  a  BS. 


figure  3 


Figure  &  is  tie  F-15  simulator.  It  uses  t> 
Ktal  f-15  stick  not  throttle  (IS!?)  wit* 
appropriate  sriidtt.  Tie  t^er  sanea  is  tie 
f-15  tuts  89  CiSfhr  «*fct  yrt'ects  iftstMi. 
alticwde.  attitnde,  iMr  target  Mt,  Mi  missile 
jfrMfjrs.  lie  liver  scree*  incltdes  all  tie 
flight  fatnwts,  radar,  electronic  Warfare 
Maiming  System  (3KJ.  Tactfcal  Electronic  Warfare 
Sjrsteo  Cnss),  and  Joint  Tactical  Information 
Distribution  System  (JTI35).  Tkls  flight 
simulator  is  wigte  ia  that  hainfc  of  friendly 
af  ewif  tracts  can  be  presented  to  the  pilots  ia 
a  realistic  fainting  errironont. 


fijtre  3  pee traps  tie  ao  sizslatfw  rases  ia 
tie  !S3  testced-  Situated  ia  the  Air  r/*mar, 4  Jti 
Cactrol  Simulation  root  are  tie  30  TCCD  coassies 
which  ore  configured  as  follows:  5  for  the 
>  for  the  OP,  ’2  for  the  OC,  2  for  tie  HK  SC 
FX,  2  for  tie  trijade  FDC,  asd  1  for  tie  Setter 
Operations  Crater.  All  of  these  consoles  are 
software,  regrogranaable  ss  other  configurations 
could  te  adfrtssH.  The  fire  wit  simulation  root 
coa talas:  4  F-15's,  3  HM*S,  6  PAT2I0T  test 
loaders,  5  F-15  test  loaders,  aad  2  test  loaders 
for  the.special  iafcnatioa  systems.  la  addition, 
there  are  the  four  consoles  at  Ft  Hiss  for  the 
PATJIOT  fire  wit  aad  M  K£. 


f-15  SimATOP 


Figure  6 


Figure  7  is  the  IFF*  tactical  contend  acd 
control  display  (TC CO).  The  right  screen  is  a 
touch  screen  that  contends  systen  functions-  The 
left  display  is  in  color  and  portrays  appropriate 
air  situations.  The  special  function  leys  on  the 
left  are  software  reprogramoeble  and  are  set  up 
with  a  teaplate.  Thirty  of  these  TCCO's  are  used 
in  the  IFF*  testbed. 


Figure  9  sumarizes  sooe  of  the  overall  testbed 
features  that  rates  it  the  largest  air  C^ 
simulation  in  the  world. 


TACTICAL  CCrnUiO  AXO  COVT20L  DISPLAT 


Ttstato  ranges 

o  St  nn  to  «diu(  riccim  ccucus 

-  suojsius  u  tipis  cf  t«iicu  ststob 
•  osus  7  tires  a  sti*  uns 

u  1.2  wuior  same  tws  cf  rattu  act 

a  cotmiis 

-  u  ccmkjwt  jzso/wso  awjTtss 

-  ei  «sir  rtacssas 

-  <52  minor  kstwcticw  r«  siawo  oritur 
o  titKist  orient 

-  2000 1 2C0CM  vim  cm  mum  nu 

-  2oco  nciirt  AiasifT 

-  123  Hiintw  fascist  pmiicipuiis 


Figure  9 
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iga  TcSTUS 


Tie  IFF*  JTF  to  date  has  compacted  three 
^entfoul  tests  inolvfiq  tie  PATRIOT,  PATRIOT 
m  fX,  aad  the  F-1S.  Five  acre  cmerlticml  tests, 
are  scheduled  through  1968  Miti  tie  HAW,  fc»W  M. 
Brigade  FDC,  ME-3A .  and  CRP.  Tie  gravd  finale  is 
tie  «f«th  test  ia  Wick  tie  CSC  coetrels  ilTtbe 
fire  nails  aad  subordinate  C2  nodes.  This  testing 
Mill  shoe  hw  each  eleeeat  Mitt  its  associated 
coMMfcatioas  both  iadividaally  aad  collectively 
contributes  to  the  air  defease  process.  Testing  \ 
to  date  is  shoming  that  coaplete  situation 
auareness  is  difficult  to  obtain,  there  are 
limitation  ia  correctly  ideatifyisg  aircraft,  and 
there  is  a  clear  need' for  integrated  Anqr/AF/XATO 
operational  testing  aad  training  under  siaulated 
vartiae  conditions. 


FOtUX-OM  TESTIhS 

In  1989,  the  IFF*  JTF  Mill  coaplete  its  OSD 
directed  testing.  At  that  point,  the  liSAF 
Tactical  Air  Coaaand  (TAC)  and  Army  Training  and 
Doctrine  Coonend  (TRADOC)  have  agreed  to  assuae 
ownership  of  the  testbed.  TAC  Mill  be  the 
executive  and  the  naae  of  the  facility  Mill  change 
to  Theater  Air  Coaaand  and  Control  Simulation 
Facility  (TACCSF).  Users  Mill  be  the  Aray,  Air 
Force,  OSO,  and  NATO.  The  neM  Mission  Mill 
encompass: 

-  Concepts,  tactics,  and, procedures 
developnent 

-  Developnental  and  operational  testing 

-  C2  systeas  integration  and  training. 

In  1990,  four  tests  are  planned  for  TACCSF. 
The  test  issues  have  major  operational 
significance  to  an  air  defense  in  the  MATO  Central 
Region  and  directly  involve  C2.  The  four  tests 
are: 

-  Alternate  F-15/HAWK/PATRI0T  employment 
options 

-  F-15  JTIPS  Met  Management 

-  HCE  CRC/CRP  Employment  concepts 

-  F-15  and  PATRIOT  protection  of  high  value 
airborne  platforms. 


In  1991,  TACCSF  is  pltaaiag  to  csoduct 
additional  tests  Which  are: 

-  Radar  inprsveseats  and  addition  of  ESK  to 
E-3 

-  Foraard  area  air  defense  (FAAO)  C2 
connectivities 

-  Duplications  of  XX  XV.- 

These  issues  regnire  sdue  eehanceaents  to  the 
testbed;  hence,  they  have  been  scheduled  for  the 
second  year  of  TACCSF. 

Other  C2  test  issues  that  are  being  considered 
for  1992  are: 

-  Alternate  airspace  control  procedures  for 
neu  C2  system 

-  Anti-tactical  ballistic  Missile  C2 
architecture 

-  C2  procedures  for  the  attack  of  tiae 
sensitive  ground  targets 

-  C2  in  support  of  offensive  air  nissions 

-  Passive  sensor  systens  for  the  CRC. 

There  is" a  general  agreenent  that  for  TACCSF  to 
realize  its  full  potential  as  a  XATO  air  C2 
testbed  jt  oust  add  sinulators  for  portions  of  the 
offensive-air  operations  and  C2.  This  Mill  enable 
TACCSF  to  explicitly  address  the  neM  MATO  ACCS 
concepts  of  combined  offensive/defensive  air 
operations.  \ 


SUMMARY- 

In  summary,  the  IFFH  testbed  developnent  is  on 
schedule  and  demonstrating  viable  capability. 
1FFM  test  results  to  date  have  produced 
significant  operational  insights  that  are  being 
addressed  by  the  Army,  Air  Force,  and  NATO 
operational  communities.  The  Army,  Air  Force,  and 
NATO  see  great  benefits  in  using  the  TACCSF  to 
investigate  a  host  of  very  complex  C->  issues 
starting  in  1990. 
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A  Testbed  Activity  to  Enhance  C3  Support  to 
Crists  Management 


C.  J.  Pasquartoto,  Center  tor  C3  Systems  (C*S), 
.  Defense  Communications  Agency  (OCA) 

S.  H-S'arr,  Washington  C3)  Division, 
the  MriRE  Corporation 


Abstract 

It  has  long  been  recognized  that  our  current  C3 
support  to  crisis  management  operations  is  subject  to 
significant  limitations  (e.g..  limited  flexibility, 
responsiveness,  and  capacity}.  Although  programmed 
C3  systems  should  ameliorate  some  of  those 
deficiencies,  these  enhancements  are  being  pursued 
on  a  piecemeal,  fragmentary  basis.  Consequently, 
there  is  a  need  fora  systematic,  integrated  approach  to 
address  residual  crisis  management  issues  by 
adapting  emerging  technologies  and  applying  new 
system  concepts. 

In  recognition  of  this  need,  DCA  has  initiafed  a 
testbed  .activity  to  enhance  C3  support  to  crisis 
management.  The  testbed  activity  will  draw  upon  and 
orchestrate  a  broad  spectrum  of  C3  evaluation  tools  to 
address  key  issues.  These  include  computer  models, 
manned  simulator  facilities,  exercises,  and  command 
center  evaluation  tools.  In  order  to  minimizo'The 
resources  and  time  associated  with  this  activity,  every 
effort  is  being  made  to  capitalize  on  existing  and 
programmed  tools. 

This  paper  provides  a  context  for  the  testbed 
activity  by  describing  the  crisis  management  process 
and  trends  that  are  affecting  its  evolution.  It  then 
identifies  and  discusses  key  C3  system  issues 
associated  with  crisis  management  activities.  Based 
upon  the  characteristics  of  those  issues,  a  set  of 
evalualion  tools  is  identified  and  a  concept  is 
formulated  for  orchestrating  those  tools.  The  paper 
concludes  with  a  discussion  ot  the  near-term  steps  that 
are  being  pursued  in  the  program. 


a.  Bac.Hgrowai 

As  background  for  the  paper,  this  section  provides 
a  definition  o(  a  crisis,  introduces  and  discusses  a 
conceptual  model  for  a  crisis,  broadly  descnbes  the  C3 
system  and  process  that  support  crisis  management, 
and  summarizes  trends  that  are  influencing  the 
evolving  system. 


1.  Definition 

The  spectrum  of  operational  environments  is 
frequently  subdivided  into  five  categories:  day-to-day 
(or  peacetime),  crisis,  conventional  conflict,  selective 
nuclear  release,  and  general  nuclear  response. 
Consistent  with  JCS  usage  (reference  1),  a  crisis  is 
defined  as:  *. .  .  an  incident  or  situation  involving  a 
threat  to  the  United  States,  its  territories,  and 
possessions  that  rapidly  develops  and  creates  a 
condition  of  such  diplomatic,  economic,  political,  or 
military  importance  to  the  U.S.  Government  that 
commitment  of  U.S.  mifitaiy  forces  and  resources  is 
contemplated  to  achieve  U.S.  national  objective." 

2.  Conceptual  Model  of  a  Crisis 

In  1977,  Tom  Bekfen  (referenced)  developed  a 
conceptual  model  for  indications  and  warning  activities 
that  provides  a  Useful  perspective  for  analyzing  crises. 
Central  Jo  the  conceptual  model  is  the  realization  that 
analyses  of  crisis  response  should  encompass  the 
adversaries,  their  allies,  and  interested  parties.  Tha 
crisis  "state"  of  any  participant  can  be  characterized  by 
a  "derision  stairway"  that  depicts  the  participant's 
probability  of  war  as  a  function  of  time. 

Figure  1  depicts  such  a  derision  stairway  for  a 
hypothetical' situation  in  which  a  participant  evolves 
(rom  a  day-to-day  posture,  through  a  crisis,  to  a  military 
conflict.  Transitions  in  the  probability  of  war  occur  as  a 
hypothetical  event  (e  g.,  a  border  incursion)  stimulates 
increased  vigilance;  adversary  response  prompts 
consultation  and  negotiation  with  allied  foreign  affairs 
and  military  aulhonties;  increasing  tension  prompts  tho 
issuance  of  diplomatic  responses  (e  g..  sternly  worded 
notes  of  protest)  or  economic  actions  (e.g.,  imposition 
of  sanctions);  the  degenerating  situation  results  in  the 
implementation  of  alert  measures  (e.g.,  moving  to 
higher  levels  of  DEFCON);  leading  to  a  show  ol  force 
(e.g.,  mobilization  of  ACE  Mobile  Forces  to  the 
troubled  spot),  and  ultimately  resulting  in  a  transition  to 
conventional  conllict  with  the  adversary.  Note  that 
transitions  in  the  decision  stairway  can  be  prompted  by 
political,  economic,  or  military  actions. 
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Figure  1.  Stylized  “Decision  Staircase’*  for  a 
Crisis  Participant 


This  technique  can  readily  be  extended  to 
characterize  and  analyze  complex,  multi-participant 
crises.  For  example.  Figure  2  conceptually 
characterizes  the  major  interactions  of  the  Arab-lsrael 
War  in  1973,  where  the  actions  of  the  Arabs 
(participant  A)  stimulated  responses  from  the  IsraeEs 
(participant  B);  ultimately  resulting  in  a  conventional 
conlSct  These  events  subsequently  precipitated  crisis 
responses  in  the  United  States  (participant  C)  and  the 
Soviet  Union  (participant  D)  as  they  monitored  the 
evolving  crisis  and  supported  their  national  interests  in 
thei  egicn.  The  latter  nations  found  themselves  in  an 
escalating  crisis  situation  when  the  Israelis  crossed  the 
Suez  Canel  and  threatened  to  annihilate  the  Egyptian 
Third  Army.  That  secondary  crisis  was  contained  as 
the  Arab-lsraeli  conflict  ultimately  transitioned  to  a 
stable  ce'ase  fire. 


Figure  2.  Simplified  Decision  Stairways  for 
_ Four-Participant  Crisis. 


This  perspective  of  the  prcbSem  suggest;  that 
attempts  to  analyze  broad  C3  support  to  crisis 
management  must  be  able  to  deal  with  the  dynamic 
interactions  of  the  many  participants  involved  in  the 
multiple  facets  of  a  crisis  (e.g.,  military  operations. 
<£pk>ma5c  actions.  irseSgence  gathering). 


Figure  3  provides  a  preliminary  characterization  of 
U.S.  crisis  behavior  patterns,  based  upon  analyses  ol 
ten  major  crises  from  1 958  (Le.,  Lebanon)  to  1975  (Le¬ 
the  Mayaguez)  and  six  major  exercises  from  1973  (i.e., 
Night  Train)  to  1976  (i.e.,  E'egarrt  Eagle)  (reference  3). 
These  results  give  rise  to  three  major  observations. 
First,  the  curve  labeled  "crisis  intensity"  suggests  the 
general  shape  of  the  "decision  stairway"  for  the  sample 
set,  beginning  with  a  rapid  buildup  of  the  typical  crisis 
which  gradually  tapers  off  as  the  crisis  is  resolved. 
Second,  it  is  interesting  to  note  that  the  level  of  forces 
deployed  lagged  the  crisis  intensify  and  tended  to 
peak  well  after  crisis  intensity  had  slacked  off 
considerably.  An  extreme  example  of  this  behavior 
was  manifested  in  the  Mayaguez  crisis  where  Marines 
landed  after  the  safety  of  the  ship  was  no  longer  in 
doubt.  Third,  the  oscillatory  nature  of  the  staff 
workload  may  be  indicative  of  significant  bottlenecks  in 
the  command  and  control  process.  Curves  of  this 
nature  are  frequently  descriptive  ol  a  closed  loop 
control  system  characterized  by  appreciable  time 
delays  and  peak  demands  that  exceed  the 
instantaneous  capacity  of  the  system.  It  should  be 
noted  that  the  curve  on  staff,  workload  was  derived 
solely  from  exercise  data  because  no  comparable 
information  was  collected  and  maintained  for  actual 
crises. 


Figure  3.  Observed  Crisis  Behavior  Patterns. 


These  observations  suggest  that  crisis 
managemert  measures  of  merit  should  be  employed 
that  characterize  the  intensity;  of  the  crisis,  the- 
timeSness  cl  crisis  actions,  arid  the  Stef  workload.  In 
order  to  evaluate  these  measures  of  merit,  evaluabon 
tools  are  needed  that- reflect  the  capabicties  and 
limitations  of  the  C3  system  that  supports  crisis 
management  actions  and  the  process  that  these 
personnel  employ. 

3.  C3  System  to  Sunoort  Crisis  Management 
Since  crisis  management  can  require  the 
participation  of  many  UiS.  government  (and  allied) 
organizations,  a  complex  C3  system  has  evolved  over 
the  years  to  support  it  Figure  4  depicts  a  critical 
sub-set  of  that  syslem.  The  system  is  headed  by 
representatives  of  the  National  Command  Authority 
(NCA)  in  the  White  House.  They  are  provided 
operational  support  by  the  White  House  Situation 
Room  Support  Staff  (WHSSS):  Reporting  lo  the  White 
House  is  a  chain  of  organizations  from  the  defense 
-  community.  They  are  led  by  the  Secretary  of  Defense 
(or  his  representative)  operating  from  the  newly 
created  Crisis  Coordination  Center  (CCC)  in  the 
Pentagon.  He  is  assisted  by  the  Chairman,  Joint 
Chiefs  of  Stall,  and  his  supporting  organization, 
operating  out  of  the  National  Military  Command 
Center  (NMCC)  in  the  Pentagon.  They,  in.tum,  are 
supported  by  the  involved  Unified  and  Specified 
Commanders-in-Chief  (CINCs)  operating  from 
appropriate  nodes  of  the  Worldwide  Military  Command 
and  Control  System  (WWMCCS). 


Figure  4.  Subset  of  Crisis 

Management  System. 


Since  most  crises  have  important  diplomatic  and 
economic  ramifications,  crisis  management  generally 
involves  participants  at  crisis  management  centers 
supporting  a  broad  range  o)  civil  departments  and 
agencies  (e  g„  State,  Treasury,  Federal  Emergency 


Management  Agency  (FE1AA)).  In  adddon,  support  is 
forthcoming  from  the  inteSgence  community  from  sites 
s  as  Langley.  Virginia,  and  FL  Meade,  Maryland. 

4.  Crisis  Management  Processes 

Figure  5  provides  a  high  level  characterization 
of  the  processes  that  are  performed  at  the  NMCC  in 
support  of  crisis  inanagement.  Ceils  are  estabSshed  to 
support  stuatdri  monitoring  and  execution  monitoring. 
The  situation  monitoring  process  involves  the 
monitoring,  and  evaluation  of  .  worldwide  events, 
military  operations,  and  force  status  (e.g.,  friendly, 
other, parties).  Similarly,  the  execution  monitoring 
process  subsumes  the  monitoring/assessment'  of 
military  operations 'in  progress,  the  assessment  ot  the 
adequacy  of  operations;  and  the  response  to  requests 
(e.g.,  forces,- other  support).  The  information  from 
these  cells  is  provided  to  the  crisis  control  cell  and  the 
crisis  action  system  cell.  The  crisis  control  cell 
establishes  crisis  procedures  and  makes  action 
assignments;  monitors  crisis  processes,  actions,  and 
status;  and  prepares/presents  options,  plans,  and 
requests  to  senior  decisionmakers.  In  support  ot  the 
crisis  control  cell,  the  crisis  action  system  reviews  and 
assesses  the  situation,  preliminary  deployment 
planning,  and  closure  estimates:  and  prepares  and 
reviews  warning,  alert,  operations,  and  executive 
orders. 


5.  Trends 

There  are  a  number  of  trends  in  the  area  of 
crisis  management  that  affect  the  process  and  the 
system  that  is  emerging  to  support  it.  First,  there  is  an 
appreciation  that  the  threat  is  growing.  The  volatility 
of  world  events  gives  rise  to  nearly  constant  tension 
and  greater  nsk  of  terronsm  and  low  intensity  conflict 
In  response  lo  that  perceived  threat,  new  policy,  and 
force  structure  is  emerging  In  particular,  increased 
emphasis  is  being  placed  on  the  enhancement  and 
use  ol  Special  Operations  Forces.  In  consonance  with 


these  trends,  the  management  of  crises  is  becoming 
more  complex.  The  increased  scope  of  recent  crises 
has  involved  the  pariidpalion  of  addtional  players  in 
both  the  dviian  and  rnStary  communities.  In  addition, 
in  several,  recent  crises  (e.g..  Iran  hostage,  Achille 
Laurci.  Persian  Gulf),  the  political  ramifications  and 
volatility  have  forced  high  . level  decisionmakers  to 
address  extremely  complex  issues,  frequently  under 
very  tight  time  constraints. 

From  a  C3  systems  perspective,  several  trends 
have  become  apparent  that  will  affect  crisis 
management.  It  is  widely  recognized  that  the  C3 
system  that  has  been  deployed  to  support  crisis 
management  has  significant  Gmitations  (e.g.,  Gmited 
flexibility,  responsiveness,  and  capacity-see  Figure 
3~).  Several  programs  have  been  initiated  to 
ameliorate  those  limitations,  most  notably  the 
■WWMCCS  Informafion  System  (WIS).  However,  these 
programs  have  been  beset  with  significant  difficulties. 
WIS  has  experienced  major  delays  and  is  undergoing 
a  major  management  review.  In  addition,  many  of  the 
enhancements  that  are  beirigmade  to  individual  C3 
nodes  tend  to  reflect  a  Gmited  appreciation  of  the  total 
crisis  management  problem  and  are  being  imperfectly 
integrated,  coordinated,  and  evaluated.  In  spite  of- 
these  obstacles,  there  is  considerable,  optimism  that 
the  rapid  emergence  of  new  technology  in  the  areas  of 
processing,  display,  data  base  management!  aqd 
decision  aids  has  the  potential  to  enhance  C3  support 
to  crisis  management. 

B.  Objectives  and.Guidance 

This  section  outlines  the  objectives  of  the  OCA 
testbed  activity  and  describes  the  factors  that  are 
guiding  and  focusing  the  effort.  The  most  sigmGcant  of 
these  factors  include  the  management  guidance  that 
has  emerged  from  recent  senior  advisory  boards, 
programmatic  guidance  to  minimize  resource  needs 
and  time,  and  a  perception  of  the  key  issues  that 
remain  to  be  addressed. 

i.  Objectives 

In  view  of  the  trends  in  crises  and  the 
supporting  C3  system,  DCA/C^S  is  initiating  a 
distributed  testbed  activity  to  adapt  emerging 
technology  and  new  system  concepts  lor  -the 
improvement  ol  crisis  management.  To  achieve  that 
objective,  the  testbed  activity  is  being  designed  to 
realize  four  sub-objectives. 

•  Rapid  prototyping.  The  testbed  activity  will 
provide  a  vehicle  (or  rapidly  dovaloping  and 
evaluating  prototype  systems  to  support  crisis 
management.  Emphasis  will  be  placed  on 
prototyping  new,  improved  decision  support 
systems  to'assist  staff  members  in  situation 
development,  crisis  assessment,  course  of 
action  development,  and  execution. 


•  Requirements  refinement.  The  testbed 
activity  wil  provide  a  mechanism  for  enhancing 
communications  between  the  operational  and 
systems  development  communities.  This  will 
fadGtate  the  translation  of  operational  needs 
into  technical  requirements  whose  program¬ 
matic  implications  (e.g.,  resources,  schedule) 
are  more  dearly  understood. 

•  Analytical  evaluation.  The  testbed  adivity 
will  subsume  the  development  of  analytical 
tools  that  provide  a  means  to  evaluate  the 
performance  and  effectiveness  of  existing'  and 
proposed  crisis  management  piocedures  and 
supporting  systems. 

•  Test  and  evaluation.  The  testbed  activity 
will  include  test  and  evaluation  activities  to 
extend  the  findings  of  rapid  prototyping  efforts 
and  to  fadGtate  the  transfer  of  this  technology 
into  fielded  systems. 

2.  Management  Guidance 

These  objectives  have  been  selected  to 
respond  to  management  guidance  that  has  emerged 
from  four  recent  efforts:  the  Packard  Commission 
(reference  3),  the  DCA  Technology  Conference 
(reference  4),  the  Defense  Science  Board  (DSB)  Task 
Force  on  C2  Systems  Management  (reference  5),  and 
a  DSB  Summer  Study  on  Technology  Base 
Management  (reference  6).  The  Packard  Commission 
was  convened  by  President  Reagan  to  explore  options 
to  streamline  the  acquisition  of  DoD  systems.  It 
recommended  that  DoD  reduce  the  time  and  risk 
associated  with  acquisitions  by  expanding  its  use  of 
rapid  prototyping  and  acquiring  systems  in  an 
evolutionary  manner.  The  proposed  testbed  activity 
provides  one  vehicle  to  implement  this  philosophy. 

The  DCA  Technology  Conference  was  convened 
in  the  Fall  of  1986  to  identify  technologies  that  promise 
to  enhance  substantively  C3  system  capabilities.  It 
was  concluded  that  a  distributed  rapid  prototyping 
testbed  is  feasible  and  desirable  to  support  the 
development  of  C3  systems  that  supported  multiple  C3 
noces.  The  proposed  testbed  activity  will  draw  on  that 
technology  to  achieve  its  objectives. 

The  DSB  Task  Force  oh  C2  Systems  Management 
issued  a  report  in  July  1987  to  revisit  key  issues  that  it 
had  assessed  ten  years  earlier.  It  called  out  the  need 
to  develop  an  overarching  DoD  C3  architecture,  to 
pursue  a  well-tocused  command  and  control  research 
program,  and  to  extend  etforts  to  exercise  and 
evaluate  C3  systems  in  a  mission  context.  With 
respect  to  the  latter  area,  it  specifically  noted  that  ’the 
combination  of  operational  exercises  and 
user-oriented  testbed  activities  represent  major 
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opportunities  to  maximize  current-system  readiness 
and  assess  command  and  cordial  performance.'  The 
mix  of  tools  envisioned  in  tfvs  testbed  activity  echoes 
that  philosophy. 

The  DSB  Summer  Study  on  Technology  Base 
Management  advocated  6.3A  Advanced  Technology 
Transition  Demonstrations  (ATJDs)  as  "an  extension  of 
the  Packard  Commission  prototyping  recommen¬ 
dation.'  The  objective  of  an  ATTD.  would  be  to 
demonstrate  'proof-of-prindple'  in  an  operational  vice 
purely  laboratory  environment  Programmatically,  it's 
anticipated  that  a  representative  activity  would  last 
approximately  three  years  at  a  total  program  cost  of 
S10-100M.  The  proposed  testbed  activity  may  be  an 
attractive  candidate  for  an  ATTD. 

.  In  t.-der  to  minimize  the  time  and  resources  for 
the  crisis  management  testbed  activity,  the  following 
guidelines  have  been  adhered  to  in  structuring,  the 
program.  Initially,  the  activity  will  focus  on  core, 
command  center  initiatives  (e.g.,  enhancements  to  the 
WHSSS,  CCC.  NMCC).  Preliminary  activities  will 
assist  in  refining  system  requirements  and  explore  the 
feasibility  of  accelerated  application  of  emerging 
technology.  To  minimize  the  possibility  of  duplication 
of  effort,  the  testbed  activity  will  be  configured  to  tie  in 
with  the  testbed  programs  of  the  Services  and  DARPA. 
In  addition,  it  will  complement  existing  crisis 
management  activities  in  several  areas.  In  support  of 
plans  and  architectures  (e.g..  JCS  C2  Master  Plan. 
Wide-Area  Surveillance  Architecture),  the  testbed 
activity  will  evaluate  and  validate  proposed  concepts. 
In  conjunction  with  exercises  and  evaluations  (e.g. 
JCS  CPXs,  OSD  Serial  Exercises),  the  testbed  activity 
will  identify  new,  improved  decision  supportsystems 
that  can  be  assessed  in  the  context  of  a 
quasi-operational  environment. 

4.  Keyissuss 

Several  key  crisis  management  issues  have 
emerged  in  recent  years  that  will  be  addressed  by 
applying  the  testbed  activity  resources.  These  issues 
can  be  aggregated  into  five  major  areas:  data/data 
management,  information  systems,  communications/ 
connectivity,  decision  aids,  and  systems  evaluation. 

In  the  area  of  data/data  management,  there  are 
pervasive  problems  for  all  Sf  the  major  crisis 
management  nodes.  It  is  recognized  that  the  data 
required  to  support  operators  and  decisionmakers'  is 
highly  diffused  and  there  is  a  need  to  retrieve, 
manipulate,  and  display  it  more  effectively.  In 
particular,  there  is  a  need  for  a  data  fusion  capability 
that  can  consolidate/integrate  available  information 
into  a,  complete,  consistent,  and  coherent  picture  of 
friendly  and  adversary  status. 


In  the  area  of  information  systems,  most  of  the 
crisis  management  nodes  lack  effective  automated 
message  handling  systems  to  format,  catalog,  or 
sort/route  incoming  or  outgoing  messages.  In  addition, 
all  of  the  nodes  lack  required  multi-level. security 
features.  This  is  particularly  important  for  crisis 
management  where  selected  information  fends  to  be 
veiy  sensitive  and  'dose  hold.* 

Problems'  in 'communications/connectivity  ere 
endemic  in  the  crisis  management  community.  As 
noted  above,  the  sensitivity  of  selected  data  mandates 
the  use  of  limited  distribution  communications  to 
restrict  its  dissemination.  In  addition,  there  is  concern 
that  H  will  prove  difficult  to  connect  reliably  and  rapidly 
to  a  Joint  Task  Force  that  has  been  deployed  to 
respond  to  a  crisis.  Overall,  there  is  need  for  an 
overarching  crisis  communications  architecture  to 
specify  the  appropriate  interfaces  and  information 
exchanges  among  the  nodes  of  the  system. 

There  is  wide-spread  interest  in  developing  and 
evaluating  decision  aids  to  support  personnel 
throughout  the  crisis  management  system.  These 
decision  aids  have  the  potential  to  support  many  key 
tasks  including  data  base  management  and  display, 
assistance :  in  selecting  courses  of  action,  and 
institutional  implementation  of  selected  courses  of 
action. 

Finally,  there  is  a  continuing  need  to  evaluate  the 
crisis  management  process  from  a  total  systems  point 
of  view,  capturing  the  interactions  of  the  key 
participants.  Prior  efforts  have  tended  to  view  the 
problem  from  a  fragmented,  sub-systems  perspective 
and  have  failed  to  identify  and  ameliorate  many,  of  the 
C3  issues  that  have  hindered  actual  crisis  operaiions. 

C.  Testbed  Activity  Resources  and  Concept 

Due  to  tire  breadth  of  issues  associated  with  the 
crisis  management  area,  it  was  rapidly  concluded  that 
no  single  tool  would  be  adequate  to  satisfy  the  full  set 
of  program  objectives.  Consequently,  an  orchestrated 
set  of  tools  was  sought  drawing  on  computer  models, 
testbed  facilities,  exercises,  and  assessment  tools.  To 
the  extent  feasible,  efforts  were  made  to  identify 
existing  tools  that  could  be  modified  to  satisfy 
program  needs.  This  section  describes  the  key 
resources  that  were  identified  to  support  the  program 
arid  the  concept  that  has  emerged  to  synthesize  them 
into  a  consistent  acfvity. 


a.  Computer  Models 

Computer  models  were  sought  to  support 
two  needs:  to  perform  preliminary  analyses  ol  crisis 
management  performance  subject  to  hypothesized 
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variations  m  procedures,  supporting  C3cystems,  and 
threat;  and  to  stimulate  candidate  manned  simulator 
testbeds. 

To  meet  the  first  need,  a  search  for  a  viable: 
computer  model  identified '  the  Action  Processing  - 
Model  (APM).  This  batch-processed,  FORTRAN  model 
was  designed  and  implemented  Tri  the  late  1 970'sjry 
IBM  under  guidance  from  DCA  (reference' 3).  This  tool 
models  crisis  management  operations,  detailing 
interactions  among  key  command  centers-(e.g., 
NMCC)  and  forces.  It  requires  the  analyst  to  input  the 
system  architecture  (e.g.,  resources,  procedures)  and 
a  crisis  scenario  and  it  characterizes  measures  of- 
performance  that  include  workload  capacity, 
information  quality,  and  timeliness.  Efforts  are 
currently  underway  to  explore  the  desirability  and 
feasibility  of  upgrading  APM  to  include  recent 
advances  in  simulation  technology  (e.g., 
knowledge-based  techniques  to  capture  cognitive 
factors). 

To  support  the  need  for  a  testbed  stimulator,  initial 
attention  has  focused  on  the  Research,  Evaluation, 
and  Systems  Analysis  (RESA)  model.  This  model  is 
an  outgrowth  of  work  performed  at  NOSC  over  the  last 
decade.  It  currently  consists  of  250K  lines  of 
FORTRAN  instructions  that  encompass  an  extensive 
naval  data  base  (e  g..  400  ships/subs.  SOaircraft,  60 
weapons)  and  multiple  sub-models  (e.g.,  kinematics, 
sensors/systems,  wide-area  surveillance,  and 
weapons/damage).  Programs  are  underway  to 
augment  the  data  base  with  information  germane  to 
Army  and  Air-Force  operations  (e.g.,  terrain,  missiles, 
Corps  to  company  symbology).  This  stimulator  could 
be  used  to  provide  the  operational  context  that  would 
underlay  a  simulated  crisis. 

b.  S&TestM  Facilities 

C3  testbed  facilities  were  assessed  to 
identify  environments  in  which  the  crisis  management 
performance  of  human  operators  could  be  assessed 
when  subjected  to  the  stresses  of  a  simulated  cnsls. 
The  facility  in  question  had  to  satisfy  several  stringent 
cnteria: 

•  Flexibility.  The  testbed  had  to  be  flexibly 
reconfigurebte  to  provide  a  context  lor 
assessing  the  performance  of  rapid  proto¬ 
types  ol  programmed  and  planned  crisis 
management  sub-systems  (e.g..  decision 
support  systems). 

•  Realism.  The  testbed  had  to  support  the 
realistic  emulation  of  controlled  situations 
that  could  stress  the  crisis  action  system. 


•  AccessibiEtv.  The  fadSty  had  to  be  avail¬ 
able  for  substantial  blocks  of  time  so  that 
statistically  meaningful  numbers  of  test 
replications  could  be  run. 

•  Fvnlvabilitv.  The  testbed  had  to  be 
capable  of  evolving  fo  a  multi-site  fadSty  to 
deal  with  the  distnbuted  nature  of  the  crisis 
management  system. 

After  evaluating  a  number  of  candidate  facilities 
against'these  criteria,  the  MITRE/DCA  Command 
Center  Engineering  Laboratory  (CCEL)  was  selected 
as  the  nucleus  for  the  Crisis  Management  Testbed 
Facility.  This  facility  consists  of  extensive  ADP 
resources  (eg.,  micro  VAX  with  graphics  processor 
and  complement  of  intelligent  terminals),  woikstations 
(e.g.,  Apollo,  PC  XT  &  AT  workstations),  a  fiber  optic 
local  area  network,  video  equipment  (e.g.,  large 
screen  wall  projector),  and  extensive  software 
resources  (e.g.,  various  compilers,  data  base 
management  systems).  The  facility  has  been  used  in 
prior  programs  to  develop  and  evaluate  prototypes  of 
an  Executive  Briefing  System,  an  ’Electronic 
Notebook’  (based  on  commercial  products  such  as 
advanced  hypertext  software  and  emerging  digitized 
video),  and  the  Automated  Emergency  Action 
Message  Preparation  and  Dissemination  System 
(AEPDS).  Upgrades  to  the  laboratory  are 
programmed  that  should  enhance  its  utility  as  a 
testbed  for  C3  support  to  crisis  management. 

The  Joint  Directors  of  Laboratories  Simulation 
Network  (JDLNET)  was  also  assimilated  into  the 
program  in  order  to  extend  the  testbed  to  deal  with 
distributed  C3  issues.  JDLNET  is  evolving  to  support 
joint  activities  relating  to  distnbuted  C3  systems  using 
the  Defense  Integrated  Secure  Network  (DISNET),  a 
•  subnetwork  of  the  Defense  Digital  Network.  Early 
participants  on  the  network  include  NOSC,  CECOM, 
RADC,  and  the  Naval  Postgraduate  School.  This 
capability  is  discussed  in  detail  in  reference  5. 

The  Rand  Strategy  Assessment  System  (RSAS) 
has  been  developed  under  the  sponsorship  of  the 
Director,  Net  Assessment,  OSD  (reference  8).  The 
system  has  been  designed  to  combine  selective 
features  of  political-military  wargaming  and  analytic 
modeling,  One  of  its  distinctive  features  has  been  the 
use  of  decision  models  to  represent  selected  military 
command-level  and  political  level  decisionmaking 
processes  in  game  play.  Since  many  crises  involve 
high  level  political,  military,  and  diplomatic 
decisionmakers  from  several  nations  (see  discussion 
in  Section  A.2),  there  is  considerable  interest  in 
adapting  the  RSAS  decision  models  to  the  needs  of 
the  DCA/C4S  testbed.  It  is  anticipated,  however,  that 
those  models  will  have  to  be  tailored  extensively  to 
respond  to  ttie  specific  issues  of  interest  in  the  DCA 
program. 


c.  Exercises  ' 

To  facilitate  the  translation  cf  new  concepts 
and  systems  into  the  operational  community,  the 
testbed  activity  will  take  advantage  ot' planned  tests 
and  exercises  (T&Es).  These  T&Es  will  provide  an 
opportunity  to  extend  the  assessment  of  key  products 
to  reflect  many,  of  the  factors  that  characterize  a 
realistic  operational  environment. 

Three  classes  of  exercises  have  been  identified 
that  are  well  suited  to  the  needs  of  the  program: 
1)  selected  JCS  Command  Post  Exercises  (CPXs): 
these  exercises  are  conducted  biannually  to  train 
participants  in  the  use  of  the  crisis  management 
system;  2)  OSD/JCS  No-notice  Interoperability 
Exercises  (NIEX):  as  the  title  suggests,  these  activities 
are  conducted  with  limited  advance  warning  to  assess 
the  readiness  of  joint  forces  to  interoperate  effectively; 
and  3)  OSD  Serial  Exercises:  these  are  a  sequence  of 
relatively  limited  exercises  that  have  been  conducted 
to  validate  new  concepts  of  operation  (e.g.,  to  explore 
the  concept  of  industrial  readiness  states  that  would 
correspond  to  traditional  defense  conditions 
(DEFCONs)). 

d.  Assessment  Tools 

One  of  the  major  problems  in  employing  the 
proposed  testbed  is  the  difficulty  in  objectively 
assessing  and  quantifying  a  C-*  facility's  performance 
and  effectiveness.  In  recent  years  a  Headquarters 
Effectiveness  Assessment  Tool  (HEAT)  has  been 
developed  and  applied  by  DCA  and  several  Services 
(e.g..  reference  9).  The  tool  utilizes  a  framework  that  is 
based  on  the  processes  that  a  headquarters  performs 
(e.g.,  monitor,  understand,  plan-develop  alternative 
actions,  plan-predict  consequences,  direct,  inform). 
Efforts  are  contemplated  to  adapt  this  framework  to 
meet  the  evaluation  needsof  the  crisis  management 
testbed  activity. 

2.  leabe.dActi«iy.C,ancepl 

Figure  6  illustrates  the  concept  that  has  emerged 
•o  synthesize  the  individual  evaluation  resources  into  a 
consistent  testbed  activity. 


Figure  6.  Testbed  Activity  Concept. 


A  representative  application  of  the  testbed  activity 
might  begin  with  a  preliminary  analysis  of  a  crisis 
management  issue  using  an  upgraded  version  of  the 
APM  computer  model.  That  tool  could  be  used  to 
perform  a  preliminary  assessment  of  the  impact  of  a 
proposed  system  or  change  in  operational  concept  on 
crisis  management  effectiveness.  This  assessment 
would  include  sensitivity,  analyses  to  evaluate 
variations  in  effectiveness  as  a’function  of  key  external 
variables  (e.g.,  scenario). 

If  the  findings  of  that  assessment  were  promising, 
the  next  step  would  be  to  analyze  the  issue  in  greater 
depth  using  man-in-the-loop  simulation-techniques. 
The  results  of  the  APM  analysis  would  be  used  to 
-  design  the  experimental  test  matrix  for  the  system  to  be 
tested  in  the  CCEL.  If  appropriate,  a  rapid  prototype  of 
the  concept  would, lie  fabricated  and  integrated^mto 
the  CCEL.  A  number  of  controlled  replications  would 
then  be  conducted  to  assess  the  concept  to  desired 
levels  of  statistical  confidence.  A  variant  of  HEAT 
would  be  used  to  evaluate  the  results  of  the  test  runs. 
As  one  application,  the  HEAT  results  would  be 
employed  to  upgrade  the  APM.  If  the  issue  in 
question  involved  distributed  C-*,  the  activity  would 
draw  upon  JDLNET  and  modified  modules  from  the 
RSAS  to  emulate  the  other  nodes  in  question. 

There  are  several  possible  applications  of  the 
results  of  the  man-in-the-loop  simulation.  First,  they 
could  serve  to  refine  the  requirements  for  the  system 
under  test  to  facilitate  its  acquisition.  Conversely,  they 
could  provide  proof-of-principle  for  the  system, 
particularly  if  the  system  in  question  were  a  new, 
improved  decision  support  system.  For  the  latter  case, 
the  system  cop'd  then  be  further  assessed  in  the 
context  of  a  T&E.  That  would  provide  the  opportunity 
to  evaluate  the  system  in  a  more  operationally  realistic 
environment  and  to  facilitate  the  technology  transition 
process.  If  the  results  of  the  T&E  were  positive,  the 
candidate  improvement  could  then  move  into  the 
appropnate  acquisition  stage.  The  results  of  the  T&E 
would  also  be  used  to  refine  further  the  APM. 


D.  Near-Term  Activities 

In  the  near-term,  two  complementary  testbed 
activities  are  envisioned:  rapid  prototyping  and 
research  and  evaluation. 

1.  Rapid  .Prototyping 

Several  candidate  rapid  prototyping 
activities  are  under  consideration  for  near-term 
implementation. 

•  NMCC  Enhancements.  There  is  great 
interest  in  developing  and  evaluating  Joint 
Operational  Tactical  System  (JOTS) 
variants  to  enhance  the  fusion  of  informa¬ 
tion  in  the  NMCC.  The  proposed  test 
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would  be  undertaken  to  identify, information 
.  requirements  and -to  assess  function 
.enhancements. 

CCC  Applications.  The  CCC  currently 
employs  paper  copies  of  Emergency 
Action  Packages  (EAPs)for  operators  to 
refer  to  during  crisis  operations.  There  is-.- 
interest  in  automating  these  packages  and  ■ 
enhancing  their  utility  by  incorporating  a 
natural'languagei  interface  and  expert 
system  technology. 

•  White  House  Upgrades.  There  is 
interest  in  enhancing  the  interface  of 
the  WHSSS  with  many  of  the  other  nodes 
of  the  crisis  management  system.  When 
JDLNET  is  fully  integrated  into  the  testbed 
activity,  it  could  be  used  to. demonstrate 
proof-of-concept  of  proposed  capabilities 
to  exchange'  information  and  finished 
products. 

2.  Research  and  Evaluation 

Three  research  and  evaluation  activities 
are  envisioned;to  satisfy 'the  needs  of  the  testbed 
activity.  First,  consideration  Is  being  given  to  updating 
and  applying  the  APM  computer  model  to  support  the 
generation  and  validation  of  crisis  action  system 
architectures  and  plans.  Second,  several  activities  are 
under  consideration  to  support  testbed  stimulation  and 
internetting.  These  include  refining  RESA  to  use  as  a 
testbed  stimulator  and  developincpa.plan  for  evolymg 
to  a  distributed  testbed  capability.  Finally,  there  is 
interest  In  adapting  the  HEAT  methodology  to  support 
testbed  evaluations. 

E.  Summary 

A  concent  (or  a  testbed  activity  has  been 
formulated  that  promises  to  provide  a  sound 
foundation  to  address  C3  support  to  crisis 
management  from  a  total  systems  perspective.  An 
incremental  approach  is  being  pursued  to  evolve  the 
needed  infrastructure  while  developing  key  near-term 
p'roducts.  Foremost  among  these  near-term  products 
.are  rapid  prototypes  (e.g.,  JOTS  variants,  automated 
EAPs),  analytical  models  (that  can  be  employed  to 
supportothe  generation  and  validation  of  crisis 
management  architectures  and  plans),  and  systems 
interfaces  (e.g..  interfaces  betweervthe  WHSSS  and 
the  CCC).  Ultimately,’ the  pace  and  scope  ot  the 
activity  will  be  driven  by  the  availability  of  resources. 
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ABSTRACT 

THE  CHAIRMAN  OF  THE  JOINT  CHIEFS  OF  STAFF 
(CJCS)  IS  THE  PRINCIPAL  MILITARY  ADVISOR  TO 
THE  NATIONAL  COMMAND  AUTHORITIES  (NCA) .  IN 
l$IMES  OF  CRISIS,  .THE  CJCS  PROPOSES  MILITARY 
COURSES  OF  ACTION  TO  THE  NCA  AND  REPRESENTS 
THE  MILITARY  STAFF  IN  THE  CHAIN  OF  OPERATIONAL 
COMMAND  WITH  RESPECT  TO  THE- UNIFIED  AND 
SPECIFIED' COMMANDS.  THE  NATIONAL  MILITARY 
COMMAND  CENTER  (NMCC)  IS  THE  FOCAL  POINT  FOR 
DEFENSE  RELATED  INFORMATION  SUPPORTING  THE 
CJCS  AND  THE  JOINT  CHIEFS  OF  STAFF  (JCS) . 
WITHIN  THE  NMCC,  THE  CRISIS  ACTION  SYSTEM 
(CAS)  IS  ACTIVATED  TO  CONDUCT  TIME- SENSITIVE 
PLANNING  DURING  A  CRISIS  SITUATION.  THIS 
PAPER  DISCUSSES  THE  INCREASING  FREQUENCY  OF 
CRISIS,  THE  CHANGING  NATURE  OF  CRISIS/  AND 
DESCRIBES  HOW  WARFARE  SIMULATION  WILL  BE  USED 
AT  A  DCA  NODE  ON  THE  JDL-SPONSORED  SIMULATION 
NETWORK  (JDLNET)  TO  STUDY  HARDWARE,  SOFTWARE, 
AND  PROCEDURAL  IMPROVEMENTS  TO  THE  CRISIS 
ACTION  SYSTEM  (CAS) .  USING  THE  NAVAL  OCEAN 
SYSTEMS  COMMAND  (NOSC)  RESEARCH,  EVALUATION, 
AND  SYSTEMS  ANALYSIS  (RESA)  SOFTWARE  PACKAGE 
AS  A  CRISIS  EVENT  DRIVER  -  AND  OTHER  JDLNET 
NODES  PARTICIPATING  AS  THE  SUPPORTED  AND 
SUPPORTING  COMMANDERS  —  PROTOTYPING  OF  CRISIS 
ACTIONS  SYSTEM  (CAS)  IMPROVEMENTS  WILL  BE 
ACCOMPLISHED  IN  A  LABORATORY  SETTING. 

I.  THE  SPECTRUM  OF  CRISIS 

Potential  crises  confronting  tho  United 
States  range  from  local  natural  disasters  to 
global  nuclear  holocaust.  For  natural 
disasters,  a  variety  of  local.  State,  and 
Federal  government  departments  and  agencies 
exist  to  confront,  contain,  and  control  them. 
At  the  international  level,  threats  and  crises 
are  orchestrated  by  the  National  Security 
Council  ayjtem  which  consists  of 
representatives  from  tho  Departments  of 
Defense  and  State,  Tho  Central  Intelligence 
Agency,  the  National  Security  Council,  and 
invited  individuals  with  specialized 
knowledge.  Some  of  theso  crises  can  be 
controlled  on  an  economic  level,  some  can  be 
contained  at  tho  diplomatic  level,  and  some 
require  attention  at  the  military  level. 

Figure  l  illustrates  the  spectrum  of  crisis 
and  relates  tho  nature  of  the  crisis  to  the 
consequence.^  of  the  event.  Increasingly,  the 
interest,  attention,  and  application  of  US 
military  forces  is  directed  toward  crisis 
management  of  terrorism  and  low  intensity 


conflict.  SecDef  Weinberger  noted  “  ...  these 
forms  of  ambiguous  aggression  have  become  so 
widespread  that  they  have  become  'the  warfare 
of  choice'  over  the  last  40  years."  * 


FIGURE  1.  INTERNATIONA!*  >CRISES: 
PROBABILITY  vs  RISK 


As  shown  in  Figure  2,  our  Government  has 
a  variety  of  offices  and  agencies  that  monitor 
and  participate  in  the  management  of  crisis. 
The  White  House  Situation  Room  Support  Staff 
and  tho  National  Security  Council  coordinate 
tho  flow  of  information  to  tho  President  from 
the  civilian  and  defense-related  crisis 
management  organizations.  The  Crisis 
Coordination  Center  supports  tho  Office  of  the 
Secretary  of  Defense  and,  with  tho  National 
Military  Command  Center  and  tho  World  wido 
Military  Command  and  Control  System  (wwmCCS), 
provide  tho  moans  for  tho  National  Command 
Authority  to  organize,  mobilize,  and  monitor 
the  deployment  of  US  forces. 


FIGURE  2.  CRISIS  MANAGEMENT 

AT  THE  NATIONAL  LEVEL 
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2,  CRISIS  AND  LOW  - INTENSITY  CONFLICT 

From  the  military  perspective,  crisis  is 
defined  as  -an  incident  or  situation  involving 
a  threat  to  the  United  States,  its 
territories,  and  possessions  that  rapidly 
develops  and  creates  an  condition  of  such 
diplomatic,  economic,  political,  or  military 
importance. to  the  US  Government  that 
commitment  of  US  Military  forces  and  resources 
Is  contemplated  to  achieve  US  national 
objectives."  2  In  this  context,  it  is  a 
precursor  to  Low  Intensity  Conflict  (LIC) 
which  has  been  characterized  by  General  P.F. 
Gorman,  former  CXNCUSSOUTHCOM,  as  "...  an 
interdepartmental  activity  conducted  under  the 
lead  of  the  Department  of  State  and 
coordinated  by  the  National  Security 
Council.-  3  and  defined  by  the  US  Aray-as  a  " 
...  limited  politico-military  struggle  to 
achieve  political,  military,  social,  economic, 
or  psychological  objectives.  It  is  often 
protracted  ars'd  ranges  from  diplomatic, 
economic,  psychosocial  pressures  through 
terrorism  and  insurgency.  Low  intensity 
Conflict  is  generally  confined  to  a  geographic 
area  and  is  often  characterized  by  constraints 
in  the  weaponry,  tactics,  and  level  of 
violence."  4 


represents  about  30%  of  the  total, ref erred  to 
by’MGen  Hyde.)  As  shown  in  Figure  5,  it 
becomes  apparent  that  the  trouble  spots  tend 
to  be  concentrated  in  .three  geographic  areas: 
the' Caribbean  Basin,  the  Middle -East,  and 
Southeast ' Asia . 
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In  a  review  of  278  International  Crises 
and  €27  Foreign  Policy  Crises  between  1929  and 
1979,  Brecher,  Wllkenfeld,  and  Moser  *  defined 
a  crisis  as  being  a  threat  to  basic  values 
with  a  finite  time  for  response  and  a  high 
probability  of  involvement  in  military 
hostilities,  as  shown  in  Figure  3,  a  crisis 
can  be  characterized  as  an  event  t^iat  exceeds 
the  ability  of  standard  operating  procedures 
to  handle  or  control. 

•  They  require  adjustments  to  normal 

procedures  due  to 

-  Magnitudes  of  the  issues 

-  Time  pressures 

-  Incomplete  information 

-  Conflicts  in  possible  responses 

»  Irreversibility  of  decisions 


FIGURE  3.  CHARACTERISTICS  OF 
NATIONAL  CRISIS 


FIGURE  4.  SELECTED  CRISES 


Furthermore,  the  locations  support  an 
analysis  by  Motley  7  where  he  defines  five 
characteristics  of  Low  Intensity  Conflict: 


MGen  J.P.  Hyde,  et.al.  6  described  the 
frequency  of' crisis  as  being  about  one  per 
year  between  old-1950  and  mid-1960.  During 
the  1970' s,  the  average  increased  to  three 
crises  per  year;  and  through  1986,  the  average 
number  of  crises  had  increased  to  six  per 
year. 

Figure  4  contain*  agisting  of  21  well- 
publicized  military  crises  that  the  US  has 
been  involved  in  over  x.he  past  26  years.  (This 


o  They  occur  in  the  Third  World; 
o  They  involve  the  pursuit  of  limited 
objectives; 

o  They  do  not  fit  within  traditional 
military  conventional  campaigns, 
o  They  may  involve  Soviet  proxies; 
o  They  do  not  require  mobilization  of 
additional  resources  beyond  those 
otherwise  maintained  cor  peacetime 
purposes. 
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As  illustrated  in  .figure  5,  an  analysis 
of  twenty-one  crises  directly  involving  the 
United  States  over  the';  past  twenty-six  years 
reveals  that  only 'two  (Berlin  Wall  and  Cuban 
Missile  Crisis)  also "involved •  the  USSR. 

As  designers  of  information' management 
systems  and  members  of  the  national- command, 
control,  communications,,  and  computer 
infrastructure,  we  are  all  too  familiar  with 
the  impact  of  incomplete  information, 
conflicts  between. possible  interpretations  of 
available  information,  and  the  requirement  to 
have  an  answer  ready  "yesterday"  that  will 
successfully  withstand  all  future  'second 
quessing'  or  'arm  chair  quarterbacking' .  The 
automated- systems  we  have  developed* to -support 
the  planning,  deployment,  and  management  of 
forces  in  a  conventional  war  may*' not  be  able 
to  support  the  crises  that  are  increasingly  a 
part  of  the  global' picture.  Today's  command 
center  staff  officers  and  their  counterparts 
at^  the  White  House  Situation  Room  and  the 
Department  of  State  are  faced  with  increased 
frequency  and  complexity  of  crisis  actions, 
terrorist  activity,  and  low  intensity, 
conflicts.  Figure  6  illustrates  the  functions 
performed  by  both  military  and  civilian 
analysts  during  a  crisis  situation. 


possible  military  options.  The  preferred 
option  is  then -conveyed  by  the  Chairman  of  th< 
JCS  (CJCS)  to  the  President  for  his 
consideration. 

The  JCS  are  supported  in -this  effort  by 
the  Organization  of  the  Joint  Chiefs  of  Staff 
(OJCS)  which  operates  the  National  Military 
Command  Center  (NMCC) .  Via  the  NMCC,  the  JCS 
are  kept  appraised  of  our  military  status 
(forces,  platforms,  weapons,  and- current 
situation)  by  commanders  in  the  field. 

When  a -military  option; to  resolve- a 
crisis  is  selected  by  the  President,  that 
option,  in  the  form  of  an  Execute  Order,  is- 
communicated  from  CJCS  via  the  NMCC  to  the 
Unified  and  Specified  commands. 

The  most  significant  element  within  the 
military  planning  process  is  time.  As 
described  in  the  Joint  Operation  Planning 
System  (JOPS)  there  are  two  method*  of 
military  planning:  deliberate  planning  and 
time-sensitive  planning.  Deliberate  planning 
is. the  process  used  when  time  permits 
development  and  coordination  of  plans  with 
numerous  organizations.  Time-sensitive 
planning  is  conducted  when  time  does  not 
permit  such  development  and  coordination:  as 
described  in  Reference  2,  the  Crisis-Action 
System  (CAS)  is  the  process  that  defines  the 
time-sensitive  planning  that  is  performed  by 
tho  JCS,  the  Services,  the  CXNCs,  and  other 
defense  organizations  in  order  to  devolop 
response  actions  during  time-constrained 
(i.e.,  crisis)  situations. 

The  Crisis  Action  System  (CAS)  focuses  on 
tho  military  aspects  of  a  crisis  from  its 
beginning,  to  commitment  of  forces,  to  the 
return  to  normal  operations.  CAS  is  supported 
in  its  operation  by  personnol,  procedures, 
hardware,  and  software.  For  CAS  to  function 
as  it  was  intended  in  tho  NMCC,  all  of  these 
components  must  operate  effectively. 

As  shown  in  Figure  7,  CAS  consists  of  up 
to  six  phases.  Depending  on  the  nature  of  the 
crisis,  cortain  phases  may  be  performed  in 
parallel  or  be  bypassed  entirely. 


The  systems  they  depend  upon  to  help  them 
cope  with  the  growing  throat  have  not  been 
designed  to  support  the  current  nature  of 
crisis  action  processing.  Current  budget 
restriction  and  priorities  combine  to  delay 
the  implementation  of  integrated  systems  that 
would  improve  thoir  ability  to  react  rapidly 
to  emerging  crisis  situations. 

3.  CRISIS  ACTION  SYSTEM 

The  President  makes  tho  decision 
regarding  which  opcion'vill  be/selected  in 
response  to  a  given  crisis.  The  option  ©ay  be 
economic,  diplomatic,  or  military,  or  some 
combination  of  the  three.  One  of  the  tasks  of 
the  Joint  Chiefs  of  Staff  is  to  review 
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when  is  erect  oceccs. 

national  sefcri ty  ispSlaf^  ^l^V 
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Section  <  below,  tbe  Jnist-Diraecem  a- 
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Service  laboratories  and  «»-  *?", 
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thin  £r“eo*«  effort  in  to  define  Or*  C» 
baseline.  All  candidate  !>*»«««»“«*“ 
then  be  cleared  in  terns  of 

perfomauce.  slocecrisas-blst-rleal-y 
involve  infomatlon  which  is.incccplece.  tbe 
CAS  will  be  studied  In  terns  of: 

1  the  lopact  of  data  irpnt- gcality 
(obsolescent,  lo*  Integrity! 

2.  the  inyact  of  data  input  qrality  jtco 
each,  too  little,  redundant,  conflicting! 

3.  The  need  to  reduce  CAS  respooae  tines 

y,o  areas  of  CAS  appear  to  be  inprortnent 
candidates,  nanely.  f«t  «ae  »£*?£*“' ’if 
and  infomatlon  nanageoent.  The  1 
involves  the  application  of  correct  display 
technology  (desktop  as  veil  as  large  *«*“•’ 
as  veil  as’ the  use  of  knowledge  engineering  to 
provide  expert  systen  support. 

Infomatlon  canagecent  vail  foco’  V” 
.ays  that  CAS  relates  intelligence 
and  operations  data,  and  the  design  of  the  CAa 
data-base  to  laprove  crisis  Information 
storage  ifld  retrieval e 


4.  JDL  WARFARE  SIKUIATIO.M  EFFORTS 

in  March  1S82,  the  Assistant  Sectetapf  <* 
Defense  for  Research  and  Developoent  (R(D! 
recomsendcd  establiahne,.t  of  a  doint 
Directorship  of  D00  laboratories  and  RtD 
Centers.  As  part  of  this  initiative,  the  JDL 
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FIGURE  3.  THE  JDL  SikfOXATiOai  HEIWORK 
(JDLKET) 

-he  ember  of  nodes  =ay  increase  in  tbe 
future.  Connectivity  i«l  ^ 

CCS/DISSDT  with  a  data  rate  c.  15,2  kilobits 
per  second,  fbe  differences  in  tbe 
representations  of  tbe  nodes  ~rigure  « 
indicates  that  one  node  (here  SSSC!  mat 
control  tbe  central  slnslatica  process, 

PASA  Is  an  cotgrovth  of  tbe  Jnterin 
Battlo  Croc?  Tactical  Trainer  (IEGTT)  e-fo— 
which  was  developed  tyWCaia  simlatien- 
based  training  aid  for  navy  cecnand  personnel. 
RDdA  provides  a  two-sided  interactive 
s imitation  of  a  large-scale  wargane.  » 
includes  node  Is  of  sehjcrs, 
paths,  forces,  «es?ocs,  navigation  systems, 
and  weather  conditions.  Presently 
incorporating  h*vy  force  charscteristlcs  and 
display  syebology,  the  sisalation  is  to  be 
revised  in  r/89  to  include  those  for  the  Arny 
and  Air  Force.  Figure  9  provides  a  0 

present  and  programed  capabilities  of  RESA. 
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cflstrricterd.  rss  tie  local  agylicstfsa^  sir 
Sjttes  xaiz&rsv'is  yaaezsutf  cm  *  scamd-elsec 
tsz  es ffyuccc-syaias  susi-^*  *  fACzr^Tzx-tZ -  end 
all  321A  warfare -s&mzlacicc  fmartircs  weds  i* 
ftfffsr»ci  cffl  that  system. 
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-  DisWJcl*3  w^wrisg  iaC?£9  (e.g.,  SjSC, 
KA/KJTZE.  EXOC,  OCCf!.  j5S) 


FJGURE9-  RESA;  JDOCTCFBStS  ACTION 
GENERATORS 


r;s  distrficMd  tycnticcj,  tie  ccsjcter 
sjstes  at  erne  soie  rill  actually  execute  tie 
aisalitka.  Because  cf  tie  erwsb; -e*er 
required  to  handle  a  aseusio  icrjlrbj  '307 
feroe  eltasta  and  vssk  jutlccs,  tie  OCA  code 
rill  ax  ie  able  to  art  aa  tie  central 
psoebaar  for  distributed  ope  rat  iocs.  It  is, 
bo*erer,  able  to  support  three  warkautieea  in 
local  code  opera t iocs. 


Regardless  of  where  tils  processor  Is 
located,  user  eccnaads  froa  all  codes 
participating  la  tie  simulation  will  be 
transmitted  over  Ccar/DISSST  to  tie  cestral 
processor.  At  that  location  (shown  la  Figaro 
6  to  be  at  R3SO  the  simulation  database  would 
be  maintained  and  siaalatloa  states  updated. 
Appropriate  changes  to  tie  database  resulting 
frees  cser  c demands  would  he  processed  and 
transmitted  back  to  the  participating  codes 
for  display  processing  and  local  database 
updating.  As  a  result#  although  the  operation 
appears  to  each  participant  as  a  distributed 
processing  system,  it  is  actually  a 
centralized  processing  system  with  renote 
display  terminals. 


Since  it  fs-i^emdeef  tier  tie  «*sfas* 
sSaglatfns  will  use  a  classified  datafese  *f 
ferae  ciencacs#  segsers#  rod  wsipszur#. eadb 
aod>*  regsirrs  a  cauni  icatjcgg  meessaty 
CH??fl54«S  for  ecca^s^aecgdlsg 
tsaasalisiscn  ever  tca/f-rfssr. 

5-  ^xraaasstAfifsc  cr  saz  set  sec® , 

-Tie  CCA  aerfe  ca  IZCSZ:  its  iee-s 
cscibtfshed  t»  a eras'*  Ccnsacd  Center 
Zajireeriag  laboratory  frgTF^J  -in  Stream#  V*. 
The  hardware  cad  software  cccf LyrcatSea  being 
dsylenented  fex  the  x>  53S5?  code  is  stores 
in  Seale  1-  This-  ceef  fgsrat  ioa  will  provide 
tie  capability -cf  tie  code  to  me  TZfA  to 
sLaslare  a  warfare  emrircriBisc  in  tie  sane  way 
that  ft  cam  be  done  at  SG5C#  MfC,  CTT^.'-acd 
SW- 
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The  CCA  node  currently  consists  of  three 
work  stations,  one  serving  as  controller  and 
tie  other  two  representing  National  Military 
Cccrrand  System  (I9CS)  personnel-  Each 
workstation  includes  a  color  graphics 
terminal,  three  monochrome  terminals  end  a 
cser  interface  terminal.  In  the  DCA 
applications#  RESA  will  be  used  as  an  event 
driver#  generating  a  crisis  environment  within 
which  S££S  personnel  would  function.  The 
controller  workstation  would  be  used  to 
control  Blue  and  Red  forces  as  wel)  as  to 
inject  other  events  (i.e.#  intelligence 
inputs,  decisions  by  the  Rational  Command 
Authorities  (UCA)#  and  actions  taken  by  other 
nations);  the  controller  would  thus 
orchestrate  the  events  which  stimulate  the 
other  workstation  operators  (the  crisis 
response  teas) to  take  action.  Figure  10  is  a 
representation  of  tne  DCA  node,  indicating  the 
capabilities  that  are  currently  available  ic 
the  CCEL  to  support  the  CAS  enhancement 
investigative  process. 
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FIGURE  10.  DC*  RODE  TEST 
REPHESEHTAT10H 
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FIGURE-T1.  COMMAND  CENTER  ENGINEERING 
LABORATORY  (CCEL) 


.tehee  exercises  are  being  conducted,  the 
three  work  stations  -ill  £«  relocated  into  the 
CocsandT Center  Testbed  Facility  area.  As 
indicated,  the  CCEL  has  in-place  decision  aids 
which  will  be -used .during  DCA  simulations 
activities  to  prototype  candidate  ieproyeaents 
to  cas.  -These  decision  aids  are  described* 
below  in  terms  of  their  proposed  use  fin  CAS. 

-  Use  of  the  Large  Screen  Hall  Display 
(L$VD)  and  associated  caaera/projection 
systems  (video  copy  camera,  flatbed  scanner, 
etc.)  to  support  teleconferencing  and 
briefing,"  This  would  facilitate  distribution 
of  graphical  and  textual  eatorlal  existing  in 
hardcopy  fora  or  displayed  on  a  terminal  to  a 
nuch  wider  audience  for  Slscusslon/declslon- 
making  purposes  during  conferences  and 
briefings. 


-  Cre  of  wecti?f<S7«  ^riefra? 

to  s^pat  tie  crisis  :««  fajbriefiag 
tie  cCO-as  well  as'^riefitgs  iS-th*  ^ 
acs.  This  waold  expedite  the  prefasitiw  cl 
tiae-  sensitive  brief  im$sln  appropriate 
icat*tff'.*»S-53*  cl  color-  Results  coM  t?se 
split,  screess,  storyboard-type  layouts,  mixing 
cl  text  andgraptics,  etc-  Change*/ 
reemnaesded  i£=ri=g  tie'  briefimgracld  be  made 

.ra-tbe-lly  pursmamt  to  carrying, the  briefing 
forward  toitbe  oext  level  cl  review. 

^  Cse  cl  message  text  formatting  to 
sedoce  crapositico  time  as  well  a* 

transmission,  time,  (rcr  example,*»riag 

crisis  situations,  ©sly  selected  data'  are  cl 
significance;  even  though  aro/text,  feraatted, 
there* is  a  need  to  impose  stricter  loraattnng 
to  faprore  the  storage  and  retrieval  process) . 

-  Use  of  table-top  coopcter  systems  to 
perform  backside  processing  of  input  data  in 
a" variety  of  ways  to  support  the greeds  of 
different  levels  of  decision-makers.  At  one 
end  of  the  spectrum,  staff  personnel  might 
only  be  interested  in  ticking  war-lighting 
capabilities  of  selected  forces;  at  the  other 
rad,  bighrlevel  planners  need  a  natural 
language  interlace  to  access  databases  in 
everyday  English. 

-  Use  of  la'ser  video  disk  systems  to 
provide  high-quality  maps  and  other  graphics 
(personalities,  force  elements)  for  display 
purposes  to  CAS  action  officers  or  to 
planners.  This  information  could  then  be 
directly  input  into  executive  briefing  systems 
to  assist  in- the  decision-making  process. 

-  Use  of  methods  to -lose  the  data 
carried  in  HIS  (tneacCS  Information  System)  and 
other  crisis  management  system^  (e.o.,  Khlte 
House,  Crisis  Coordination  Center,  and  the 
intelligence  community)  .  MS  is  the 
codemization  program  for  wttsCCS  AOP  that 
includes  updates^to  the  CAS. 

6.  CAS  GAMING  AT  THE  DCA  NODE 

Like  the  other  JDLKE1  nodes,  the  DCA  node 
will  operate  in  both  a  local  and  a  distributed 
or  "netted"  basis.  During  both  operations, 
the  DCA  node  will  function  as  echelon-above- 
CiKC,  namely,  as  the  NCA,  JCS,  and  NHCC  staff. 


During  distributed  operations  in  FY89, 
when  JDIfCT  ij  expected  to  be  operational, 
present's  plans  are  to  exercise  a  scries  of 
European,  Central  American,  and  Torcan  area 
scenarios.  Although  the  scenarios  will  focu? 
on  cchelons-below-ciKC,  that  is,  conventional 
warfare,  tho,  scenarios  will  allow  DCA,  using 
military  personnel  with  appropriate  )WCC 
operational  skills,  to  execute  the  KKCC  role. 
The  scenarios  will  be  modified  to  emphasize 
CAS  participation  when  the  COA  is  being 
determined  and  betore  actions  are  taken  by  the 
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supported  asd  srypwxisg  ccmaaiera 
I  represented  by  ctber  codes)  to  esscete  tic 
G2CtoJ>  la  additiea,  tie  sce=ario;>rtU  allow# 
tie  5®CC  toissoe  additional  alerts  aad  plans 
as  a  resolt  ofreiasges  to  tie  situation. 

Tbc  has is  scesa r 1 cs  will  be  defined  by 
nose,  ?J©C,  ail/or  CECCK.  These  scenarios 
vill  provide  general  icfomtiori  ti.e.,  tie 
crisis  situations,  the  tactical  situations, 
force  lists,  workstation  assignments  at  each 
code,  control  procedures/, and  analysis 
objectives!.  OCA  -ill  specify  those  changes  to 
tie  basic  scenarios  that  -ill  alio-  the  DCA 
code  to  represent  the  crisis  response  team, 
JCS,  and  MCA.  Participation  -ill  include 
requesting  information  frea,  arid  transmitting 
orders  to,  the  supported  and  supporting 
ccrwands  specified  xn'tfce  basic  scenarios  as 
-ell  as  conducting  investigations  into  the  use 
of  CAS  decision  aids  and  information 
management  techniques  that  are  of -special 
Interest  to  DCA. 

Injection  of  DCA  node  cess ages  for 
transadssien'to  other  nodes  -ill ’be  pre¬ 
coordinated  in  the  warfare  simulation  plans  as 
-ill  the  responses  that  cay  be  required  to  be 
transmitted  to  the  DCA  node  by  the  other 
nod«3.  When  messages  are  required  to  be 
transmitted  according  to  the  scenario  script, 
the'  planning  portions  of  the  messages  -ill  be 
provided;  the- personnel  involved  -ill  then 
Input -the  dati/tjiae  groups,  perform  minor 
editing,  and  add  a  section 'of  the  message  like 
the  mission  statement  or  decision.  At  the  DCA 
node,  the  emphasis  -ill  bo. on  the  procedures 
crisis  response  team  personnel  invoke  during 
scenario  execution  and' the  ways  to  enhance  the 
procedures.  The  function  of  the  controller 
position  -ill, be  to  ensure  that  no  actions  are 
taken,  that  -ill  obviate  continued  play  of  tho 
scenario  as  planned. 

Typical  messages  to  w  sent/received  by 
the  DCA  node  during  distributed  warfare 
simulation  exercises  are  as  follows: 

a.  Send  "Requests  for  CINC 
Assessments"  to  supported  command 

b.  Send  "Requests  for  Input  Reports"  to 
supporting  commands 

c.  Receive  "CISC  Assessments*  and 
"Input  Reports*  . 

d.  Send  "Warning  Order*  to  supported 
and  supporting  commands 

o.  Receive  "Recommended  COA*  from 
supported  command  in  the  fora  of 
"Commander's  estimate" 

f.  Send  "Alert  Order"/reccive  "OPORD" 
from  supported  command 

g,  Sond  "Execute  Order"  to  supported 
»  and  supporting  commands 


7.  71X2  SEOTESCISG  CT  CRISIS  EVESTS 

Planned  JDIA'ET  warfare  scenarios  will  be 
tactical  in  nature  in  order  to  satisfy  the 
needs  of  the  Service  laboratories.  Initial 
scenario  events  -ill  cause- tensions  between 
the  US  and  the -other  countries  involved,  to 
escalate.  That  is,  they  will  define  the 
nature  of  the  crisis  and  are  thus  the  natural 
objects  of  the  Crisis  Action  System.  (CAS) . 

The  CCA  node  -ill  be  the  primary  player  at 
this  time.  The  DCA  node  -ill  play  a  back-up 
role  to  the  other  nodes  after  the  Execution 
Order  has  been  issued  and  the  actual  warfare 
simulation  is  in  progress. 

Typical  events  that  would  occur  during 
two  days  of  scenario  time  are  presented  in 
Figure  12.  During  Day  1,  the  DCA  node  would 
be  fully  manned  and  the  other  nodes  would 
monitor  scenario  play  on  a  watch -team  basis. 
During  Day  2,  the  roles  would  reverse;  the 
other  nodes  would  be  fully  manned  and  the  DCA 
node  would  employ  a  watch  team. 


FIGURE  12.  DCA  NODE  ACTIVITIES  FOR 
A  DISTRIBUTED  SCENARIO 


8.  SUMMARY 

To  recap  the  way  ir.  which  DCA  will 
participate  in  distributed  warfare  simulation 
over  JDUiET,  the. following  actions  will  bo 
accomplished: 

a.  RESA  will  be  used  to  sot  tho  crisis 
event  stage  by  describing  tho 
distribution  and  capabilities  cf 
platforms,  sensors,  and  weapons 

b.  Tico-sensitivo  and/or  lengthy 
"pessago  traffic  will  be  proscripted, 
and  injected  manually  be  control 
personnel  into  the  simulation  at  tho 
appropriate  times 

c.  Measures  cf  Effectiveness  (MOEs) 
that  are  unique  to  DCA  interests 
will 'be  developed  for  the  CAS 
process.  It  is  not  expected  that 
RESA  will  be  modified  for  this 
purpose 
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d.  Decision  aids  and  information 

management  aids  will  be  implemented 
at  the  DCA  node  so : that  their  use  is 
transparent  to  the  Service 
laboratory  nodes. 

Table  2  presents^  siilestone  schedule  for 
DCA  activities  over  the  next  two  fiscal  years. 

RESA  augmentation  refers  to  the  adapting 
of  scenario  play  to  handle  tine-  sensitive' 
and/or  lengthy, messages.  WBSVs  present  llnit 
of  eight  lines  of  narrative  per  message  will 
be  codified  by  a  canual  work -around  technique. 
It  is  anticipated  that  significant  efforts 
will  be  required  initially  to  train  observers, 
participants,  and  test  direction  personnel  as 
well  as  to  prepare  test  plans  and  ^develop 
scripts  and  supporting  scenario -applications 
software  relevant  to  DCA' a  needs. 
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XABLE  2.  MILESTONE  SCHEDULE 


As  shown,  DCA  tests  on  a  local  basis  will 
be  conducted  monthly.  Because  of  the  amount 
of  pre-and  post-test  coordination  Involved 
with  distributed  tests,  it  is  expected  that 
DCA  node  participation  would  be  limited  to 
once  per  quarter. 


Assuming  that  JDINET  connectivity, 
funding,  and  resources  are  provided  as 
planned,  we  look  forward  to  presenting  an 
update  on  our  activities  at  next  year's  JDL 
Research  Symposium 
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The  Knowledge-Based  Battle  Management-Testbed  Project 

Captain  Jeff  Grimshaw 

Air  Force  Systems  Command 
Rome  Air  Development-Center 
Griffiss  AFB.-NY 


1.0  Abstract.- 

The  development  of  expert 
systems  designed  to  help  plan  and 
execute  tactical  strike  missions 
has  led  to  the -need  for  some  type- of 
testing  environment.  To  this  end,  a 
testbed  is  being  -'developed,  to 
exercise  battle  management-  expert1 
systems  individually  and  im>concert 
with  other  systems.  In  addition  to 
providing-  a  framework  for 
evaluating  these  expert  systems, 
the  testbed-  will  establish  database 
and  message  passing  protocols  so 
that  future  expert  systems  can 
concentrate  on  reasoning  over  the 
data  and  not  on  the  input/output 
issues. 

2.0  Introduction. 

Expert  system  technology  has 
matured  to-  the  point  -that  -systems 
-can  be  built  to  assist'  the 
battlefield  commander.  These 
systems  use  geographic,  data, 
offensive  and  defensive  .force 
strengths,  and  operational  policy  to 
assist  the  user  in  making  plans  and 
decisions.  Most  battlefield 
commander  decision  aids  have  been 
designed  for  independent  use.  No 
mechanisms  are  provided  for 
sharing  or  requesting  information 
between  multiple  systems. 


Furthermore,  the  development  of 
each  new  system  has  required  the 
building  (or-  rebuilding)  of 
input/output  facilities,  both 
between  the  system  and  user  and 
between  the  system  and  any 
required  databases. 

Another  limitation  has  been  the 
static  method  of  testing  new 
systems.  Typically,  an  expert 
system  is  presented  a  well  planned, 
stationary  problem,  A  more 
realistic  evaluation  would  b  e 
.performed  by  presenting  the  system 
with  a  dynamic  problem,  requiring 
decision  processes  while 
controllable  (e.g.,  human  input, 
alternate  expert  systems,  .etc.)  and 
non-controllable  (e-.g.,  equipment 
malfunction,  enemy  operations, 
etc.)  actions  are  continually 
modifying  the  problem  domain. 

To  address  these  issues,  the 
Knowledge-Based  Battle 
Management  (KBtBATMAN)  Testbed 
Project  w as  initiated  (7).  As  its 
name  implies,  the  purpose  of  this 
project  was  to  develop  a  testbed 
for  evaluating  various  battle 
management  technologies.  The 
testbed  was  partitioned  into  four 
major  components: 
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Figure  1:  KB-B  ATMAN  Testbed  with  Battle  Management  Decision  Aids 


1:  a  database  containing  problem 
domain  data, 

2.  an  interface  between*  expert 
systems  and  the  testbed, 

3.  a  router  for  alerting  systems 
to  changes  in  the  database,  and 

4.  an  object-oriented  simulation 
to  provide  a  dynamic 
environment. 


These  four  components  will  be 
addressed  in  subsequent  sections. 
An  overview  of  the  testbed  is 
shown  in  Figure  1.  The  Database, 
Interface,  and  Router  components 
make  up  the  Framework.  The 
Framework  suffices  in  providing 
battle  management  expert  systems 
with  a  standardized  access  to 
Database  information  as  well  as  a 
mechanism  for  communicating 
between  expert  systems.  During  an 
operational  exercise,  changes  to 


536 


the  Database  would  be  made  - based 
.  upon  post-mission  debriefmgs, 
intelligence  reports,  forward  'air 
icontroller  reports,  etc.  The 
Simulation  was  developed  for  nori- 
exercise  testing.  This  component' 
was  included  to  provide  a 
realistically  changing  environment, 
extending  the -basic  Framework  into 
a  Testbed. 

The  Framework  provides  for 
asynchronous  operation  of-  expert 
systems  which  may  be  distributed 
over  heterogeneous  hardware,  and 
software.  This  architecture  is 
similar  to  the  Blackboard  .artificial 
intelligence  approach  [5],  The 
system  operates  in  an, 
opportunistic,  dataflow  manner 
whereby  problems  or  partial 
solutions  are  posted  to  the 
database  for  further  refinement. 
The  problem  handling  capabilities 
of  the  various  systems  are 
maintained,  implicitly,  by  .the 
router.  As  information  useful  to 
the  systems  becomes  available,  the 
router  makes  appropriate 
notifications.  The  intent  is  to  have 
very  low  coupling  between  the 
expert  systems.  The  resulting 
architecture  is  modular,  allowing 
for  the  easy  addition  or  removal  of 
decision  aids. 

The  initial  thrust  of  this 
research  has  been  to  develop  a 
testbed  oriented  towards  tactical 
air  operations.  However,  the 
overall  system  has  been  developed 
generically  so  that  in  the  future, 
ground  force  operations  may  be 


included.  This  will  be  important 
since  air  and  land  missions  will 
need- to  be.rsplanned  and  executed  in 
concert. 

3.0.'  Battle  Management  Decision 
Aids. 

Battle  management  decision 
aids  are  .being  developed  to  assist 
commanders  in  various  aspects  of 
an  air-land- war  in  Central  Europe. 
These  expert  systems  include  A 
Multi-Level  Planning  System 
(AMPS)  (developed  by  MITRE- 
Bedford),  TAC-OB  (developed  by 
MITRE-Washington),  and  aircraft 
route  planners. 

-The  AMPS  project  is  a  follow-on 
from  the  KNOBS  Replanning  System 
(KRS)  developed  at  MITRE  (2).  These 
systems  were  designed  to  plan 
tactical  air  strikes  based  on 
friendly  resources  and  prioritized 
enemy  targets. 

The  purpose  of  TAC-OB  is  to 
provide  the  mission  planning  expert 
systems  with  a  prioritized  target 
list.  TAC-OB  accomplishes  this  in 
a  three  step  process.  Initially,  the 
sensor  reports  are  retrieved  from 
the  Database  using,  the  Router  and 
sent  to  TAC-OB.  Secondly,  these 
reports  are  reformatted  and 
compared  to  current  enemy  order  of 
battle  and  targets.  This  results  in 
an  overall  assessment  of1  threat 
status.  Lastly,  this  threat  status 
is  prioritized  based  upon  capability 
and  vulnerability,  and  then  sent  to 
the  Database. 
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Mission  route  planners  are  being 
developed  for  use  at?.the  Squadron 
level  'foY  selecting  ingress,  to  and 
egress  from  the  target.  Due  to  the 
complexity  of  the  task,  route 
planners  are  usually;  semi¬ 
automatic,  ’working  with,  the-  pilot 
[1]’.  Depending  upon  the  time  and 
resources  available,  future  route 
planning  systems  may  need- to  be 
more  automated,  tailoring  their 
results  to  the  preferences  of  the 
individual  pilots. 

4.0  Database. 

The  Database  system  was 
originally  developed  by  MITRE 
(Bedford)  to  support  AMPS.  The 
purpose  of  AMPS  is  to  demonstrate 
the  use  of  knowledge-based 
techniques  in  the  planning  of 
tactical  aircraft  strikes  in  Central 
Europe.  Information  needed  by  this 
system,  and  retained  in  the 
Database,  includes: 

A.  US'  Tactical  Air  Command  base 
locations. 

B.  Locations  of  specific  fighter 
squadrons. 

C.  Aircraft  type  and  number  at  each 
squadron. 

D.  Aircraft  and  weapon  capabilities. 

E.  Enemy  airbases. 

F.  Enemy  aircraft  deployments. 

G.  Enemy  surveillance  radar 
locations. 


H:  Enemy  surface-to-air  missile 

(SAM)  site  locations. 

In  addition  to'  resource  and 
threat  data,  the  Database  provides 
a  "scratch-pad"  for  expert  systems 
and  a  repository  for  their  results. 
For  instance,  the  "scratch-pad" 
would  provide  a  place  for  the 
planner  to  post  tentative  plans 
while  it  checks  for  constraint 
violations.  The  Database  is  also  a 
repository  for  expert  system 
results  such  as  planned  missions, 
flight  routes,  and  prioritized  target 
lists. 

While  MITRE-Bedford  continues 
the  development  of  AMPS,  MITRE- 
Washington  has  proceeded  on  the 
development  of  the  Framework. 
Part  of  the  Framework  development 
involves  the  evolution  of  the  AMPS 
database  into  the  independent 
Database.  This  is  necessary  since 
the  Database  will  need  to  support 
diverse  types  of  expert  systems, 
not  just  AMPS. 

The  information  in  the  Database, 
although  unclassified,  is  of 
sufficient  resolution  to  -exercise 
AMPS.  The  information  needed  by 
the  Simulation  is  read  in  from  the 
Database  and  assumed  to  be 
correct.  This  provides  the  model 
for  "ground  truth,"  the  "real"  state 
of  the  environment.  Changes  to  the 
Database  (e.g.,  aircraft  availability, 
target  status,  etc.)  will  be 
accomplished  by  the  Simulation. 
While  the  Simulation  maintains 
ground  truth,  uncertainty  may  be 
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introduced  to  the  data  posted  .to  the 
Database.  For  instance,  target 
status  based  upon  post-mission 
debriefings  may  not  be  as  accurate 
as  that  provided  by  reconnaissance 
missions. 

The  Database  system  consists 
of  ASCII  "'•.datafiles  that  may  be 
accessed  relationally.  The  specific 
model  used  was  implemented  as  a 
custom  built,  single-access, 
relational  database  management 
system.  This  system  supports  the 
standard  functions  including 
addition,  deletion,  and  projection  of 
data. 

5.0  Interface. 

The  purpose  of  the  Interface  is 
to  translate  between  individual 
knowledge-based  system  protocols 
and  the  common  message  protocol 
used  by  the-  Framework.  The 
Interface  provides  two  way 
communication  between  expert 
systems  and  the  Framework,  as 
well  as  a  method  for 
communicating 

requests/infprmation  between 
inter-dependent  knowledge-based 
systems.  Development  of  the 
Interface  is  being  conducted  by 
MITRE-Washington  and  is  currently 
in  an  early  stage. 

6.0  Router. 

The  purpose  of  the  Router  is  to 
handle  requests  between  each 
expert  system  and  the  Database  or 
other  expert  systems.  In  addition, 


the  Simulation  will  access  the 
Database  through  the  Router,  both 
for  receiving  mission  Air  Tasking, 
Orders  (ATOs)  and  for  sending  post¬ 
mission  results  (e.g.,  Bomb  Damage 
Assessments  (BDAs),  aircraft 
losses,  etc.). 

The  Router  "orchestrates”  the 
operations  of  the  Framework, 
providing  an  intelligent  method  of 
controlling  system  operation. 

7.0  Simulation. 

The  purpose  of  the  Simulation  is 
to  simulate  the  execution  of 
planned  Tactical'  missions  against 
defended  targets  and  return  the 
appropriate  results.  Tactical 
missions  include  air  strikes, 
refueling  missions,  and 
reconnaissance  missions.  Future 
extensions  of  the  Simulation  will 
support  ground  operations  such  as 
tank,  artillery,  and  troop 
deployments. 

7.1  Simulation  design. 

An  object-oriented  approach 
was  selected  for  the  Simulation. 
This  approach  has  several 
advantages  over  a  conventional, 
procedural  approach.  First  and 
foremost,  simulation  naturally 
lends  itself  to  the  notion  of  objects 
arid  operations.  Each  object, 
whether  it  be  an  aircraft,  base,  or 
town,  has  certain  attributes  which 
could  be  inherited  from  superclass 
objects.  For  instance,  a  specific  F- 
15  has  the  same  class  attributes  as 
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all  K-'i.5s,Ja's  well  as  those  of  all 
.aircraft,  and  all  moving  objects, 
etc?-  Defining  these  attributes- pnce 
at  the  appropriate?  J.eVel  makes 
system  development  much  clearer 
and  easier.  The  second  reason  for 
using  an  object-oriented  approach 
is  that  messages  may  be  used  to 
communicate  between  objects. 
Since  objects  in  a  simulation  are 
continually  "talking”  between 
themselves,  it  is.  important  that 
the  technique  used  to  simulate  the 
objects  provides  an  explicit 
message  passing  mechanism. 
Thirdly,  since  objects  change  (e.g., 
move,  die,  etc.)  based  upon  message 
passing,  simulations  take  on  a 
dataflow  characteristic  similar  to 
that  of  the  real  world.  Aircrews 
receive  orders,  plan  routes,  fly 
missions,  occasionally  get  shot 
down,  effect  targets,  and  regroup 
at  the  home  base.  As  this  script 
evolves,  planned  and  unplanned 
changes  in  the  simulation,  (e.g., 
saturation  of  air-defense  systems 
or  mechanical  problems),  are 
handled  appropriately  by  behaviors 
without  explicit  control  by  a  "main 
program."  (A  behavior  is  procedural 
code  tied  to  an  object  or  object 
class.) 

7.2  Simulation  Implementation 

The  Simulation  was 
implemented  in  the  Enhanced  ROSS 
in  Common  Lisp  (ERIC)  object- 
oriented  programming  language 
developed  by  1  Lt  Mike  Hilton  at  the 
Rome  Air  Development  Center 
(RADC)  (4).  ERIC  has  two  major 


improvements  over  ROSS:  an 
enhanced  clock  facility  and  a 
Common  Lisp  implementation.  The 
clock  facility^  ^provides  a 
mechanism'’ -for  controlling  objects 
temporally.  The  clock  itself  is  an 
ERIC  object  and  views  time  as 
discrete  points.  Thus,  activities 
that  are  to  be?  performed  in  the 
future  get  posted  "on"  the  clock 
based  upon  a  real  numbered  time. 
These  activities  may  be  set  to 
occur  at  a  fixed  time  or  as  an 
offset  to  the  current  time.  The  time 
of  the  clock  may  be  set  and  then 
incremented  using  the,;  "tick” 
command.  Tick  advances  the  clock 
a  user-defined  amount  of  time. 
After  time  has  advanced,  all 
messages  posted  on  the  clock  queue 
for  execution  before  the  current 
time  are  removed  from  the  queue 
and  broadcast  to  the  objects. 
Objects  with  behaviors 
corresponding  to  these  messages 
then  , perform  the  required 
operations.  Since  managing  an 
event  queue  can  require  a  lot  of  CPU 
time,  mechanisms  for  expediting 
this  function  are  important. 

Managing  the  event  queue 
consists  primarily  of  inserting  new 
events  at  the  proper  location  on  the 
queue  and  retrieving  the  next  event 
for  execution.  While  retrieving  the 
next  event  is  trivial,  searching  the 
queue  for  insertion  may  be  much 
more  time  consuming.  In  addition, 
it  can  be  expensive,  to  remove 
events  that  should  not  occur.  To 
keep  the  event  queue  short,  and 
thereby  reduce  queue  processing, 
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ERIC  uses-  multiple  'queues.  Thus, 
each  object  contains  its  own-  event 
queue  while  -the  ERIC  clock 
maintains  the  next'  event  for  each 
object.  As  an  event  occurs,  ERIC 
takes  the  next  scheduled  event  on 
the  object’s  event  queue  and  posts 
it,  if  such  an  event  exists.  This 
provides  two  benefits.  First,  events 
can  be  inserted  and/or  deleted  from 
short  object  event  queues  speeding 
up  the  process.  Second,  when  an 
object-  "dies,"  the  system  need  only 
delete  the  object's  first  reference 
on  the  system  event  queue  and  then 
delete  that  particular  object's 
event  queue.  This  also  speeds  up 
the  simulation. 

As  its  name  implies,  ERIC  was 
written  in  Common  Lisp. 
Specifically,  Symbolics  Common 
Lisp  was  used.  The  selection  of 
Common  Lisp  was  to  make  the , 
simulation  language  more  portable 
between  various  platforms. 
Competing  with  this  desire  io 
standardize  was  the  concern  over 
execution  speed.  Simulations  are  by 
nature  computationally  intensive 
programs.  A  simulation  of  flights 
of  aircraft  flying  against  air 
defenses  requires  continual 
analysis  of  who  can  "see"  whom  and 
what  actions  or  responses  are 
required.'  As  the  number  of  objects 
in  the  simulation  increases,  the 
process  can  become  bogged  down. 
To  help  alleviate  this  problem,  ERIC 
was  modified  to  take  advantage  of 
the  Flavors  capabilities  of  the 
Symbolics  Lisp  environment.  While 
this  approach  has  speeded  up  the 


simulation  process,  portability  to 
non-Symboliqs  Lisp,  machines  has 
been  affected.  One  solution  that 
would  provide  the  best  of  both 
worlds  would  be  to  re-implement 
ERIC  using 'the  Common  LISP  Object 
System  (CLOS),  once  the  standard 
for  this  object-oriented  system  has 
been  agreed  upon.  This  should 
-provide  the  speed  of  Flavors  with 
the  portability  of  Common  LISP. 

7.3  Map  Display  System 

Early  in  this  project  it  became 
clear  that  an  object-oriented 
cartographic  system  would  be 
useful,  allowing  weapon  systems  to 
query  geographic  entities  for 
information.  For  instance,  Army 
convoys  need  road  and  city  data 
when  traversing  cross-country.  If 
a  road  is  impassable,  some 
mechanism  must  be  provided  so 
that  real  or  simulated  commanders 
can  develop  alternate  plans.  Such  a 
system  has  been  developed  [3J.  The 
resulting  cartographic  database  is 
read  in  during  system  initialization 
as  multiple  ERIC  objects.  Thus, 
commanders  can  check  road  status 
as  easily  as  checking  the  status  of 
a  mechanized  battalion. 

The  loaded  cartographic  ERIC 
objects  also  provide  ground-truth 
for  the  KB-BATMAN  Testbed. 
Certain  types  of  data  within  the 
Database  will  always  be  accurate, 
(for  example  locations,  of  bridges), 
however  variable  data  may  be 
inaccurate  (such  as  the  status  of 
bridges).  For  example,  consider  the 


591 


airstrike  that  destroyed  its  target 
but  failed  to  return  to.  base. 
Assuming,  that  the  aircrews  had- not 
been  debriefed  -win-flight;  \only  the 
simulation’  would,  know  the  target 
had  been  destroyed.  'The  Database 
would,  reflect  inaccurate  data.  In- 
order  to  update  the  "Database,,  the 
real  or  simulated  commander  might: - 
have  to  order  a  reconnaissance 
mission.  Operating  the  Database 
with  incomplete  and/or  incorrect 
data  will  further  test  the 
robustness  of  the  battle 
management  expert  systems. 

The  resulting  system  generates 
an  interactive,  variable  resolution 
map  that  can  be  incorporated  into 
applications  programs  requiring 
cartographic  support.  Highlights  of 
the  system  include:  feature 
abstraction  (ability  to  turn 
features  on  and  off),  unconstrained 
pan  and  zoom,  and  mouse  sensitive 
cartographic  features.  The  system 
runs  on-  a  Symbolics  Lisp  Machine 
equipped  with  a  color  graphics 
display  [3]. 

The  cartographic  features  are 
actually  ERIC  classes  and:  objects. 
The  classes  include:  airstrips, 
country  borders,  bridges,  dams, 
heliports,  lakes,  obstructions, 
powerlines,  railroads,  roads,  road 
intersections,  towns,  and 
waterways.  Object  locations  may 
be  retrieved  in  units  applicable  to 
latitude/longitude,  Universal 
Transverse  Mercator  (UTM),  or 
Military  Grid  Reference  System 
(MGRS).  The  data  for  the 


cartographic  features  were 
originally  taken  from  Joint 
Operations  Graphics  (JOG)  charts. 
These  charts  provided  unclassified 
data  of  sufficient  precision 
(approximately  one  kilometer)  for 
the  Simulation. 

8.0  Status 

Portions  of  the  Testbed  have 
begun  to  take  shape.  With  the 
maturation  of  AMPS  has  come  the 
specification  and  development  of 
the  Database.  These  contractual 
efforts.  have  progressed 
concurrently  with  in-house  RADC 
work  on  the  Simulation  and  Map 
Display  System. 

The  "first-cut"  of  the 
Simulation  was  completed  earlier 
this  year.  This  version  can  send 
airstrike  missions  as  ordered  in 
ATOs  and  coursely  simulate  enemy 
air  defenses  including  fixed  a  id 
mobile  SAM  sites.  Upon  completion 
of  the  missions,  "aircrews”  provide 
PDA  reports  as  well  as  aircraft 
attrition  numbers. 

Currently,  the  Router  and 
Interface  components  are  not 
implemented.  Now  that  the 
Simulation  is  "flying”  and  other 
decision  aids  are  being  developed, 
these  components  will  need  to  be 
created. 

9.0  Future  Work. 

While  MITRE-Washington 
continues  to  work  on  the  Router  and 
Interface  development,  in-house 
RADC  work  will  center  on  extending 
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the •  capabilities  of  the  Simulation. 
This  will  include  the  ability  to 
simulate  reconnaissance  and 
refueling  missions,  *  as  well  as 
further  refinement  to  the  air- 
defense  network.  An  additional 
area  of  research  will  concern  the 
encapsulation  of  offensive  and 
defensive  tactics  doctrine  into  the 
Simulation.  While  recent  work  has 
centered  on  getting  the  system  up 
and  running,  future  effort's  wiil 
need  to  concentrate  on  the 
Simulation's  fidelity,  including  the 
area  of  doctrine. 

Additional  in-house  RADC.  work 
will  address  user  interface  issues. 
Specifically,  .  a  requirements 
analysis  will  be  performed  next 
year  to  identify. -the  best  ways  of 
communicating  with  the  user. 
Applicable  technologies  include 
various  natural  language,  speech 
generation  and  recognition,  and 
graphics  techniques. 

Future  contractual  efforts  will 
also  investigate;  land  operations, 
with  emphasis  on  how  these  impact 
air  .operations.  As  .an  example,  if 
enemy  ground  attacks  have  overrun 
friendly  airbases  or  friendly  army 
forces  have  destroyed  high  .valued 
enemy  targets,  what  effect  will 
this  have  on  the  mission  planning 
process  of  AMPS  or  the  target 
prioritization  of  TAC-OB?  The 
ground  war  would  also  be  of 
interest  to  the  mission  route 
.planning  system  since  flying  over 
enemy  held  territory  is  not 
advisable.  This  expansion  to  the 


Simulation  should  provide  a  more 
realistic  environment  for  testing 
the  decision  aids. 

There  will  also  be  follow-on 
work  to  develop  a  more  robust 
database.  The  new  system  will  be  a 
relational  database  using  ORACLE. 
The  purpose  of  this  effort  is 
provide  the  Testbed  with  a  larger, 
more  realistic  database  which  will 
provide  an  environment  for 
addressing  large  scale  and  real¬ 
time  database  issues. 

10.0  Conclusions. 

Development  of  the  KB-BATMAN 
Testbed  yvill  provide  a  foundation 
for  testing  battle  management  aids. 
This  testing  will  help  improve  the 
accuracy  and  robustness  of  decision 
aids  designed  for  either  operational 
or  research  uses.  In  addition  to 
exercising  individual  aids,  the 
Testbed  will  provide  a  mechanism 
for  investigating  synergistic 
effects  of  multiple  expert  systems 
reasoning  over  the  data  in  the 
Database. 

This  project  has  also  provided 
an  opportunity  to  use.  knowledge 
engineering  techniques  to  the 
simulation  problem  domain. 
Simulations  readily  lend 
themselves  to  an  object-oriented 
implementation.  The  eventual  use 
of  tactical  domain  knowledge  in  the 
simulation  will  help-  provide  a 
realistic  testbed  for  stressing 
decision  aids. 
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Eo*  a  Afreet  relatfeship  Sa«a 
cilft*j7  cfoafw  erf  taed  aad  ten] 
CC2J.  la  reepgtitfca  cf  tier  fast,  KID  fees 
*Sf!ei  a  cissipo-oriemief  caseept  for  CZ 
srsiea  plaauisg.  Ti*  Kiritiae  Kij-r  K70 
<a«ai«5  ire  mslog  j  tsp-dMa  missios- 
erfeased  caa;:  vfcich  coheres  C2  gste 
Civility  ctfeate  Kits  12  system 
capabilities  to  detenriae  if  tie  £2  system 
is  ssppprtiog  ^entices  to  tie  degree 
retired-  (2  systea  capability  ebjectires 
ire  derived  froa  analysis  of  tie  operational 
mission.  C2  systea  capabilities  ire  issessed 
froa  iaeiysis  of  the  £2  systea  elements. 
«d!5«  cf  £2  systea  faororeaests  ere 
derolcjed  as-aeede d  to  resolve  identified 
problems.  As  overall  Tsprovemect  plea  is 
developed  consistent  with  a  KATO  C2  systea 
9sai  architecture.  Ibis  paper  addresses  the 
C2  plsaaiog  concept- as  esed  by  the  maritime 
rosy  irfs. 


rwrei’H”’0  Treaty  Organizatior 

IIUTO)  there  exists  a  ccccaod  and  control  (C2) 
infrastroctore  which  is  owned,  operated,  and  main¬ 
tained  by  SATO.  This  iofrastrocttire  enccepasses 
*hat  sight  be  called  the  theater  level  of  ccensand 
The  theater  level  of  ecaand  is  coaprised  of  those 
cocaaods  which  are  internationally  staffed.  Typi¬ 
cally,  these  coaoands  range  froa  the  Major  SATO 
Oxcincers  (MCs)  dom  to,  bat  not  including,  the 
level  of  command  staffed  entirely  by  national 
personnel  (e.g.  Corps,  Kings,  and  Task  Croups). 

P-agairesents  for  icp roving  the  ailitary  C2 
infrastructure  are  specified  bi-annually  by  the 
three  Major  SATO.  Coaanders:  Supreae  Allied  Coa- 

»;fer(Eu>???.!5SaK,i  s'JFre»  Allied  Coraander 
Atlantic  (SAOAST),  and  Allied  Commander  in  Chief 
Channel  (CihCHAS)  in  the  Trf-KXC  Cosnand  and  Con¬ 
trol  Plan  (Trf-KSC  C2  Plan).  In  1936,  SATO’S 
Defence  Planning  Coraft tee  decided  that  proposed 
improvements  to  SAIO’s  C2  systems  should  be  justi¬ 
fied  in  terns  of  the  operational  slssions  which 
fi?58  swPP°r£-  I"  response  to  SATO  direc¬ 

tion,  the-  SSCs  have  adopted  the  concept  of  aission- 
oriented  C2  planning  for  preparation  of  the  next 
edition  of  the  Trl-KlC  C2  Plan. 


.  .This  paper  presents  tie  major  aspects  cf  tie 
mssico-erfected  approach  being  Ersed  fey  tie  Kri- 
ttse  «Cs.  SAOAT7  aad  CHGStt.  £sp&asts  is  ce 
process  asd  framework  rather  than  resalts. 


ITS  regies  CBiarTnD  PlAuxiv*.  pgnrrcc 

*  six  step  placaicg  process  for  plea  derelsp- 
aes:  ws  agreed  to  ty  tie  MEs  in  Tate  1537.  The 
steps  io  the  process  are: 

-Operational  iieiocii  Development 
-C2  Sepaireaeats  Definition 
.Current  C2  Systea  Assessment 
-Solatia:  Options  Definition 
-laproreaeot  Plan  Development 
-C2  Plan  Cbordic3ticn/Iiipact  Assessnent 

Eads  cf  these  steps  is  discussed  Selca. 

cpaAncata.  ragsest  DsracgxfjT 

The  basic  fraaework  for  addressing  C2  ia- 
proieaeuts  is  derived  froa  an  analysis  of  the 
SATO  scission.  The  SATO  Conceptual  Silitary 
frameworks  (OS’s)  define  aission  components  and 
functions  and  establish  their  relationships.  The 
otrs  are  a  long  range  forecast  of  requirements 
for  silitary  systems  and  their  supporting  ele- 
cents;  seme  statements  of  aaritiae  C2  needs  are 
found  in  the  Karitiae  Conceptual  Silitary  frare- 
wrk  (SOt?).  An  early  decision  was  siade  to  con¬ 
strain  the  fraaework  elements  of  the  cission- 
orieoted  approach  used  in  the  Tri-KSC  C2  plan  so 
that  the  qission,  key  aission  components,  and 
nilitary  functions  would  be  those  defined  by  the 
OfFs. 

The  operational  fraaework  consists  of  stra¬ 
tegic,  key  aission  coaponent,  and  military 
function  elements.  The  operational  fraaework 
addresses  these  operational  elements  within  the 
context  of  four  levels,  or  types,  of  conflict: 
tension  and  crisis,  conventional  conflict.  Unit¬ 
ed  nuclear  conflict,  and  general  nuclear  war. 
Although  oany  of  the  significant  events  are 
actually  threshhold  events  between  levels  of 
conflict,  each  level  of  conflict  is  defined 
uniquely  in  such  a  way  that  significant  events 
are  associated  with  a  given  level  of  conflict  so 
that  the  unique  conflict  stresses  placed  on  any 
systea  cay  be  highlighted  and  all  the  stresses 
of  conflict  are  addressed.  The  operational 
fraaework  can  be  illustrated  as  a  series  of 
oatrices.  The  operational  fraaework  reflects 
the  aission  reguiresents  for  all  the  KKCs.  The 
foundation  of  the  fraaework  is  the  strategic 
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Figure  1  Strategic  Matrix 

.  The  strategic  objectives  matrix  is  essen¬ 
tially  a  four  oy  four  relationship  that 
portrays  the  basic  ccmrcod  objectives  in 
reference  to. levels  of  conflict  and  levels  - 
of  operational  performance  as  illustrated  in 
figure  1.  The  too  dimensions  are  a  reflection 
of  the  capability  £o  invest  in  increased 
performance  of  forces  and  supporting  systems 
in  the  sax  conflict  environaent  or  to  invest 
in  survivability  of  forces  and  support  as  the 
stress  (conflict  enri consent)  changes  or  to 
invest'  in  sane  castration  of  performance  and 
survivability  that  best  suits  the  cocnand.  It 
is  desirable  for  C2  system  analysis  that  the 
different  operational  blocks  reflect  significant 
breakpoints  on  CZ  sys tear: investment.  The  high¬ 
est  level  of  operational'perforaance  or 
capability  objective  represents  the  desired 
silitary  objectives  as  stated  in  various 
operational  plans.  However,  desired  capabil¬ 
ities  cay  not  always  be  achieved  for  force 
structure,  financial,  or  technological  reasons. 
Therefore,  capability  objectives  which  are 
subsets  of  the  desired  are  derived  to  provide 
a  yardstick  by  which  achievement  can  be  gaged. 

It  is  desirable  that  the  lower  order'capability 
objectives  be  alternative  concepts  of  operation. 
The  current  philosophy  portrays  the  lowest  level 
as  one  of  preparation  and  self-defense;  the  next 
highest  level  as  one  of  predooinately  defensive 
operations  iron  relatively  fixed  positions;  the 
nextihighest  level  as  one  of  highly  cobile, 
flexible  defensive  operations;  and  the  highest 
level  of  capability  (desired  goal)  as  one  of 
flexible,  dynamic  operations  characterized  by 
offensive  actions.  Any  set  of  capability 
objectives  in  one  level  is  Incorporated  auto- 
catically  in  the  next  higher  level  of  capability 
objectives.  The  horizontal  dicensions  of  the 
strategic  aatrix  represents  the  change  In  conflict 
stress  defined  by  level  of  conflict  paraaeters. 

The  strategic  objectives  matrix  portrays  a 
possible  range  of  independent  yet  related  actions 
and  is  designed  to  illustrate  the  iopact  of  those 
actions  in  teres  of  force  and  system  investments. 


Operational  actions  executed  to  achieve 
strategic  objectives  are  defined  by  fey  Mission 
Components  (DCs).  The  conceptual  military 
frameworks  define  fline  key.  mission  component. 
The  maritime  caomanSs  are  interested,  primarily, 
in  five  of  those  key  mission  components: 
military  contribution  to  crisis  management, 
sea  control,  maritime  power  projection,  control 
and  protection  of  Allied  shipping,  and  flexible 
response  beyond  conventional  defense.  Attain 
and  maintain  a  favorable  air  situation  is  of 
direct  interests  sore  European  land-based 
elements  of  the  maritime  mcs. 

The  key  mission  components  characterize  the 
warfighting  aspects  throughout  the  spec tram  of 
conflict.  Performance  capability  objectives  are 
developed  for  each  key  mission  component.  Th¬ 
ieve!  scf  capability  general  lyre  fleet  the  same 
philosophy  as  that  of  the  strategic  objectives 
matrix  in  the  vertical  dimension.  Level  of  con¬ 
flict  aspects  are  not  portrayed  individually  for 
each  key  mission  component,  because  those  are 
determined  by  the  strategic  level  of  conflict 
with  which  the  key  mission  component  is  asso¬ 
ciated.  The  key  mission  components  are 
applicable  to  all  levels  of  conflict. 
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Figure  2  Key  Mission  Components 

Figure  2  portrays  the  key  mission  component 
capability  objective:  matrix  andillustrates  an 
example  relationship  to  a  given  set  of  strategic 
objectives.  The  individual  contribution  of  any 
key  mission  component  will  be  different  for  the 
different  levels  of  performance  and  level  of  con¬ 
flict.  Thus,  for  each  set  of  strategic 
objectives  there  is  a  key  mission  component 
profile.  At  the  same  time  the  mission  components 
are  not  unique  unto  themselves,  but  have 


considerable  interdependence  in  a  conflict 
enviromwit.  For  eatable,  theca  parti  ity  to 
accomplish,  successfully,  the  protection  and 
control  of  shipping  would  be  very  difficult* with¬ 
out  sole  execution  of  a  sea  control  capability. 
Related  to  key  aission  coapcnents  a  re;  the 
ailitaty  functions. 

Military  functions  caaprise  those  essential 
activities  which 'Contribute  to  or  directly  sup¬ 
port  any  given  key  aission  coaponent.  They;are 
also  defined  by  the  conceptual  ailitaty  frame¬ 
works.  For  exasple,  antisubaarine  warfare  is 
defined  as  a  ailitary  function  and  is  an  integral 
Part  of  the  sea  control  key  aission  coaponent; 
Military  function  capability  objectives  are -- 
developed  in  the  sane  way  as  objectives  are 
developed  for  key  aission  components.  Military 
function  capability  objectives  profiles  exist 
within  key  aission  coaponent  structures  siailar 
to  the  way  aission  coaponent  profiles  exist 
within  the  strategic  objectives  matrix. '  Nil  itary 
functions  are  analyzedros  integral  parts  of  the 
key  aission  components  rather  than  individually 
.for  this  first  assessaent  effort  of  the  aoritic* 
KICs.  ... 

The  strategic  objectives,  key  aission 
coaponent  objectives,  and  ailitaty  function 
objectives  fora  the  backbone  of  the  operational 
fraaework.  Relationships  .between  key  aission 
cosponents  and  ailitaty  functions  are  established 
in  the  conceptual  ailitaty  fraaeworks;  however, 
the  relationships  between  strategic,  key  aission 
coaponent  and  ailitary  functions  are  further 
aaplified  for  the  aaritiae  effort.  Military 
functions  are  defined  as  integral  operational, 
supporting  operational,  or  general  supporting, 
key  functional  aspects  are  included  in  expanded 
definitions  for  key  aission  couponents.  The 
aaritiae  coomands  tend  to  consider  the  prosecu- 
tion  of  wartiae  tasks  in  terms  of  campaigns  and 
canpaign  areas  rather  than  specific  aission 
couponents.  However,  caapaigns  tend  to  be 
associated  with  one  or  more  of  the  NATO  specified 
key  aission  components.  Thus,  an  initiaUanxtysis 
based  upon  key  aission  components  would  seen  to  be 
satisfactory  for  addressing  the  key  issues 
associated  with  C2  for  maritime  commands.  Some 
expansion  of  the  key  aission  component  objectives 
is  necessary  to  determine  the  nature  of  C2 
objectives  associated  with  operational  objectives. 

COMMAND  AND  CONTROL  REQUIREMENTS  DEFINITION 

C2  objectives  or  requirements  are  derived 
from  operational  objectives  by  analyzing  the  total 
context  of  the  decision  process  as  Illustrated  in 
Figure  3,  While  capability  objectives  may  be 
derived  for  any  set  of  operational  factors 
(strategic,  mission,  function,  or  task),  they  are 
derived  only  for  the  key  aission  components  for 
the  first  maritime  effort.  The  derivation  of  C2 
objectives  is  accomplished  by  evaluating  key 
factors  of  force  effectiveness,  the  battle 
environment,  key  decisions  made  at  various  com¬ 
mand  levels,  and  the  C2  activities  associated 
with  the  decision  process.  Key  C2  Implications 
are  derived  from  an  evaluation  of  these  para¬ 


meters.  Eventually  sissicn  specific  Cm  system 
objectives  are  established  by  evaluating  ,Jie 
entire  decision  process  4n  the  context  of 
operations  supported  and  C2  implications 
previously  derived. 


C3 


Figure  3  Deriving  Cosmand  and 
Control  System  Objectives^ 

The  key  force  factors  (sometimes  referred  to 
as  key  measures  of  force  effectiveness)  address 
those  operational -activities  (or  functions)  which 
have  the  most  important  contribution  to  any  of  the 
operational  -levels- of  capability  for  any- given  key- 
mission  component.  Tte  I »ey  force  factors  are 
expansions  of  the  operational  level  of  capability 
descriptions.  These  factors  may  include  the  key 
functions  which  best  describe  the  operational 
requirement.  These  key  force  factors  are  quanti- 
fied  to  the  degree  possible.  For  example,  "con¬ 
duct  antisubaarine  warfare  to  a  distance  of  600 
nautical  miles  from  sea  or  shore  bases"  night  be 
a  key  factor  in  achieving  a  given  level  of  the 
sea  control  mission  component. 

Battle  environment  addresses  the  nature  of 
the  battle  which  influences  C2  and  is  associated 
with  two  strategic  elements:  level  of  performance 
factors  and  level  of  conflict  factors.  At  the 
highest  level  of  defined  operational  performance, 
the  battle  environment  tends  to  be  defined  as 
dynamic  in  nature  with  both  defensive  and  offen¬ 
sive  aspects  where  the  offensive  aspects  are 
emphasized.  A  high  degree  of  integration  ofj 
effort  is  required  between  commands,  both 
vertically  and  laterally,-, at  the -highest  level 
of  operational  capability.  Consequently,  plan¬ 
ning  and  force  execution  tend  to  approach  real 
time.  On  the  other  hand,  at  the  lowest  defined 
level  of  capability,  operations  tend  to  be  defined 
as  autonomous  with  limited  lateral  coordination. 
The  lowest  levil  of  capability  would  be  exercised 
from  plans  previously  developed  in  peacetime. 

The  battle  environment  also  addresses  the  stresses 
imposed  by  the  selected  level  of  conflict: 
tension,  conventional,  or  limited  nuclear.  Key 
characteristics  of  the  battle  environment  are 
stated  for  each  operational  and  conflict  level. 

Types  of  command  decisions  tend  to  be  a 
functfon  of  level  of  command.  "Coemand"  refers 
to  all  commands  from  the  senior  theater  commander 
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to- the  fo?ce  or  unit  commander.  Two  levels  of 
corned  are  identifiedfor  use  in  the  current 
analysis:  theater  and  tactical.  The  theater 
_ level' of  coenand  inqludes<the  MajorNATO  Com- 
~ Banders  (HNCs),  the  <5ajor  Subordinate  Comnanders 
(HSCs),  the  Principal  Subordinate  Commanders 
(PSCs),  and  other  specified  NATO  international 
commanders.  The  tactical  level  of  cooinand 
inc'.  jdes  the  coamanders  directly 'associated  with- 
, tactical  forces  which  are  normally  national  even 
though  they  may  come  under  control  of  NATO 
commands.  Decisions  oade^by  the  theater  levels 
of  command  tend  to  be  strategic?  in  nature  and 
deal  with  resource  allocation  and  long-/ange 
actions.  Decisions  at  the  tactical  levels  of 
coonand  tend  to  he  more  closely  associated  with 
direction  and  control  of  forces  on  a  day-^o-day* 
basis.  The- nature  of  the  decision  is  likely  to 
influence  the  type  of* information  required  and  the 
timeframe  for  evaluation  and  planning.  Only  the 
theater  level  of  command  will  be  specifically 
addressed  io  the  Tri-MNC  C2  Plan.  However,  it 
is  necessary  to  evaluate  the  decision  process 
at  all  levels  of  command  because  the  decisions 
and  associated  C2  activity  are  highly  inter¬ 
related  across  the  entire, chain  ofcommand  from 
theater  commander  to  unit  coamander. 

Four  sets  of  C2  activity  are  defined: 
assess,  plaii,v direct/control,  monitor*  The 
assess  activity  contributes  to  analysis  of 
friendly  and  enemy. capability,  evaluation  of 
alternate  courses  of  action,  and  comprehension 
of  the  battle  picture.  Plan  activity  includes 
the  generation  and  selection  of  options;  plan¬ 
ning  may  be  formal  and  written  or  informal. 
Direct/control  activity  comprises  those  actions 
directly  associated  with  tasking  forces  and 
maintaining  effective  continued  force  activity. 

The  monitor  activity  includes  those  actions  taken 
to  gain  information  about  friendly  activities, 
enemy  activities,  the  environment,  and  mission 
progress.  The"  characteristics  of  the  particular 
activity  (e.g.  real-time  option  generation  and 
evaluation)  are  determined -by  the  level  of 
operational  capability  supported.  Ideally, 
activity  descriptions  would  be  developed  for 
each  corrroand;  for  the  current  effort,  generic 
descriptions  of  key  activities  are  developed 
for  the  tiefineo  theater  and  tactical  coaroand 
levels. 

Evaluation  of  the  foregoing^key  factors,  to 
include  the  specified  operations,  reveals  certain 
key  C2  implications -for  each  level  of  operational 
capability.  Key  C2  implications  are  derived  for 
three  levels  of -conflict:  tension  and  crisis, 
conventional  conflict,  and  limited  nuclear  War. 
These  key  implications  tend  to  address  those 
factors  which  are  critical  or  essential  from  a 
C2  perspective  to  the  successful  accomplishment 
of  operations.  Implications  are  dervied  for 
source  data  (primarily  energy  intelligence), 
information  processing,  information  exchange 
between  comaands,  and  facilities  to  support 
coaroand  and  planning.  Implications  for  proce¬ 
dures  are  also  evident  but  are  not  explicitly 
stated  because  the  effort  is  oriented  toward 
physical  support  elements.  Key  02  implications 


developed  in  this  fashion  should  agree  with  those 
developed  by  other  studies  or  those  intuitively 
obvious  to  the  command-  The  involvement  of 
operational  and  technical  staff  members  in  this 
process  is  essential  to  obtain  the  correct 
operational .perspectives' and  definition  and 
to- ensure  the  implications  derived  are,  in  fact, 
real  values.  Derivation  of  C2  system  implications 
is'a  precursor  to  the  derivation  of  C2  system 
capability  objectives. 

Evaluation  of  the  total  operational  context 
and’ associated  C2  factors  is  used  to  develop  C2 
system  capability  objectives.  Specific  C2 -system 
capability  objectives  are  developed^for  each  key 
mission  component  and  for  each  level  of  operation¬ 
al  capability  within  the  mission  component.  The 
first  derivation  of  objectives  results  in  a  set 
of  first  order  C2  system  capability  objectives 
which  are  stated *in  operational  terms.  For 
example,  ".Command  and  control  information  system 
(CCIS)  to  generate  and  evaluate  employment 
options  in  real  time"  may  be  one  system  objective. 
"Very  high  capacity  communications'  to  support 
large  volumes  of  secure  data  and  video  trans¬ 
mission"  may  be  a  communications  system  objective 
within  the  set  of  C2  system  capability  objectives. 
System  capability  objectives  are  developed-and 
stated  for  the  four  sys4 physical  elements: 
war  headquarters,  cotnruhi  cat  ions,  command  and 
control  information  systems  (CCIS),  and  sensors/ 
source  data  (for  warning  installation).  A  caveat 
is  needed  here.  Sensors  are  primarily  a  national 
responsibility.  For  the  most  part,  only  sensors 
associated  with  air  defense  operations  are 
acquired  as  NATO  equipment.  However,  fusion 
systems  will  be  procured  under  NATO  infrastructure 
funding.  The  term  "source"  is  used -to .portray  the 
vital  need  for  sensor  data  even  though  such  data 
must  be  a  national  input  into  the  NATO  intelli¬ 
gence  system.  Any  assessment  of  capability  will 
necessarily  address  the  capability  to  provide 
adequate  data;  however,  the  solutions  to  resolve 
deficiencies  will  address  only  those  system 
elements  which  can  be  acquired  by  NATO.  The  C2 
capability  objectives  provide  an  operational 
basis  for  assessing  the  ability  of  the  C2  system 
to  support  specific  operational  objectives  and 
missions. 

COMMAND  AND  CONTROL  SYSTEM  CAPABILITY  ASSESSMENT 

The  C2  system  capability  objectives  provide 
an  operationally  oriented  basis  for  assessing  the 
capability  of  the  C2  system.  More  detailed  C2 
system  capability -objectives  are  derived  from  the 
first  order  operational  statements  by  using  a 
defined  standard  set  of- system  attributes.  For 
example,  connective^,  capacity,  and  reliability 
are  defined  performance  attributes  for  physical 
systems.  The  degree  of  performance  associated 
with  any  given  attribute  changes  as  the  level  of 
operational  capability  changes.  Survivability 
attributes  such  as  electronic  survivability  are 
also  defined.  In  relation  to  the  operational 
structure, ’performance  attributes  tend  to  be 
vertically  related,  while  survivability  attributes 
tend  to  be  horizontally  related.  The  use  of 


standard  attributes,  operational  and  system, 
allows  .consistent  eyajuation.of  capability. 

The  C2  systea  physical  elements  must  be 
cataloged  and  described.  'Each  command  reviews, 
those  system  elements  that  support  the  command 
and  describes  the  capability  of  those  elements 
in  terms -of  contributing  physical  systems  " 
(e.g.  transmission  media,  switches,  AD P  equip- 
aent,  bunkers)  and  the  attributes  of  the 
individual  physical  systems  (e.g.  reliability, 
survivability).  A  C2  system  physical  element 
descnptivevcatalog  is  being  developed  and 
will  be  maintained  and  issued  as  a  centrally 
controlled  data  base.  The  physical  systems 
descriptions  provide  a  means  for  comparison 
to  the  desired  goals  stated  in  the  capability 
objectives.  *- 


Figure  4  C2  Capability  Assessment 

TJe  capability,of  the  C2  system  to  support  a 
given  level  of  mission  capability, objective  is 
assessed  by  comparing  the  capabilities  cf  the 
physical  elements  with  the  Capabilities  needed 
as  stated  in  the  capability  objectives. 

Cataloged  capabilities  descriptions  of  the 
physical  systems  tend  to  reveal  the  level  of 
operational  capability  a  particular  system  can 
support.  Some  comparisons  will  be  multifaceted. 
For  example,  the  cap^ility  of  communications 
elements  must  be  asse  sed  by  evaluating 
individual  components  (e.g.  transmission  media, 
switching,  services)  and  the  aggragate  of  those 
components  (e.g.  networks).  The  assessment  by 
comparison  process  is  not  a  -cookbook"  type 
evaluation.  Considerable  military  operational 
and  technical  judgment  must  be  used  in  determining 
the  capability  of  physical  elements  to  support  a 
JvfJf  c3pabf1lty  level  and  the  aggragate  capability 
of  the  physical  elements  to  provide  the  necessary 
and  -sufficient,  support  required.  Assessment  is 
performed  independently  for  each  level  of  conflict 
so  that  stress  or  survivability  factors  are 
readily  evident. 

The  comparison  of  C2  system  capabilities  with 
C2  system  capability  objectives  indicates  the 
degree  to  which  the  C2  system  can  support 
operational  objectives  and  the  deficiencies  in 
capability  to  support  any  given  level  of 
operational  capability,.  The  deficiencies  are 
portrayed  in.both  operational  and  technical  terms. 
Based  upon  compand  priorities,  improvements  to  C2 
system  capabilities  can  be  developed  to  provide 


The  degree  of_C2  sysfeo  support  required  by  the 
•strategy  -and  force  structure. 


Improvements  to  the  C2-system  will  be 
developed  by  constructing  improvement  packages 
consistent  wjth  an  overall  architectural  goal. 

The  C2  system  architecture  is  a  description  of 
the  major  structure  or  design  features  of;a 
group  of  interrelated  and  interconnected  systems, 
subsystems,  equipment,  devices,  components  or 
other  elements.  The  NATO-Conmunications  and 
Information  Systems  Agency  (NACISA)  is  respon- 
sible  for  development  of  the  overall-NATO  C2 
system  architecture.  C2  system  improvement  packages 
developed  by  the  commands  must  be  consistent  with 
the  overall .NATO  system  architecture.  The  concept 
Of  developing  packages  is  new  in  the  NATO  planning 
environment.  Packages  are  sets  of  logically 
related  system  projects  designed  to  achieve 
specific  mission,  functional,  or  regional  goals. 

The  construction  of  C2  system  improvement 
packages  can  be  accomplished  in  a  series  of 
logically  related  steps.  Initially,  system 
requirements  are  established  by  analysis  of 
operationai  needs.  Operational  objectives  are 
estdbl  ished  by  the  contn^nd  end  the  current 
capability  is  evaluated  to  determine  ability  to 
support  operational  objectives.  The  identifi¬ 
cation  of  deficiencies  is  basically  the  mission- 
oriented  assessment  previously  discussed.  A 
vital  factor  roust  be  considered  in  the  develop¬ 
ment  of  improvements  to  the  C2  system;  this 
factor  should  be  considered  even  during  the 
assessment.  The  command  must  account  for  the 
capability  to  satisfy  operationai  objectives  with 
the  force  structure,  both  current  and  proposed, 
in  an  environment  of  scarce  resources,  it  is 
essential  that  the  C2  system  be  consistent  with 
the  force  structure;  that  is,  it  should  provide 
the  capability  to  support  operationai  objectives 
equal  to  the  force  capability  to  accomplish 
operational  objectives,  but  not  more.  Once 
deficiencies  to  support  the  forecast  force 
structure  are  determined,  the  development  of 
system  solutions  may  progress. 


Figure  5  Developing  C2  System  Improvements 
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C2  system  physical  element  improvement 
projects  are  developedto  solve  specific 
problems.  The  design  of  nevi  or  additional  CZ 
system  physical  element  capability  considers 
the  potential  of  various  means  of  satisfying 
requirements.  Consideration  is  given  to 
expansion  or  modification  of.existing.or 
programed  System  elements,  hew  ysl* 
design  is  suggested  where  required.  Consid¬ 
eration  is  also,  given  to  the  cse-of  comon¬ 
user  components  or,  alternately,  dedicated 
user  components.  Package  development  also 
entails  an  examination  of  multiple  miss'0" 
requirements  and  solutions,  for  exaaqile, 
the  capability  developed  to  support  one  set 
of  key  mission  component  objectives  may -also 
be  applicable  to  another  key  mission  component 
set  of  objectives  with  some  marginal^  increase 
or  addition  in.perfomance.  ,Baael);Wo?  , 
cocmand  perspective  and  emphasis,  physical 
element  improvements  will  be  9«>“P<!d  i" 
logically  related  packages.  It  is  likely  that 
some  packages  will  be  NATO-wide  coimon-pscr  sets. 

The  initial  improvement  package  development 
will  be  unconstrained  by  budget  considerations 
and  will  address  the  capability  needed  to 
provide  the  required  C2  support^to  the  forecast 
force  structure.  Subsequent 'tradeoff  analys  s 
will  be  conducted  based  upon  forecast  resources 
and  review  of  the  most  cost-effective  means  of 
providing  capability  resulting  in  a  resource 
constrained  set  of  improvement  packages.  The 
development  of  a  resource  constrained  improve¬ 
ment  plan  will  depend  upon  both  resource  con¬ 
straints  and  command  mission  emphasis. 

IMPMWfHENT  PLAN  DEVELOPHENT,_ 
CQOROINATlilN  AND.  IMPACT  ASSESSMENT 

The  development  of  improvement  plans  will 
be  multi-faceted.  Each  of  the  MNC  subordinate 
regional  coaands  will  develop  regionally 
oriented  C2  system  improvement  plans  which  will 
be  included  in  the  final  Trl-KNC  C2  Plan.  HNCs 
will  coordinate  the  efforts  of  their  subordinates. 
Coordination  between  HNCs  will  occur  throughout 
the  planning  process.  The  HNCs  wii]  *«1«P  a 
joint  C2  system  improvement  plan  which  enccm- 
passes  all  the  requirements  for  the  military 
portion "of  the  C2  system  once' the  regional 
plans  have  been  submitted.  Continuous  coordi¬ 
nation  between  HNCs,  their  subordinates,  and 
desigru ted  NATO  agencies  will  be  essential  for 
developing  both  the  comon  user  and  dedicated 
user  aspects  of  the  plans. 

The  assessment  of  the  Impact  of  C2  system 
improvements  on  mission  objectives  is  integral 
to  the  development  of  a  resource  constrained 
improvement  plan.  Operational  obj ect 
reviewed  and  priorities  established  Jor 
mcnt  to  specific  mission  components  » 

development.  Resources  are  applied  to  satisfy 
priority  requirements  and  packages  tailored  to 
both  the  need  and  available  resource.  Packages 
are  developed  with  specific  change  to  support 
operational  capability  in  mind,  ^us,  the 
operational  impact  of  the  improvement  plan  is 
(mediately  evident. 


Efforts  by  the-NATO  commander  will  culminate 
in  the  publication  of  the  Tri-MNC  C2  p'an>  JJj’f  . 
C2  Plan  will' state  the  military  command  and;control 
requirements;  current  deficiencies  in  capability 
to  meet  requirements;  time-phased,  resource  con- 
strained  proposals  to  implement  improvements;  and 
the  capability  achieved  to  support  operational 
goals. by  implementation  of  those  proposals. 

CONCLUSIONS 

The  mission-oriented  approach  to  C2  planning 
is  being  introduced  into.the  NATO  C2  planning 
activity.  The  maritime  Hajor  NATO  Commands  have 
chosen  to  institute  a  structured  approach  which 
compares  C2  system  capability. objectives  with 
achieved  C2  system  capabilities  to  determine  the 
ability  of  the  C2. system  to  support  any  given 
level  of  operational  capability-.  Planning  is 
directed  toward  evaluation  and  improvement  of 
capability  to  support  specified  key  mission 
components.  The  current  planning  effort  is 
directed  toward  improving  the  C2  system  for  the 
theater  level  of  commands;  however,  tactical 
requirements  and  the  interfaces  between  theater 
and  tactical  C2  systems  are  considered  to  provide 
an  accurate  view  of  total  NATO  C2  capability  to 
support  the  NATO  missions.  Improvements  to  the 
C2  system  for  the  theater  level  of  cormand  will 
be  reflected  in  the  Tri-HNC  02  Plan.  A  cechan  sm 
for  recommending  improvements  to  the  C2  systems 
supporting  the  tactical  level- of  command  is  yet 
to  be  developed.  A  salient  feature  of  the 
particular  maritime  approach  is  the  ability 
to  conduct  successive  iterations  at  Oreater 
levels  of  detail  once  an  evaluation  identifies 
kev  issues.  In  summary,  the  most  important 
aspect  of  the  mission-oriented  approach  by  the 
maritime  HNCs  is  the  ability  to  relate  C2 
system  requirements  and  capabilities  to  specific 
mission  capabilities  on  an  always  consistent 
basis. 
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